Ionut Arghire

The Midnight Blizzard cyberspies used compromised websites to trick users into authorizing devices they controlled.

The vulnerability (CVE-2025-55177) was exploited along an iOS/macOS zero-day in suspected spyware attacks.

Authorities say VerifTools sold fake driver’s licenses and passports worldwide, enabling fraudsters to bypass KYC checks and access online accounts.

Google says the same OAuth token compromise that enabled Salesforce data theft also let hackers access a small number of Workspace accounts via the...

The credit reporting firm did not name the third-party application involved in the incident, only noting that it was used for its US consumer...

State officials confirm ransomware forced office closures, disrupted services, and led to data theft, as Nevada works with CISA and law enforcement to restore...

US Treasury sanctions Russian and Chinese entities tied to North Korea’s use of fake IT workers, who exploited stolen identities, AI, and malware to...

Storm-0501 has been leveraging cloud-native capabilities for data exfiltration and deletion, without deploying file-encrypting malware.

China-linked APT ‘Salt Typhoon’ exploited known router flaws to maintain persistent access across telecom, government, and military networks, giving Beijing’s intelligence services global surveillance...

With more than 4 million weekly downloads, the Nx build platform became the first known supply chain breach where hackers weaponized AI assistants for...

Google says the hackers systematically exported corporate data, focusing on secrets such as AWS and Snowflake keys.

Google researchers say China-linked UNC6384 combined social engineering, signed malware, and adversary-in-the-middle attacks to evade detection.

State websites and phone lines were taken offline, but officials say emergency services and personal data remain unaffected.

Zero-day exploited in the wild forces Citrix and CISA to push emergency patch deadlines for federal agencies.

Proof-of-concept ransomware uses AI models to generate attack scripts in real time.

The personal information of many individuals was stolen from Healthcare Services Group’s computer systems in 2024.

A critical vulnerability in Docker Desktop allows attackers to modify the filesystem of Windows hosts to become administrators.

Auchan confirms that the personal information of hundreds of thousands of customers was stolen in a data breach.

CISA urges federal agencies to immediately patch an exploited arbitrary file write vulnerability in Git that leads to remote code execution.

Pakistani state-sponsored hacking group APT36 is targeting Linux systems in a fresh campaign aimed at Indian government entities.