Security researchers have discovered an expansive backlink marketplace designed to help threat actors get malicious web pages ranked higher in search listings. Fortra’s Intelligence and Research Experts (FIRE) found the “HaxorSEO” or “HxSEO” operation on Telegram and WhatsApp. It offers… Read More "Researchers Uncover “Haxor” SEO Poisoning Marketplace"
DOJ recovered $52M in False Claims Act for cyber settlements, signaling tougher enforcement over contractor cybersecurity representations. For years, many government contractors treated cybersecurity compliance as a technical checklist, important, certainly, but often siloed within IT departments. That mindset is… Read More "DOJ Expands False Claims Act Enforcement Into Cybersecurity"
The Hacker NewsFeb 11, 2026Identity Security / Threat Exposure Intentionally vulnerable training applications are widely used for security education, internal testing, and product demonstrations. Tools such as OWASP Juice Shop, DVWA, Hackazon, and bWAPP are designed to be insecure by… Read More "Exposed Training Open the Door for Crypto-Mining in Fortune 500 Cloud Environments"
“Compute, storage, and network scale are no longer sufficient differentiators at the enterprise board level,” said Sanchit Vir Gogia, chief analyst at Greyhound Research. “The real leverage now sits in who owns visibility across workloads, identities, entitlements, exposure paths, and… Read More "EU clears Google’s $32B Wiz acquisition, intensifying cloud security competition"
A view of the H2 2025 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts 16 Dec 2025 • , 2 min. read The second half of the year underscored just… Read More "ESET Threat Report H2 2025"
A Chinese national has been sentenced to two decades behind bars for his part in a global crypto-investment fraud scheme which cost victims over $73m. Daren Li, 42, who is a dual national of China and tiny Caribbean state St.… Read More "US Court Hands Crypto Scammer 20 Years in $73m Case"
Cyble analyzes expanding OTP/SMS bombing ecosystems using high‑speed APIs, SSL bypass, and cross‑platform automation. RESEARCH DISCLAIMER: This analysis examines the most recent and actively maintained repositories of OTP & SMS bombing tools to understand current attack capabilities and targeting patterns.… Read More "SMS & OTP Bombing"
Microsoft on Tuesday released security updates to address a set of 59 flaws across its software, including six vulnerabilities that it said have been exploited in the wild. Of the 59 flaws, five are rated Critical, 52 are rated Important,… Read More "Microsoft Patches 59 Vulnerabilities Including Six Actively Exploited Zero-Days"
WAVESHAPER functioned as the primary backdoor, establishing remote access and enabling additional payload delivery. HYPERCALL operated as a downloader, retrieving secondary components such as HIDDENCALL, which provided further command execution capabilities. This staged deployment allowed the threat actor to expand… Read More "North Korean actors blend ClickFix with new macOS backdoors in Crypto campaign"
Once again, data shows an uncomfortable truth: the habit of choosing eminently hackable passwords is alive and well 20 Jan 2026 • , 3 min. read ‘123456’ continues to reign supreme as the most commonly-used password among people across the… Read More "2025’s most common passwords were as predictable as ever"
