Cyber CrimeNewDutch Server Raids Expose Infrastructure Ties to Russian Operations
Authorities seized 800 servers in a probe targeting individuals accused of facilitating cyberattacks through sanctioned networks.
Cyber Crime
Data breaches, ransomware payouts, and phishing operations rarely make the news until the damage is already done. This is where Xploitwire tracks the attackers — who they are, how they got in, and what it means for the organizations and people caught in the blast radius.
Cyber CrimeNew
Cyber CrimeNewAI Gateways Face New Threats as Attackers Pivot to Cryptomining
Researchers have identified a new vector where cloud-hosted AI infrastructure is being hijacked for illicit cryptocurrency operations.
Cyber CrimeNewTravel Sector Under Siege as TA558 Pivots Toward Stealthy Payloads
Threat actors are weaponizing reservation-themed emails with container files to bypass modern Microsoft Office security protections.
Advertisement
Cyber CrimeNewFragmented Threats: From State-Level Ops to Emerging Software Risks
A wide-ranging breakdown of recent cybersecurity disruptions, from intelligence agency offensives to critical enterprise data leaks.
Cyber CrimeNewLidl Breach Highlights Supply Chain Vulnerability in Retail Sector
A third-party security failure exposed customer data, forcing the retail giant to warn users about the heightened risk of phishing attacks.
When Local Government Surrenders to Seven-Figure Extortion Demands
An unnamed county allegedly bypassed federal guidance, paying a $1 million ransom to digital extortionists without any proof of data deletion.
Cyber CrimeNewDisrupting the Digital Assembly Line: A Strike Against Cybercrime
International authorities and private tech firms have dismantled critical infrastructure fueling the Amadey and StealC malware networks.
Cyber CrimeNewDormant Accounts Fuel Stealthy GitHub Reconnaissance Campaigns
Threat actors are weaponizing years-old accounts to map organizational structures and probe sensitive repositories via the GitHub API.
Cyber CrimeNewAI Bot Vulnerabilities Expose High-Profile Instagram Accounts
A flaw in Meta’s automated support system allowed attackers to hijack accounts by manipulating conversational AI workflows.
Advertisement
Cyber CrimeNewRyuk Ransomware Fugitive Extradited to US for Federal Prosecution
A key operative in the Ryuk ransomware syndicate faces serious prison time following a guilty plea in a Portland federal court.
Cyber CrimeNewCenters Laboratory Breach Exposes Half a Million Patient Records
A severe data exfiltration event at a New Jersey diagnostics firm highlights the evolving extortion tactics of the WorldLeaks group.
Cyber CrimeNewRansomware Resurgence Signals New Era of Fragmented Threat Actors
After a brief period of decline, ransomware activity has spiked as the dissolution of the Conti group fuels a new wave of attacks.
Cyber CrimeNewProgress Software Security Warning Heightens Enterprise Data Anxiety
A credible security threat targeting ShareFile Storage Zone Controllers has prompted emergency shutdowns and ongoing investigations.
Cyber CrimeNewThe Negotiator Who Betrayed Victims to Empower Ransomware Gangs
A professional ransomware negotiator faces a 70-month prison sentence after secretly colluding with attackers to extort his own clients.
Cyber CrimeStudent Loan Data Exposure Risk Amplified by Forgiveness Scams
A breach at Nelnet Servicing has compromised the personal information of millions, creating a prime target for future phishing.
Advertisement
Cyber CrimeDismantling Russian Coms: A Blueprint for Caller ID Fraud
UK authorities charge five individuals as they reveal the inner workings of a massive, sophisticated global spoofing operation.
Cyber CrimeThe Massive Scale of the 0ktapus Phishing Campaign Revealed
Researchers identify over 130 firms compromised in a sprawling campaign that successfully bypassed traditional MFA protections.
Cyber CrimeForg365 PhaaS Escalates Microsoft 365 Account Takeover Risks
A new subscription-based phishing service leverages device code theft and AI to bypass traditional security defenses.
Cyber CrimeLidl Breach Highlights Risks of Third-Party Data Management
A security incident at an IT service provider has resulted in the exposure of personal data for Lidl online shoppers across three countries.
Cyber CrimeA Misconfigured Server Unlocks Three-Actor Phishing Ecosystem
A single exposed directory reveals how multiple threat actors leverage AiTM tools and OAuth abuse to compromise corporate accounts.
Cyber CrimeDormant Infostealer Infection Turns World Cup Spat Into Data Breach
A decade-long developer's device, infected nearly a year ago, likely provided the gateway for a breach of the Argentine Football Association.
Advertisement
Cyber CrimeThe Rise of Vibe-Coded Malware: AI Accelerating Intrusion Playbooks
Threat actors are leveraging AI to refine and accelerate traditional attack chains, lowering the barrier to entry for complex operations.
Cyber CrimeEU Escalates Digital Defense Against Russian Sabotage Networks
New sanctions signal a firm shift in European policy as officials target the infrastructure-focused espionage activities of Moscow.
Cyber CrimeFashion Retailer Miinto Exposes Customer Data Vulnerabilities
A recent security breach at the Miinto platform has left shoppers facing an increased risk of targeted phishing attacks.
Cyber CrimeWhen Teen Hackers Fall: Inside the Dismantling of Scattered Spider
Two British teenagers plead guilty, exposing the massive operational and financial toll of the notorious Scattered Spider hacking syndicate.
Cyber CrimeRansomware's Legacy: What a Ryuk Guilt Plea Reveals About Cybercrime
An Armenian hacker faces 15 years in prison after admitting to his role in the devastating Ryuk ransomware attacks on American targets.
Cyber CrimeRansomware’s Stealthy Ascent: Microsoft-Signed Driver Bypasses Defenses
GodDamn ransomware now exploits PoisonX, a Microsoft-signed kernel driver, to disable endpoint security, marking a critical escalation in evasion tactics.
Advertisement
Cyber CrimeDeception's New Front: From Global Fraud to Stealthy Software Subversion
Recent reports reveal a vast landscape of cyber threats, from international law enforcement combating social engineering at scale to sophisticated tactics undermining software integrity and user trust.
Cyber CrimeAI-Powered Phishing Toolkit Lowers Barrier for Sophisticated Cyberattacks
Forg365, a sophisticated phishing-as-a-service platform, now combines AI-assisted lure generation with advanced AiTM and device code methods to compromise Microsoft 365 accounts and maintain persistent access.
Cyber CrimeVishing to Data Heist: Helix Group Elevates SharePoint Extortion Threat
A sophisticated new group named Helix leverages identity-based phishing and MFA abuse to infiltrate corporate SharePoint environments, exfiltrating sensitive data for extortion or sale.