The UK is pushing forward with comprehensive cybersecurity legislation as attacks on essential services escalate. The bill would require operators of critical infrastructure to meet tougher security standards and report threats earlier.
Dark LLMs like WormGPT 4 and KawaiiGPT are assisting novice hackers with basic cybercrime tasks, but they’re technically underwhelming and haven’t created novel threats. Researchers say these tools mainly help script kiddies rather than enabling sophisticated attacks. The AI malware revolution appea
Two popular code formatting websites have exposed thousands of sensitive credentials belonging to banks, government agencies, and healthcare organizations. The exposed data includes authentication keys and login information that could give hackers system access. Researchers found over five years of
The Royal Borough of Kensington and Chelsea, Westminster City Council, and Hammersmith and Fulham are all affected by what appears to be a serious cyber intrusion. Shared IT services between the councils have created a domino effect, knocking multiple boroughs offline simultaneously.
A sophisticated supply chain attack has compromised over 500 npm packages and spilled into Java/Maven artifacts. The malware uses a two-stage loader to steal environment variables and scan for secrets while remaining undetected during installation.
The Smishing Triad, a Chinese-speaking cybercrime group, is running an expanding global SMS phishing campaign targeting Egyptian service providers. Their operation uses customizable phishing kits deployed through Telegram and shared hosting infrastructure. Meanwhile, the Darcula PhaaS platform has u
Amazon is taking aggressive legal action against counterfeiters through its Counterfeit Crimes Unit. The company filed lawsuits targeting massive trademark fraud schemes and counterfeit skincare products, working with partners like L’Oréal and Nintendo to disrupt criminal operations.
A critical vulnerability in Oracle’s Identity Manager tool is being actively exploited in attacks. The flaw allows unauthenticated attackers to take over systems and has a severity rating of 9.8 out of 10. Federal agencies have until December 12 to implement fixes.
Security researchers have uncovered a massive hacking operation targeting thousands of Asus routers. The suspected China-state group is controlling devices that are no longer supported by the manufacturer, leaving them vulnerable to ongoing attacks.
The cybersecurity landscape in 2025 is being defined by products that combine AI security with advanced data protection. Leading vendors including CrowdStrike, Palo Alto Networks, and SentinelOne are releasing tools focused on these critical areas. These products offer automated data classification
