2.5 million people were affected, in a breach that could spell more trouble down the line. [...]

Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool. [...]

Over 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system. [...]

Lockbit is by far this summer’s most prolific ransomware group, trailed by two offshoots of the Conti group. [...]

Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed. [...]

Fake travel reservations are exacting more pain from the travel weary, already dealing with the misery of canceled flights and overbooked hotels. [...]

Mobile transactions could’ve been disabled, created and signed by attackers. [...]

Instances of phishing attacks leveraging the Microsoft brand increased 266 percent in Q1 compared to the year prior. [...]

Four newly discovered attack paths could lead to PII exposure, account takeover, even organizational data destruction. [...]

In March, a North Korean APT siphoned blockchain gaming platform Axie Infinity of $540M. [...]

A radio control system for drones is vulnerable to remote takeover, thanks to a weakness in the mechanism that binds transmitter and receiver. [...]

Iran's steel manufacturing industry is victim to ongoing cyberattacks that previously impacted the country's rail system. [...]

Hackers with Amazon users’ authentication tokens could’ve stolen or encrypted personal photos and documents. [...]

Researchers have discovered that a Kazakhstan government entity deployed sophisticated Italian spyware within its borders. [...]

Evidence suggests that a just-discovered APT has been active since 2013. [...]

Analysts have uncovered an Iran-linked APT sending malicious emails to top Israeli government officials. [...]

One well crafted phishing message sent via Facebook Messenger ensnared 10 million Facebook users and counting. [...]

In response to a comment about the Prophet Mohammed, a hacktivist group in Malaysia has unleashed a wave of cyber attacks in India. [...]

Environmentalists and policymakers warn water treatment plants are ripe for attack. [...]

Ransomware attackers often strike targets twice, regardless of whether the ransom was paid. [...]

A government-aligned attacker tried using a Microsoft vulnerability to attack U.S. and E.U. government targets. [...]

Deja-Vu data from this year's DBIR report feels like we are stuck in the movie 'Groundhog Day.' [...]

A slip-up by a malware author has allowed researchers to taxonomize three ransomware variations going by different names. [...]

The U.S. Department of Justice indites middle-aged doctor, accusing him of being a malware mastermind. [...]

Researchers discovered a simple malware builder designed to steal credentials, then pinging them to Discord webhooks. [...]