-
FamousSparrow is targeting Latin American governments with SparroWocky, a new C++ backdoor that exfiltrates files, takes screenshots and evades security tools.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hackers stole names, ID numbers, vehicle plates, addresses, and payment records belonging to 1.2 million people in Latvia’s CSDD data breach.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Kaspersky links OctLurk and SilkLurk to cyberespionage attacks stealing passwords, emails and files from government systems in six countries since January 2025.
·
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Cisco Talos found hackers using simple authorization claims to bypass AI guardrails, build DDoS attack tools, steal credentials and access live camera services.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Shai-Hulud npm worm spreads through Keyv and hundreds of packages with 2 billion monthly downloads, stealing npm, GitHub, cloud and CI credentials in real time.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
LeakNet claims it stole 11TB of NYC Health + Hospitals data containing sensitive medical, financial and biometric records linked to more than 12 million people.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
EY confirmed the theft of client tax documents from its third-party support platform. ShinyHunters claims responsibility and is threatening to publish the data.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Fake helpdesk callers use Microsoft Teams and Quick Assist to access employee computers, where attackers install new GoGRPC backdoor in suspected ransomware operations
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Russian hackers from the TA488 group exploited a Zimbra webmail flaw triggered when emails were opened or previewed, stealing credentials and up to 90 days of messages from victims.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
An AI-led cyberattack breached limited Hugging Face datasets and service credentials, while public models, Spaces and published packages showed no signs of tampering.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
