Category: Cybersecurity

Active Exploitation Confirmed: Google Skia and Chromium V8 Vulnerabilities Added to Federal KEV Catalog

Active Exploitation

Fake Starlink and Government Apps Used in Android Malware Campaign Targeting Brazilian Banking and Crypto Users

Blogging

Siemens SIMATIC Advisory Exposes High-Severity Code Injection Risk Across S7-1500 and ET 200SP Industrial Controllers

Blogging

Improper Access Control Flaw Discovered in Siemens Heliox EV Charging Infrastructure

Blogging

Global Botnet Infrastructure Dismantled as U.S. and European Authorities Shut Down SocksEscort Router Proxy Network

Blogging

Critical ICS Vulnerabilities Discovered in Trane Tracer SC Building Automation Controllers

Blogging

White House Orders Federal Crackdown on Transnational Cybercrime and Proposes Victim Restoration Program

Blogging

CISA Shortens Patch Deadlines After Active Exploits Target SolarWinds and Ivanti Systems

Blogging

Cybercriminals Impersonate City Officials to Steal Permit Payments in Targeted Phishing Campaign

Blogging

Active Exploits Detected: CISA Adds Three High-Risk Vulnerabilities to Federal KEV Catalog

Blogging

TRJ Cybersecurity — ICS Advisory: Apeman Camera Vulnerabilities Expose Remote Control and Surveillance Risks

Blogging

Phobos Ransomware Operator Pleads Guilty After Global Extortion Campaign Targeted Over 1,000 Organizations

Blogging

Global Law Enforcement Disrupts Tycoon 2FA Phishing Platform Used to Breach Hospitals, Schools, and Corporate Accounts

Blogging

Malware Attack Disrupts Government Systems and Phone Lines Across Passaic County, New Jersey

Blogging

WHEN VISION BECOMES DATA

Artificial Intelligence

CISA Flags Five Actively Exploited Vulnerabilities in Expanding KEV Catalog, Exposing Surveillance Devices, Industrial Systems, and Apple Platforms

Blogging

Delta Electronics CNCSoft-G2 Industrial Control Software Vulnerability Exposes Critical Manufacturing Systems to Potential Remote Code Execution

Blogging

Ransomware Breach at University of Hawaiʻi Cancer Center Exposes Data Linked to Up to 1.2 Million Individuals

Blogging

Western Allies Launch 6G Security Coalition as Global Telecom Technology Race Intensifies

Blogging

LexisNexis Confirms Breach of Legacy Systems After Data Appears on Cybercriminal Forum

Blogging

ICS Vulnerability Alert: Mitsubishi Electric MELSEC iQ-F EtherNet/IP Modules Exposed to Remote Denial-of-Service Attacks

Blogging

Critical ICS Vulnerability Found in Labkotec LID-3300IP Monitoring System — Remote System Control Possible

Blogging

Portwell Engineering Toolkits Vulnerability Raises Privilege Escalation Risks in Industrial Development Environments

Blogging

Claude Code Remote Execution Flaw Exposes AI-Driven Development Supply Chain Risk

Blogging

EU Lawmakers Push Age 16 Social Media Access Restriction in Digital Fairness Act Framework

AI Governance

TRJ Cybersecurity — Google Disrupts China-Linked Espionage Campaign Targeting Global Telecom and Government Networks

Blogging

TRJ Cybersecurity — SWITCH EV Platform Vulnerabilities Expose Global Charging Infrastructure to Impersonation and Session Hijack Risk

Blogging

TRJ Cybersecurity — Pelco Sarix Pro 3 IP Cameras Exposed to Authentication Bypass — Surveillance Integrity at Risk

Blogging

TRJ Cybersecurity — Frick Quantum HD Controllers Exposed to Pre-Authentication Remote Code Execution — Food & Agriculture Infrastructure at Risk

Blogging

TRJ Cybersecurity — EV2GO Charging Platform Exposed: Authentication Failures Create High-Risk Entry Points Across Global EV Infrastructure

Blogging

TRJ Cybersecurity — CloudCharge Platform Vulnerabilities Open Global EV Charging Networks to Session Hijack and Impersonation Risk

Blogging

Former U.S. Defense Contractor Executive Sentenced to 87 Months for Selling Stolen Cyber Exploits to Russian Broker

Blogging

China Signals Escalation in Domestic IP Theft Prosecutions Amid Global Espionage Tensions

Blogging

CISA Adds Two Cisco SD-WAN Vulnerabilities to Known Exploited Vulnerabilities (KEV) Catalog

Blogging

CISA Emergency Directive 26-03 — Cisco SD-WAN Systems Under Active Exploitation

Blogging

Five Eyes Issue Coordinated Warning on Active Exploitation of Cisco SD-WAN Infrastructure

Blogging

ICS CRITICAL ALERT: InSAT MasterSCADA BUK-TS EXPOSED TO REMOTE CODE EXECUTION (CVSS 9.8)

Blogging

ICS ALERT: GARDYN HOME KIT CLOUD & FIRMWARE VULNERABILITIES EXPOSE EDGE DEVICES TO UNAUTHENTICATED TAKEOVER

Blogging

TRJ CYBERSECURITY — NORTH KOREAN LAZARUS OPERATORS DEPLOY MEDUSA RANSOMWARE IN CROSS-REGIONAL ATTACKS

Blogging

ACTIVE EXPLOITATION ALERT: CISA ADDS CVE-2026-25108 FILEZEN COMMAND INJECTION TO KEV CATALOG

Blogging

ICS ALERT: Schneider Electric EcoStruxure Building Operation Exposed to XML & Code Injection Risks

Blogging

CISA MOVES TO ELIMINATE END-OF-SUPPORT EDGE DEVICES AS OPENEOX STANDARD TARGETS LIFECYCLE BLIND SPOTS

Blogging

GLOBAL DATA PROTECTION AUTHORITIES ISSUE JOINT WARNING TO GENERATIVE AI COMPANIES OVER REPLICATION OF REAL PEOPLE

AI and Deepfakes

CISA PUSHES SECURE OT COMMUNICATIONS AS LEGACY INDUSTRIAL PROTOCOLS REMAIN WIDESPREAD RISK

Blogging

DIGITAL PROXY WORKFORCE: Ukrainian Facilitator Sentenced in North Korea IT Infiltration Scheme Targeting U.S. Companies

Blogging

INITIAL ACCESS FOR SALE: Romanian Actor Pleads Guilty After Breaching Oregon Emergency Management Network

Blogging

CHIPCHAIN LOCKDOWN: Ransomware Strike on Advantest Raises Supply-Side Disruption Risk Across Global Semiconductor Testing Infrastructure

CHIPCHAIN LOCKDOWN: Ransomware Strike on Advantest Raises Supply-Side Disruption Risk Across Global Semiconductor Testing Infrastructure

Blogging

THE SILENT GRID: Volt Typhoon Persistence Across U.S. Utilities Signals Long-Term OT Compromise Risk

THE SILENT GRID: Volt Typhoon Persistence Across U.S. Utilities Signals Long-Term OT Compromise Risk

Blogging

TEXAS FILES LAWSUIT AGAINST TP-LINK OVER ALLEGED SECURITY MISREPRESENTATIONS AND ROUTER EXPOSURE RISKS

TEXAS FILES LAWSUIT AGAINST TP-LINK OVER ALLEGED SECURITY MISREPRESENTATIONS AND ROUTER EXPOSURE RISKS

Blogging

CVE-2026-22769: DELL RECOVERPOINT ZERO-DAY TRIGGERS FEDERAL PATCH ORDER AMID ACTIVE STATE-BACKED EXPLOITATION

CVE-2026-22769: DELL RECOVERPOINT ZERO-DAY TRIGGERS FEDERAL PATCH ORDER AMID ACTIVE STATE-BACKED EXPLOITATION

Blogging

KEENADU FIRMWARE BACKDOOR: PRE-INSTALLED ANDROID COMPROMISE TARGETS GLOBAL TABLET USERS

KEENADU FIRMWARE BACKDOOR: PRE-INSTALLED ANDROID COMPROMISE TARGETS GLOBAL TABLET USERS

Blogging

POLISH AUTHORITIES DETAIN ALLEGED PHOBOS RANSOMWARE ASSOCIATE IN MULTI-NATION CYBER CRACKDOWN

Blogging

U.S. PUSHES FOR COORDINATED CYBER PARTNERSHIPS TO DETER ADVERSARIES

Blogging

CANADA GOOSE DISPUTES BREACH CLAIM AFTER SHINYHUNTERS PUBLISHES ALLEGED CUSTOMER DATASET

CANADA GOOSE DISPUTES BREACH CLAIM AFTER SHINYHUNTERS PUBLISHES ALLEGED CUSTOMER DATASET

Blogging

INTERIM CISA DIRECTOR WARNS DHS SHUTDOWN WOULD WEAKEN U.S. CYBER DEFENSE CAPACITY

Blogging

RING HALTS FLOCK SAFETY INTEGRATION AFTER SURVEILLANCE CONCERNS FOLLOW SUPER BOWL AD

Artificial Intelligence

MASS ACCOUNT TAKEOVER: 500,000+ VKONTAKTE USERS COMPROMISED VIA MALICIOUS CHROME EXTENSIONS

MASS ACCOUNT TAKEOVER: 500,000+ VKONTAKTE USERS COMPROMISED VIA MALICIOUS CHROME EXTENSIONS

Blogging

NATO CYBER POSTURE HARDENS: ALLIANCE SIGNALS COST IMPOSITION STRATEGY AGAINST RUSSIA AND CHINA

NATO CYBER POSTURE HARDENS: ALLIANCE SIGNALS COST IMPOSITION STRATEGY AGAINST RUSSIA AND CHINA

Blogging

North Korean Threat Actor Deploys Deepfake Zoom Ruse and ClickFix Malware in Targeted Crypto Executive Intrusion

North Korean Threat Actor Deploys Deepfake Zoom Ruse and ClickFix Malware in Targeted Crypto Executive Intrusion

Blogging

Georgia-Based Healthcare Network Reports 626,540 Patient Records Exposed in Qilin Ransomware Intrusion

Georgia-Based Healthcare Network Reports 626,540 Patient Records Exposed in Qilin Ransomware Intrusion

Blogging

Dutch Authorities Arrest Alleged JokerOTP Distributor in Ongoing OTP-Bypass Fraud Crackdown

Dutch Authorities Arrest Alleged JokerOTP Distributor in Ongoing OTP-Bypass Fraud Crackdown

Blogging

FBI SEATTLE ANNOUNCES OPERATION WINTER SHIELD AS CYBER LOSSES IN WASHINGTON REACH $368 MILLION

Blogging

Nation-State Operators Accelerate Recon and Malware Development Using Gemini AI Infrastructure

Nation-State Operators Accelerate Recon and Malware Development Using Gemini AI Infrastructure

Blogging

MTA TESTS AI-POWERED SUBWAY GATES AS NYC BIOMETRIC SURVEILLANCE FOOTPRINT EXPANDS

MTA TESTS AI-POWERED SUBWAY GATES AS NYC BIOMETRIC SURVEILLANCE FOOTPRINT EXPANDS

AI Surveillance

DIGITAL SQUATTING SURGES 68% AS ATTACKERS WEAPONIZE ROUTINE AND MUSCLE MEMORY TO HARVEST CREDENTIALS

Blogging

WHITE HOUSE MOVES TO PRESERVE FISA SECTION 702 AS SURVEILLANCE AUTHORITY NEARS EXPIRATION

WHITE HOUSE MOVES TO PRESERVE FISA SECTION 702 AS SURVEILLANCE AUTHORITY NEARS EXPIRATION

Blogging

EUROPE’S AGE-GATE EXPANSION: HOW CHILD SAFETY POLICY IS HARDENING INTO DIGITAL ID INFRASTRUCTURE

EUROPE’S AGE-GATE EXPANSION: HOW CHILD SAFETY POLICY IS HARDENING INTO DIGITAL ID INFRASTRUCTURE

Blogging

REHEARSING THE BREACH: CHINA’S CYBER RANGE DOCTRINE AND THE QUIET MILITARIZATION OF CRITICAL INFRASTRUCTURE

REHEARSING THE BREACH: CHINA’S CYBER RANGE DOCTRINE AND THE QUIET MILITARIZATION OF CRITICAL INFRASTRUCTURE

Blogging

Apple Pay Real-Time 2FA Harvesting Campaign Exploits Phone-Based Trust to Bypass Account Protections

Apple Pay Real-Time 2FA Harvesting Campaign Exploits Phone-Based Trust to Bypass Account Protections

Blogging

CISA Orders Federal Agencies to Remove End-of-Life Network Devices Amid Escalating Exploitation Campaigns

CISA Orders Federal Agencies to Remove End-of-Life Network Devices Amid Escalating Exploitation Campaigns

Blogging

TRJ Cybersecurity Intel Report — Unauthorized Access

TRJ Cybersecurity Intel Report — Unauthorized Access

Blogging

AI Agent Social Network Draws Attention as Security Risks Outpace Sci-Fi Fears

Artificial Intelligence

CISA Orders Emergency Patch After Exploited SolarWinds Web Help Desk Vulnerability Bypasses Prior Fixes

CISA Orders Emergency Patch After Exploited SolarWinds Web Help Desk Vulnerability Bypasses Prior Fixes

Blogging

UK Opens First Investigation Into Suspected Breaches of Cyber Sanctions Regime

UK Opens First Investigation Into Suspected Breaches of Cyber Sanctions Regime

Blogging

Russian State-Linked Hackers Exploit Newly Patched Microsoft Office Flaw in Espionage Campaign Across Ukraine and Europe

Russian State-Linked Hackers Exploit Newly Patched Microsoft Office Flaw in Espionage Campaign Across Ukraine and Europe

Blogging

Notepad++ Update Infrastructure Hijacked in Targeted Supply-Chain Intrusion Linked to State-Aligned Actors

Notepad++ Update Infrastructure Hijacked in Targeted Supply-Chain Intrusion Linked to State-Aligned Actors

Blogging

Failed School Ransomware Attack Escalates Into Parent-Targeted Extortion After Payment Refusal

Failed School Ransomware Attack Escalates Into Parent-Targeted Extortion After Payment Refusal

Blogging

LATVIA UNDER DIGITAL SIEGE: RUSSIA’S CYBER PRESSURE CAMPAIGN HITS RECORD LEVELS

LATVIA UNDER DIGITAL SIEGE: RUSSIA’S CYBER PRESSURE CAMPAIGN HITS RECORD LEVELS

Blogging

RAMP CYBERCRIME FORUM TAKEDOWN — SIGNAL OR STRATEGIC DISRUPTION?

RAMP CYBERCRIME FORUM TAKEDOWN — SIGNAL OR STRATEGIC DISRUPTION?

Blogging

ANDROID AI APPS: HARDCODED SECRETS, CLOUD KEY LEAKAGE, AND AUTOMATED BACKEND EXPLOITATION

ANDROID AI APPS: HARDCODED SECRETS, CLOUD KEY LEAKAGE, AND AUTOMATED BACKEND EXPLOITATION

Backend Misconfiguration

NIKE INVESTIGATES ALLEGED CYBER BREACH AFTER RANSOMWARE GROUP CLAIMS 1.4TB DATA LEAK

NIKE INVESTIGATES ALLEGED CYBER BREACH AFTER RANSOMWARE GROUP CLAIMS 1.4TB DATA LEAK

Blogging

CHINESE CRYPTO LAUNDERING NETWORKS EMERGE AS DOMINANT FORCE IN GLOBAL ILLICIT FINANCE, MOVING $16 BILLION IN 2025

CHINESE CRYPTO LAUNDERING NETWORKS EMERGE AS DOMINANT FORCE IN GLOBAL ILLICIT FINANCE, MOVING $16 BILLION IN 2025

Blogging

DOJ UNSEALS MAJOR INDICTMENT IN PLOUTUS ATM JACKPOTTING CONSPIRACY TARGETING U.S. CREDIT UNIONS

DOJ UNSEALS MAJOR INDICTMENT IN PLOUTUS ATM JACKPOTTING CONSPIRACY TARGETING U.S. CREDIT UNIONS

Blogging

UNITED KINGDOM MOVES TO CENTRALIZE CYBER AND FRAUD POLICING AS DIGITAL CRIME SURGES

UNITED KINGDOM MOVES TO CENTRALIZE CYBER AND FRAUD POLICING AS DIGITAL CRIME SURGES

Blogging

ROMANIA PROBES SUSPECTED HITMAN-FOR-HIRE PLATFORM IN CRYPTO-BASED DARKNET OPERATION

ROMANIA PROBES SUSPECTED HITMAN-FOR-HIRE PLATFORM IN CRYPTO-BASED DARKNET OPERATION

Blogging

CYBERATTACK DISRUPTS DIGITAL OPERATIONS ACROSS DRESDEN STATE ART COLLECTIONS

CYBERATTACK DISRUPTS DIGITAL OPERATIONS ACROSS DRESDEN STATE ART COLLECTIONS

Blogging

Mobile Rogue Cell Tower Scam Dismantled in Greece Using Trunk-Mounted Base Station

Mobile Rogue Cell Tower Scam Dismantled in Greece Using Trunk-Mounted Base Station

Blogging

Jordanian Authorities Used Commercial Phone-Extraction Tools Against Gaza War Critics, Forensic Evidence Shows

Jordanian Authorities Used Commercial Phone-Extraction Tools Against Gaza War Critics, Forensic Evidence Shows

Blogging

UK Launches ‘Report Fraud’ Platform as National Cybercrime Intake and Intelligence System

UK Launches ‘Report Fraud’ Platform as National Cybercrime Intake and Intelligence System

Blogging

Phishing Campaign Targets Afghan Government Workers Using Forged Prime Minister Correspondence

Phishing Campaign Targets Afghan Government Workers Using Forged Prime Minister Correspondence

Blogging

NSA & Cyber Command Nominee Faces Senate Scrutiny Over Cyber Doctrine, Command Structure, and Deterrence Strategy

NSA & Cyber Command Nominee Faces Senate Scrutiny Over Cyber Doctrine, Command Structure, and Deterrence Strategy

Blogging

Anchorage Police Take Servers Offline Following Cyberattack on Third-Party Service Provider

Anchorage Police Take Servers Offline Following Cyberattack on Third-Party Service Provider

Blogging

Verizon Network Outage Persists Nationwide, Disrupting Cellular Service and Emergency Access

Verizon Network Outage Persists Nationwide, Disrupting Cellular Service and Emergency Access

Blogging

Western Cyber Agencies Warn of Escalating Threats to Industrial Operational Technology

Western Cyber Agencies Warn of Escalating Threats to Industrial Operational Technology

Blogging

Microsoft Disrupts RedVDS Cybercrime Platform Tied to $40 Million in U.S. Scam Losses

Microsoft Disrupts RedVDS Cybercrime Platform Tied to $40 Million in U.S. Scam Losses

Blogging

PORT ZERO: HOW A SINGLE USB BREACH TURNED EUROPE’S LARGEST HARBORS INTO A COCAINE PIPELINE

PORT ZERO: HOW A SINGLE USB BREACH TURNED EUROPE’S LARGEST HARBORS INTO A COCAINE PIPELINE

Blogging

ARMENIA DATA EXPOSURE ALERT: ALLEGED SALE OF 8 MILLION GOVERNMENT RECORDS SIGNALS CIVIL SYSTEM BREACH RISK

ARMENIA DATA EXPOSURE ALERT: ALLEGED SALE OF 8 MILLION GOVERNMENT RECORDS SIGNALS CIVIL SYSTEM BREACH RISK

Blogging

CRYPTO INFRASTRUCTURE BREACH: $26M ETH THEFT SIGNALS NEXT PHASE OF PROFESSIONALIZED DIGITAL FINANCIAL CRIME

CRYPTO INFRASTRUCTURE BREACH: $26M ETH THEFT SIGNALS NEXT PHASE OF PROFESSIONALIZED DIGITAL FINANCIAL CRIME

Blogging

CISA Retires Ten Emergency Directives as KEV Enforcement Replaces Crisis-Driven Patch Mandates

CISA Retires Ten Emergency Directives as KEV Enforcement Replaces Crisis-Driven Patch Mandates

Blogging

Congressional Email Systems Targeted in Suspected Chinese Cyber-Espionage Campaign

Congressional Email Systems Targeted in Suspected Chinese Cyber-Espionage Campaign

Blogging