SectionExploits
Attacks seen in the wild, breaches and campaigns.
Scottish Prosecutor’s Office Hit by Data Breach Tied to Third-Party Vendor
A breach at a Scottish government agency's prosecution service has been linked to a third-party provider that may have also served other…
Brazilian and European Police Bust €30M Bank Fraud Ring Tied to Commerzbank Vendor Flaw
Operation Klonen led to four arrests in Brazil and charges against three more suspects in Spain and Bulgaria over a 2023 scheme…
Multinational Sweep Nets Arrests in €30M German Bank Card Cloning Heist
German and Brazilian police arrested seven suspects this week tied to a late 2023 scheme that drained an estimated €30 million from…
Akira Affiliate Rebooted a Victim Into Safe Mode to Kill EDR, Ransomware Still Failed
An Akira ransomware operator disabled endpoint defenses by forcing a compromised host into Safe Mode with Networking, but the encryption payload crashed…
US and South Korea Warn of Gunra Ransomware Hitting Government Networks
A joint advisory details how the Conti-derived Gunra ransomware group is exploiting Fortinet flaws and VPN weaknesses to breach critical infrastructure, now…
Head Mare Hackers Trojanize TrueConf Installers to Spread Backdoors
A hacktivist group is exploiting unpatched TrueConf video conferencing servers to plant web shells and swap legitimate client installers with backdoored versions,…
ClickFix Campaign Delivers macOS Crypto-Draining Stealer
A Go-based malware pushed through fake Terminal-command lures steals browser passwords and iCloud Keychain data while quietly siphoning cryptocurrency from active transactions.
Researchers Chain Three Samsung Bugs to Turn Bixby Into a Root Shell
A Pwn2Own-winning exploit chain used Samsung Members, Samsung Account, and Bixby's hidden Capsule system to achieve system-level compromise on Galaxy phones, earning…
Attackers Hide Post-Exploitation Toolkit Inside Oracle Database Itself
Huntress uncovered a rare technique in which hackers used a SQL injection flaw to compile and run a custom post-exploitation toolkit called…
N-able Patches Second Auth Bypass Flaw Under Active Attack on N-central Servers
N-able rushed out a hotfix after discovering that attackers were exploiting an incomplete patch for a prior authentication bypass, granting administrator access…
Coldcard Maker Destroys Vulnerable Inventory After $88M Bitcoin Theft
Coinkite has scrapped remaining stock of its Coldcard hardware wallets after attackers exploited a years-old firmware flaw to drain more than $88…
Adform Ad Script Hijacked to Swap Crypto Wallet Addresses on Copy
A supply-chain compromise of Adform's widely embedded tracking script let attackers silently replace Bitcoin, Ethereum, and TRON addresses copied by site visitors,…