A ransomware affiliate known as ‘hastalamuerte’ has revealed operational details about a group called The Gentlemen, shedding light on its tactics, techniques and internal disputes. New research by Group-IB, published on March 19, provided rare insight into how the ransomware-as-a-service (RaaS) group operates,… Read More "Ransomware Affiliate Exposes Details of ‘The Gentlemen’ Operation"
Researchers who identify and report bugs in open-source software will no longer be rewarded by the Internet Bug Bounty team. HackerOne, which administers the program, has said that it is “pausing submissions” while it contemplates ways in which open source… Read More "Internet Bug Bounty program hits pause on payouts"
What you see is not always what you get as cybercriminals increasingly weaponize SVG files as delivery vectors for stealthy malware 22 Sep 2025 • , 4 min. read A recent malware campaign making the rounds in Latin America offers… Read More "Watch out for SVG files booby-trapped with malware"
G7 nations have identified cyber threats as the most significant risk they face, for the second consecutive year. As the Munich Security Conference (MSC) opened in Germany on February 13, the event’s partner consultancy, Kekst CNC, released the latest edition… Read More "Munich Security Conference: Cyber Threats Lead G7 Risk Index"
Meta has paused all its work with the data contracting firm Mercor while it investigates a major security breach that impacted the startup, two sources confirmed to WIRED. The pause is indefinite, the sources said. Other major AI labs are… Read More "Meta Pauses Work With Mercor After Data Breach Puts AI Industry Secrets at Risk"
Critically, he argued that the use of various tools should be instantly flagged as concerning. “Instrument Task Scheduler, PsExec, PsPasswd, and net user are high‑risk signals. These are the insider’s equivalent of lockpicks,” he said. “They should generate behavioral alerts… Read More "A core infrastructure engineer pleads guilty to federal charges in insider attack"
This blogpost introduces our latest white paper, presented at Virus Bulletin 2025, where we detail the operations of the North Korea-aligned threat actor we call DeceptiveDevelopment and its connections to North Korean IT worker campaigns. The white paper provides full… Read More "From primitive crypto theft to sophisticated AI-based deception"
Government security agencies in the UK, US, Canada, Australia and New Zealand have urged Cisco customers to take immediate action to patch a critical zero-day bug in their SD-WAN kit that has been exploited since 2023. CVE-2026-20127 is an authentication… Read More "Global Cyber Agencies Urge Immediate Patching of Cisco SD-WAN Zero Day"
The attacker crafts a malicious serialized payload designed to abuse the deserialization routine, a technique commonly used to trigger arbitrary object instantiation or method invocation on a server. The payload is sent via an HTTP request directly to a Server Function endpoint; no authentication is required. The server deserializes… Read More "Security lapse lets researchers view React2Shell hackers’ dashboard"
You could be getting more than you bargained for when you download that cheat tool promising quick wins 26 Sep 2025 • , 3 min. read Every day, tens of millions of young people dive into Roblox to build, connect… Read More "It’s all fun and games until someone gets hacked"
