Hacking

A suspected China-linked cyber campaign is using fake Indian Income Tax filing software to deliver DcRAT malware and steal sensitive data from taxpayers and businesses.

A critical cPanel authentication bypass (CVE-2026-41940) was exploited in a cyber espionage campaign targeting government and military systems. Attackers gained root access, used SQL injection and custom malware tools, and exfiltrated over 4GB of sensitive data including defense and financial records.

Researchers reveal a phishing campaign using Google AppSheet emails to steal 30,000 Facebook accounts through fake Meta Support alerts and login pages

RedSun zero-day exploits Windows Defender to gain SYSTEM access. Learn how NPAV EPS protects against zero-day and privilege escalation attacks.

Hackers allegedly stole 10 petabytes of sensitive data from a Chinese supercomputer, including defense files and missile schematics, now being sold online.

FBI and CISA warn of Russian-linked phishing attacks targeting WhatsApp and Signal users to steal accounts using fake support messages and verification code scams.

China-linked Lotus Blossom group breached Notepad++ hosting, delivering Chrysalis backdoor via tampered updates. Learn the attack details and how to stay safe.

8Base ransomware claims to have stolen Volkswagen data—learn about the allegations, company's response, and tips for supply chain security to avoid similar breaches.

FortiGuard Labs exposes Chaos ransomware's aggressive C++ upgrade—selective encryption, large file deletion, and Bitcoin wallet swapping via clipboard hijack. This RaaS threat from ex-BlackSuit actors targets big-game hunting; bolster backups and detection to counter faster, multifaceted attacks.

Public Wi-Fi exposes you to MitM attacks and data theft—learn to spot evil twin hotspots, use VPNs for encryption, enable 2FA, and stick to cellular for sensitive tasks to protect against rising breaches in cafes and airports.