LATEST POST
Hackers are using PDFs to impersonate big brands like Microsoft and PayPal in a new threat campaign
You may be seeing a lot of DocuSign-related emails in your inbox this month. Or Microsoft. Or other big names. And if you happen to be expecting something to sign or have accounts with these big firms, the phishing attempts can look very convincing. ITPro reports: Cyber criminals are increasingly using PDF attachments to impersonate […]
China-linked hackers spoof big-name brand websites to steal shoppers’ payment info
If you shop online, be aware of this massive campaign using spoofed websites. The Record reports: Researchers have uncovered a sprawling network of fraudulent retail websites impersonating major global brands in an effort to steal payment data from online shoppers. The campaign, which has been active for months, uses thousands of phishing websites that mimic […]
International Criminal Court targeted by ‘sophisticated’ cyberattack
Comes less than two years after the ICC revealed a major breach in September 2023, later attributed to a cyber-espionage operation Computing reports that the International Criminal Court (ICC) has confirmed it is investigating a fresh and “sophisticated” cyberattack that targeted its systems last week, marking the second such incident in recent years. In March […]
Qantas suffers data breach as hackers accesses millions of customer records
Airline Routes & Ground Services reports: Qantas has confirmed a significant cyberattack affecting the personal data of up to six million customers, marking one of Australia’s most serious data breaches in recent years and delivering a fresh blow to the airline’s reputation. The breach, which targeted a third-party customer service platform used by a call […]
US Sanctions Russian Cybercrime Group Aeza for Hosting Ransomware and Global Attacks
United24 reports: The United States has imposed sanctions on the Russian cybercrime group Aeza Group and its associated global network, the US Department of the Treasury’s Office of Foreign Assets Control (OFAC) announced on June 1 [sic]. OFAC designated Aeza Group for its role in supporting cybercriminal operations targeting victims in the United States and […]
CMS Notifies Individuals Potentially Impacted by Data Incident Affecting Medicare.gov Accounts
An important press release from the Centers for Medicare & Medicaid Services was published yesterday.
Iran Threatens To Release 100GB of Trump Aides’ Emails
Newsweek reports: An Iran-linked hacking group has threatened to release a batch of emails it said it has stolen from President Donald Trump‘s longtime aides, including adviser Roger Stone and White House chief of staff Susie Wiles. Reuters reported Monday that a cyberattack group that hacked the president’s campaign in 2024 claimed it had roughly 100 gigabytes of […]
US government takes down major North Korean ‘remote IT workers’ operation
TechCrunch reports: The U.S. Department of Justice announced on Monday that it had taken several enforcement actions against North Korea’s money-making operations, which rely on undercover remote IT workers inside American tech companies to raise funds for the regime’s nuclear weapons program, as well as to steal data and cryptocurrency. As part of the DOJ’s multi-state effort, […]