Global security desk · updated coverage of threats, exploits & breaches

Articles

How Adversaries Hide Command and Control Inside Trusted Cloud Platforms

Threat actors have spent years refining how they stay invisible once inside a target network. One of the most effective shifts in tradecraft involves routing…

Critical Flaw in Smart Home Hub Exposes Households to Full Network Takeover

A serious security weakness has been uncovered in a widely deployed smart home hub, one that lets an attacker move from a single compromised device into every…

Record 2 Tbps DDoS Wave Tests Resilience of Global Financial Networks

A distributed denial-of-service campaign has crested at an unprecedented 2 terabits per second, hammering a cluster of financial institutions with the largest…

New malware strain targets browser passwords and crypto wallets

Security researchers are tracking a newly observed malware strain that combines browser credential theft with cryptocurrency wallet collection. The campaign is…

Ransomware group claims breach of industrial control system vendor

A ransomware gang has publicly taken credit for compromising an industrial control system manufacturer, publishing portions of stolen data on a leak site as…

Wi-Fi protocol flaw puts home and business routers at risk

A weakness in the way Wi-Fi devices process protocol traffic can turn a wireless networking problem into a serious remote code execution risk. If a router…

Cloud Breach Exposes Customer Secrets Across Shared Infrastructure

A data breach at a major cloud provider can turn one compromised environment into a security crisis for thousands of businesses. The immediate victims may…

New Backdoor Campaign Puts Australia’s Energy Networks Under Pressure

A state-linked advanced persistent threat group has deployed a previously undocumented backdoor against organisations in the energy sector, according to threat…

Phishing campaign impersonates tax authorities to steal credentials

A new wave of phishing messages is exploiting the authority of tax agencies to trick people into handing over passwords, identity details and payment…

Supply chain attack exposes software vendor trusted by major enterprises

A compromise at a software supplier can turn a routine update into a highly effective intrusion tool. That is the defining concern in the latest supply chain…