New ClickFix Campaign – Abusing Windows App-V Scripts
Researchers have uncovered a new ClickFix attack chain that combines fake CAPTCHA lures with Microsoft Application Virtualization (App-V) scripts to deliver the Amatera infostealer. This […]
Month: January 2026
Alleged Breach of KPMG Netherlands
The Nova ransomware group has reportedly claimed responsibility for a breach of KPMG Netherlands, one of the world’s largest professional services firms. Incident Overview Nova […]
Konni Hackers Deploy AI-Generated PowerShell Backdoor
The Konni threat group, a North Korean state-linked actor active since 2014, has been observed deploying AI-generated PowerShell malware in a campaign targeting blockchain developers […]
Apache Hadoop Vulnerability – CVE-2025-27821
A moderate-severity vulnerability has been disclosed in the Hadoop Distributed File System (HDFS) native client, potentially allowing attackers to cause system crashes, denial-of-service (DoS), or […]
Sandworm Linked to Failed Wiper Attack on Poland’s Energy Systems
A cyberattack on Poland’s power grid (Dec 29–30, 2025) has been attributed to Sandworm, the Russian state-sponsored hacking group notorious for destructive operations against critical […]
1Password Adds Pop-Up Phishing Warnings
1Password has introduced a new pop-up alert system to help users detect suspected phishing sites, strengthening its existing protections against credential theft. What’s New Why […]
Homoglyph Phishing Campaign – “rn” Typo Trick
Attackers are running a sophisticated typosquatting campaign that impersonates Microsoft and Marriott International by exploiting a visual trick: replacing the letter “m” with “rn” (r […]
INC Ransomware – OpSec Failure Leads to Data Recovery
A rare operational security (OpSec) failure by the INC ransomware gang allowed researchers to recover data stolen from 12 U.S. organizations, marking a significant win […]
Osiris Ransomware – New Strain Using POORTRY Driver in BYOVD Attack
Researchers have disclosed details of Osiris, a new ransomware family that emerged in late 2025, targeting a major food service franchisee in Southeast Asia. Unlike […]
Fortinet FortiGate Devices Breached – Firewall Configs Stolen
Security researchers have confirmed a new wave of automated attacks against Fortinet FortiGate firewalls, with adversaries exploiting the FortiCloud SSO feature to create rogue accounts […]