SectionResearch
New techniques, papers and threat intelligence.
Baker Tilly notifies clients of data breach at third-party provider
The U.S. accounting firm is alerting clients that personal data, including Social Security numbers, was exposed through a platform run by an…
Vanderbilt University responds to BYOD ransomware attack amid data theft claims
Vanderbilt University is investigating an active cybersecurity incident claimed by the BYOD ransomware gang, which says it encrypted university databases and stole…
CTM360 Warns of Fake Gift Card Scams Impersonating Trusted Brands
A recurring affiliate-fraud campaign has produced more than 1,000 incidents by luring users with fake gift card giveaways, endless verification loops, and…
Fake Security Tools on GitHub Deliver Backdoors and Infostealers to Researchers
A campaign hosting trojanized security projects on GitHub has compromised more than 2,000 Windows systems, deploying the AsyncRAT backdoor, clipper malware, and…
Hackers Hide Linux Backdoor in Control Web Panel Server to Run Commands Without Logs
Researchers at QiAnXin's XLab found a backdoor concealed in the web server of Control Web Panel, a free Linux hosting management tool.…
Russia Arrests Three in Rare Crackdown on VasyGrek Phishing Gang
Russian police dismantled the infrastructure of the VasyGrek (Fluffy Wolf) cybercrime group with help from Kaspersky, detaining three suspects behind a long-running…
26,400 Live Cloud and AI Credentials Found Exposed on Gitee
A researcher scanning 7.25 million public Gitee repositories found tens of thousands of still-working cloud and AI service credentials that developers had…
Interpol’s Third Serengeti Sweep Nets 1,462 Arrests, $105M Recovered
Operation Serengeti's third annual run spanned 20 African countries and the US, with law enforcement maturing its approach to cybercrime investigations and…
Reddit to Require Logins for Full Site Access to Curb Scraping
Reddit plans to shift toward a logged-in service, starting with a pilot outside the US, citing the need to fight content scrapers…
Syrian Electronic Army Hacker Sentenced to 42 Months for Western Media Attacks
Ahmad Umar Agha, known online as Th3Pr0, was sentenced in a Virginia federal court for a years-long hacking conspiracy tied to Assad…
DreamHost Resets Email and FTP Passwords After Unexplained Incident
DreamHost has forced password resets for email and FTP accounts after detecting an issue affecting some of its systems, including webmail, though…
University of Copenhagen Breach Exposes Data of 525,000 People
Hackers accessed a university test environment containing names, national ID numbers, phone numbers, and emails, with an additional 20,000 staff and students…