Blogs
-
Posted: August 11, 2026Read moreGunra ransomware affiliates are exploiting Fortinet VPN vulnerabilities to bypass MFA, steal enterprise data, move laterally, and deploy double-extortion ransomware. -
Read moreResearchers uncovered the Papyrus mobile ad fraud campaign, which uses hidden WebViews inside reading apps to generate fake clicks, scrolling, and ad engagement, impacting advertisers worldwide. -
Read moreResearchers uncovered a large ClickFix campaign using over 250 fake macOS domains and browser fingerprinting to deliver Atomic Stealer (AMOS), targeting passwords, crypto wallets, and sensitive data. -
Read moreNetProtector researchers uncovered a Japan-India Summit themed phishing campaign using malicious LNK files, PowerShell, and C2 beaconing to target diplomatic and government organizations. -
Read moreHackers are hijacking hotel Wi-Fi networks to deliver fake browser updates that install CornFlake malware, stealing passwords, browser sessions, and Microsoft 365 tokens. -
Posted: August 03, 2026Categories: Malware Alerts, Cyber Attack, Data Breach, Email And Password, Financial fraud, Fraud Protector, Mobile FraudsViews: 24Read moreMacSync malware targets macOS users through fake Claude installation guides, stealing passwords, browser sessions, cloud credentials, and cryptocurrency wallet data. -
Posted: July 31, 2026Views: 33Read moreAI-generated phishing attacks can steal browser sessions and bypass MFA without malware. Learn how AiTM attacks target session tokens and how businesses can improve security. -
Read moreA cyber attack on England’s Department for Education exposed around 607,000 records containing email addresses and phone numbers. Learn what happened and the cybersecurity risks. -
Read moreResearchers warn that a 20-year-old IPMI vulnerability could allow attackers to compromise thousands of internet-exposed data center servers through weak BMC authentication. -
Read moreHackers claim to possess a database containing 160 million Decathlon customer records. The alleged breach remains unverified, with Decathlon yet to confirm the incident. -
Posted: July 27, 2026Views: 105Read moreA suspected 1TB Bank of Baroda data leak has reportedly exposed customer records, Aadhaar details, account information, and internal banking documents online. -
Read moreRussian state-backed hackers exploited a Zimbra zero-day vulnerability to steal emails, passwords, and 2FA recovery codes from government and enterprise organizations. -
Read moreAttackers are exploiting GitHub Actions runners to target vulnerable cPanel and WHM servers, stealing credentials, cloud keys, API tokens, and sensitive configuration data. -
Read moreLaw enforcement dismantled the Kratos phishing kit used to steal Microsoft 365 sessions and bypass MFA. Learn how to protect your organization from advanced phishing attacks. -
Read moreENCFORGE ransomware exploits Langflow vulnerabilities to encrypt AI models and datasets. Learn how to protect AI infrastructure from ransomware and remote code execution attacks. -
Read moreResearchers have discovered GoSerpent malware targeting Southeast Asian government and diplomatic organizations for long-term cyber espionage and data theft. -
Read moreMicrosoft warns that ACR Stealer is using ClickFix lures to steal browser passwords, authentication tokens, Microsoft 365 files, and sensitive enterprise data. -
Read moreA ransomware group has allegedly leaked data linked to India's Kudankulam Nuclear Power Plant, raising concerns over cybersecurity and critical infrastructure protection. -
Read moreA critical vulnerability in Motorola MR2600 routers allows attackers to bypass authentication, install malicious firmware, and gain persistent remote code execution. -
Read moreResearchers have uncovered HalluSquatting, a new attack that exploits AI coding assistants to install malware by abusing hallucinated repositories and resources.
Recent Posts
