Ionut Arghire

Two malicious NPM packages contain code that would delete production systems when triggered with the right credentials.

iVerify links iPhone crashes to sophisticated zero-click attacks via iMessage targeting individuals involved in politics in the EU and US.

The US is seeking the forfeiture of $7.74 million in cryptocurrency in frozen wallets tied to North Korean fake IT workers schemes.

Data security firm MIND has raised $30 million in Series A funding to expand its R&D and go-to-market teams.

A Russia-linked threat actor has used the destructive malware dubbed PathWiper against a critical infrastructure organization in Ukraine.

Cisco has released patches for a critical vulnerability impacting cloud deployments of Identity Services Engine (ISE).

An HPE StoreOnce vulnerability allows attackers to bypass authentication, potentially leading to remote code execution.

A threat actor has been creating backdoored open source malware repositories to target novice cybercriminals and game cheaters.

Play ransomware attacks have hit roughly 900 organizations and recently involved the exploitation of SimpleHelp vulnerabilities.

Authorities seized 145 domains associated with BidenCash, a marketplace for stolen credit cards and personal information.

The Interlock ransomware group has leaked data allegedly stolen from Kettering Health in a recent cyberattack.

Germany fined Vodafone $51 million for failing to protect user data from partners and unauthorized third-parties.

A financially motivated threat actor employing vishing to compromise Salesforce customers, and extort them.

ThreatSpike will use the fresh funding to expand its engineering, go-to-market, and security operations teams.

Threat actors steal personal information from thenorthface.com user accounts in a recent credential stuffing campaign.

Trustifi has raised $25 million in Series A funding to accelerate its product roadmap and go-to-market initiatives.

Microsegmentation provider Zero Networks has raised $55 million in a Series C funding round led by Highland Europe.

The incident occurred in March and impacted the personally identifiable information of approximately 4.65% of MainStreet Bancshares’ customers.

Covered organizations in Australia are now required to report ransomware and other cyber extortion payments within three days.

Reported by the Google Threat Analysis Group, the vulnerability might have been exploited by commercial spyware.