Cyber CrimeHealthcare SSO Targeted by ShinyHunters
A new advisory from Health-ISAC warns that extortion actors are compromising single-sign-on credentials to exfiltrate cloud data.
Cyber Crime
Data breaches, ransomware payouts, and phishing operations rarely make the news until the damage is already done. This is where Xploitwire tracks the attackers — who they are, how they got in, and what it means for the organizations and people caught in the blast radius.
Cyber Crime
Cyber CrimeSteam Forums Hit by ClickFix Malware
Threat actors are exploiting technical support discussions on Steam to trick gamers into executing malicious PowerShell cryptominers.
Cyber CrimeThe Mystery of Hacktivist Phineas Fisher
A decade after their most prominent breaches, the figure known as Phineas Fisher remains one of cybersecurity's enduring enigmas.
Cyber CrimeBlueNoroff’s Sophisticated Phishing Kit
North Korean threat actors are leveraging AI-driven lures and Telegram account hijacks to target cryptocurrency and finance professionals.
Cyber CrimeChick-fil-A Confirms Credential Breach
Credential stuffing attacks targeting the Chick-fil-A One platform have exposed the personal data of over 13,000 customers.
Cyber CrimeA Week of Diverse Cybersecurity Threats
From AI-powered infostealers and automotive vulnerabilities to massive kernel patch requirements, recent threats span multiple sectors.
Cyber CrimeShinyHunters Brand Used in $2K Scams
Threat actors are repurposing publicly leaked data to launch targeted sextortion campaigns demanding Bitcoin payments from breach victims.
Cyber CrimeOrigin Energy Investigates Data Breach
Australian energy provider Origin confirms unauthorized access to customer records amid claims of a multi-million user data ransom.
Cyber CrimeUniversity Ransomware Risks Escalate
Higher education institutions face a shifting threat landscape as specialized ransomware operations increasingly prioritize university targets.
Cyber CrimeSnapchat Hacker Receives Six-Year Term
An Illinois man was sentenced to 76 months in federal prison for orchestrating a campaign to compromise 750 social media accounts.
Cyber CrimeInsurance Phishing Pivots to Real-Time
New research details how threat actors are ditching delayed credential harvesting for live, session-based account hijacking.
Cyber CrimeDevMan RaaS Formalizes Affiliate Control
A centralized portal upgrade aims to standardize affiliate workflows and tighten operational management for the DevMan ransomware group.
Clop Gang Targets Critical PLM Software
Threat actors are exploiting a severe vulnerability in PTC Windchill and FlexPLM to exfiltrate sensitive enterprise product data.
Cyber CrimeSurveillance Disguised as Privacy Tools
Researchers have uncovered an Iran-linked campaign using fake VPNs and media players to deploy spyware against specific user groups.
Cyber CrimeEuropol Targets The Com Content Ecosystem
Law enforcement has flagged over 4,000 URLs linked to a network that recruits minors for digital extortion and physical violence.
Cyber CrimeVatican-Endorsed App Leaks User Profiles
A critical IDOR vulnerability in the Pope's official prayer app has left the personal data of over 700,000 users exposed for months.
Cyber CrimeAI Agents Automate Post-Exploitation Task
A newly uncovered intrusion suggests threat actors are leveraging autonomous AI tools to streamline lateral movement and enumeration.
Cyber CrimeHotel Wi-Fi DNS Hijacks Target M365
Researchers report that compromised hotel network gateways are redirecting business travelers to sophisticated phishing portals.
Cyber CrimeBorder Device Wipe Leads to Indictment
A federal case involving a duress password suggests new legal risks for travelers using privacy-focused mobile software.
Cyber CrimeUS Targets Global Scammers via Visas
New State Department policy revokes visa access for cybercriminals and their families to combat cross-border investment scams.