Category: Exploits
Keio Corporation Confirms Ransomware Attack Disrupted Hospitality Systems
The Japanese railway and hotel operator shut down its network after a weekend ransomware attack hit servers tied to its hospitality business,…
US Army Soldier Sentenced to 70 Months for Extorting Telecom Giants
Cameron John Wagenius, known online as 'kiberphant0m,' used a self-built SSH brute-forcing tool to steal credentials and extort at least 10 tech…
Bitget Restarts Bitcoin Withdrawals After $387.5 Million North Korea-Linked Heist
The crypto exchange has resumed BTC withdrawals following a suspected North Korean breach that drained hot and warm wallets across seven blockchains,…
ShinyHunters Bypasses WAFs to Revive Oracle PeopleSoft Attacks
Google's Mandiant says the extortion gang UNC6240 is using percent-encoded URL paths to slip past web application firewalls and reach the vulnerable…
Kiteworks Tells Customers Worldwide to Shut Down Servers for 6 Hours Over Possible Zero-Day
Secure file-sharing vendor Kiteworks urged customers globally to power down systems for a six-hour window after receiving law enforcement intelligence of a…
Bitget Loses $351.6 Million in Suspected North Korean Exchange Hack
Cryptocurrency exchange Bitget confirmed hackers drained hot and warm wallets across seven blockchains, with attackers spoofing transaction data to hijack its authorization-signing…
New Defender Zero-Day ‘BigDiskBuster’ Freezes Antivirus Updates
Researcher Abdelhamid Naceri has released another unpatched Microsoft Defender exploit, this time a denial-of-service tool that silently blocks signature and platform updates…
BlueMoon Exploit Kit Chains Chrome and Windows Zero-Days Across Espionage Groups
Proofpoint says a newly discovered exploit kit combining two Chrome V8 zero-days and a Windows ALPC privilege escalation flaw was rapidly adopted…
Cisco FMC Bugs Exploited by Qilin Ransomware and Sandworm-Linked Hackers
Cisco Talos says three separate threat clusters, including ransomware affiliates and a group overlapping with the Russian Sandworm APT, exploited two Secure…
Berlin Rejects Ransom Demand After State Network Breach
Berlin's state government says it will not pay extortionists behind an August compromise of its administrative network, as forensic investigators uncover additional…
Pro-Russian Group Claims Multi-Day DDoS Assault on Norway’s Digital Services
The hacker group Server Killers says it launched the attack in retaliation for Norway's renewed security cooperation with Ukraine, hitting the Digitalization…
US Government Takes Down Chinese State-Linked Hacking Platform QTFY
The Justice Department and FBI dismantled infrastructure behind QScan and QTRouter, tools tied to a Chinese company that allegedly hit US military,…