Cybersecurity News & Threat Intel - Cybercory

Blockchain-Based Magecart Campaign Turns Ethereum Into a Hiding Place for Card Skimmers

3 days ago 0

A new twist in online payment fraud is showing how cybercriminals are adapting blockchain technology for a purpose it was never designed to serve: hiding...

VMware Workstation and Fusion Hit by Critical Host-Code Execution Flaws, Patch to 26H1u1 Now

Patch 4 hours ago

Patch

VMware Under Siege: Critical vCenter and ESXi Flaws Demand Immediate Patching

In what's shaping up to be one of the most consequential VMware security advisories of the year, Broadcom has released VMSA-2026-0006, addressing five vulnerabilities...

Breaking news:

Patch

VMware Workstation and Fusion Hit by Critical Host-Code Execution Flaws, Patch to 26H1u1 Now

The vulnerabilities, tracked as CVE-2026-59346 and CVE-2026-59347, affect VMware...

Patch

SonicWall Urges Immediate Patching as Actively Exploited SMA1000 Flaws Put Remote Access Appliances at Risk

The vulnerabilities, tracked as CVE-2026-83548 and CVE-2026-83549, affect SonicWall...

Stay on top of what's going on with our subscription deal!

Worldwide

Cloud Security

AWS Root Accounts Targeted in Password-Spraying Campaign Across More Than 150 Organizations

Attackers are increasingly targeting the most powerful identities in...

Banking & Cybersecurity

Blockchain-Based Magecart Campaign Turns Ethereum Into a Hiding Place for Card Skimmers

A new twist in online payment fraud is showing...

AI & Cybersecurity

The ExploitGym Cyber Incident: Inside the 700-Agent Swarm Attack on Hugging Face and OpenAI Infrastructure

In what marks one of the most astonishing operational...

AI & Cybersecurity

OpenAI Disrupts Russia-Linked AI Influence Campaign Built Around a Fake “Expert” Institute

OpenAI says it has disrupted and banned a cluster...

Advanced Persistent Threat

When Trust Becomes the Payload: Cato CTRL Unmasks Fake Codex ClickFix Campaign Targeting macOS Users

As artificial intelligence transitions from standalone productivity assistants to...

Patch

CISA Adds Actively Exploited Oracle Vulnerability to KEV Catalog: Why Organizations Should Patch Now

The vulnerability, tracked as CVE-2026-21962, affects Oracle HTTP Server...

Breached

Your Car’s Infotainment System Has Been Hijacked: First-Ever Android Malware Targets Vehicle Head Units

You're driving to work, your favorite playlist streaming through...

Network Security

Cisco Issues Critical Crosswork Security Update for Four High-Severity Vulnerabilities

Cisco has released a critical security hardening update for...

Security Camera

Operation CameraSwarm: How One Hacker Silently Hijacked 14,000 Security Cameras and Left the Door Open for Someone Else

When most people think about a cyberattack, they picture...

Advanced Persistent Threat

The “City-Forum” Campaign: Advanced Attacker Exploits Salesforce and ServiceNow Guest Access in Unprecedented Multi-Platform Assault

For over seventeen months, a single server has been...

Virtualization Security

Global VMware vCenter Exploitation Campaign Uncovered: Chinese-Nexus APT Suspected in Critical Infrastructure Attacks

In what security researchers are calling one of the...

Advanced Persistent Threat

VMware vCenter Under Active Attack: 361 Systems Compromised in Global APT Campaign

Threat actors are actively exploiting critical vulnerabilities in VMware...

AI & Cybersecurity

Zoomsday: AI Turns a One-Day Security Research Sprint Into a Wake-Up Call for the Cybersecurity Industry

Security researchers at A Security say they discovered a...

Ransomware

CISA, FBI Warn of Rising Gunra Ransomware Threat as RaaS Expands Globally

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), FBI,...

Database Security

Attackers Turn Oracle Databases into Cyber Weapons: Huntress Uncovers “khunt” Toolkit That Escalates SQL Injection into Windows SYSTEM Access

A newly documented attack uncovered by Huntress demonstrates how...

Featured Interviews

#Interview: Global Cyber Leadership Series: Bridging the Talent Gap in Africa

Read The Interview

More...

#Interview: Rethinking Security Operations Centers (SOCs): Towards a New Generation of...

Read The Interview

More...

#Interview: Cyber Resilience: Preparing African Organizations for the Next Major Cyberattacks

Read The Interview

More...

Middle East

View All

The Many Faces of ModernStealer: How One Session ID Exposed a Possible Underground Military Data Network

Cybercory Team - August 3, 2026

The investigation, conducted using StealthMole's intelligence platforms, began with a single post advertising an alleged confidential document concerning...

Telegram, Trusted Tools and a Hidden Payload: Inside the New Attack Targeting Middle East Governments

Ouaissou DEMBELE - July 21, 2026

A new cyber espionage campaign targeting government entities in the Middle East has exposed a familiar but increasingly...

ITU CyberDrill 2026 Unites Africa and Arab States to Strengthen Regional Cyber Resilience

July 4, 2026

Oman’s Solar Future Needs Cyber Resilience: Chinese Investments Signal a New Era of Energy Security

June 13, 2026

Oman’s RO12 Million Tourism Expansion Signals New Opportunities and New Cybersecurity Challenges

June 2, 2026

Fast & Furious: Iranian Cyber Unit “Nimbus Manticore” Deploys AI-Driven Malware in Escalating Cyber War

May 26, 2026

Lenovo Doubles Down on Saudi Arabia with Strategic Leadership Move

April 27, 2026

Hack-for-Hire Espionage Exposed: BITTER-Linked Campaign Targets Civil Society with Mobile Spyware

April 9, 2026

AI & Cybersecurity

View All

The ExploitGym Cyber Incident: Inside the 700-Agent Swarm Attack on Hugging Face and OpenAI Infrastructure

Cybercory Team - August 29, 2026

In what marks one of the most astonishing operational misalignments in the history of artificial intelligence research, roughly 1,200 autonomous AI agents...

OpenAI Disrupts Russia-Linked AI Influence Campaign Built Around a Fake “Expert” Institute

August 26, 2026

Zoomsday: AI Turns a One-Day Security Research Sprint Into a Wake-Up Call for the Cybersecurity Industry

August 12, 2026

Claude Opus 5 Lands on AWS: A New Era for Enterprise AI and Cybersecurity

July 27, 2026

AgentForger: The One-Click Attack That Turns ChatGPT Into Your Company’s Worst Insider Threat

July 24, 2026

The Top 10s

View All

Shielding Your Inbox: Top 10 Email Security Gateway Solutions in 2024

Ouaissou DEMBELE - June 12, 2024

Our inboxes are gateways to our personal and professional lives. They hold sensitive information, access credentials, and confidential communications. With phishing attacks,...

Fortressing Your Business Data: Top 10 Most Secure ERP Systems in 2024

June 11, 2024

The Digital Fortress: Top 10 Most Secure Operating Systems in 2024

June 10, 2024

Guarded Gates: Top Best 10 Secure Email Services in 2024

June 10, 2024

Securing the Gateway: Top Best 10 Web Application Firewalls (WAFs) in 2024

June 8, 2024

Africa

View All

Africa

Kenya President’s Official Website Hit by Cybersecurity Incident as Authorities Launch Forensic Investigation

Africa

ITU CyberDrill 2026 Unites Africa and Arab States to Strengthen Regional Cyber Resilience

Africa

Mastercard Unveils Pan-African Cybersecurity Center to Strengthen Africa’s Digital Future

America

View All

America

DOJ Secures $400M TikTok Settlement Over Children’s Privacy

America

U.S. Expands Cyber Arsenal: White House Opens New Front Against Transnational Cybercrime

Asia

View All

Advanced Persistent Threat

China-Linked UAT-7810 Expands LapDogs ORB Network with New Linux Backdoors and Enhanced Malware

AI & Cybersecurity

India’s Financial System Holds Firm as Global Risks Mount: RBI Flags AI Cyber Threats, Geopolitical Uncertainty, and Market Vulnerabilities

Asia

Inside the Quiet Siege: How Chinese-Speaking Hackers Built a Hidden Empire Across Southeast Asia’s Power Grids and Ministries

How To

View All

How To

How to identify fake social media profiles? A Guide to Unmasking the Imposters & Identifying Fake Social Media Profiles

How To

How to avoid social engineering scams on social media?: The Social Siren Song

How To

How To Avoid Online Shopping Scams?: The Siren Song of Savings

How To

How to protect your credit card information online?: Fort Knox for Your Wallet

What Is

View All

DoS & DDoS

Under Siege: Understanding DoS and DDoS Attacks in Cybersecurity

What Is

What Is VPN? Tunneling Through the Web: A Comprehensive Guide

What Is

What Is A Computer Virus? The Invisible Invaders: A Comprehensive Guide

What Is

What Is Ransomware? Held Hostage in the Digital Age: Understanding the Threat

Europe

Russia’s FSB Issues Arrest Warrant for Telegram Founder Pavel Durov Over Terrorism Allegations

Cybercory Team - July 29, 2026

Authentication Systems

Ghostwriter Escalates: UNC1151 Launches Aggressive Gmail Phishing Campaign Capable of Stealing 2FA Codes

Cybercory Team - June 16, 2026

View All

Oceania

Banking & Finance

ACCC Greenlights Industry Coordination to Migrate Card Payments to Advanced Encryption Standard

On 14 August 2025, the Australian Competition and Consumer...

Data Breach

Australian Privacy Regulator Launches Landmark Civil Penalty Action Against Optus Over 2022 Data Breach

On 8 August 2025, the Australian Information Commissioner (AIC)...

America

US Deports Notorious Australian Hacker After Landmark Cybercrime Conviction

DENVER/ADELAIDE – United States Immigration and Customs Enforcement (ICE)...

Data Breach

Australia’s Privacy Alarm Bells: A Deep Dive into the Notifiable Data Breaches Report (July-December 2024)

In an era where cyber threats are escalating with...

Banking & Finance

ASIC Sues FIIG Securities Over Cybersecurity Failures Leading to Data Theft

The Australian Securities and Investments Commission (ASIC) has launched...

Hacked - Breached

Breached

Your Car’s Infotainment System Has Been Hijacked: First-Ever Android Malware Targets Vehicle Head Units

Breached

eScan Confirms Update Infrastructure Incident, Assures Customers No Product Vulnerability

America

Betterment Confirms Hacker Gained System Access, Issues Critical Security Update to Customers

Breached

Cognizant Hit With US Lawsuits After TriZetto Healthcare Data Breach

Breached

F5 Confirms Nation-State Cyberattack on Product Development Systems – Here’s What You Need to Know and Do

View All

Zero-Day

Virtual private networks (VPNs)

Critical WatchGuard Firebox VPN Vulnerability Actively Exploited in the Wild

Application Security

Final Patch Tuesday of 2025: Microsoft Releases 57 Security Updates, Including Actively Exploited Zero-Day and Critical Vulnerabilities Across Windows and Chromium-Based Edge

Patch

Breaking News: Chrome Zero-Day Exploited in the Wild – Urgent Update Released

Europe

Dutch NCSC Confirms Advanced Zero-Day Attacks on Citrix NetScaler: Multiple Critical Organizations Breached

Patch

Apple Urges Immediate Update as July 2025 Security Patches Address Multiple Zero‑Days

View All

Cryptocurrencies

Banking & Cybersecurity

Blockchain-Based Magecart Campaign Turns Ethereum Into a Hiding Place for Card Skimmers

Blockchain & Crypto Security

DPRK Cyber Operators Pivot to ‘NullReceiver’: How Blank Ethereum Transfers Are Redefining Blockchain Dead Drops

Advanced Persistent Threat

Dysphoria Unleashed: The 200,000-Device Botnet That’s Using Blockchain and Its Own Victims to Hide

Blockchain & Crypto Security

CPX Unveils Crypto Defense Solution to Fortify Security in the Digital Asset Ecosystem

Banking & Finance

Future Blockchain Summit x Fintech Surge Returns to Power the Next Era of Digital Assets

View All

Cloud Security

AWS Root Accounts Targeted in Password-Spraying Campaign Across More Than 150 Organizations

Advanced Persistent Threat

The “City-Forum” Campaign: Advanced Attacker Exploits Salesforce and ServiceNow Guest Access in Unprecedented Multi-Platform Assault

Advanced Persistent Threat

VMware vCenter Under Active Attack: 361 Systems Compromised in Global APT Campaign

AI & Cybersecurity

Claude Opus 5 Lands on AWS: A New Era for Enterprise AI and Cybersecurity

AI & Cybersecurity

AI Supply Chain Alert: Google Vertex AI Flaw Could Have Enabled Silent Model Hijacking and Remote Code Execution

View All

Ransomware

CISA, FBI Warn of Rising Gunra Ransomware Threat as RaaS Expands Globally

Network Security

Cookie Crumbles: How a Palo Alto VPN Flaw Became Qilin’s Golden Ticket

Data Security - DLP - Encryption

The Gentlemen” Ransomware: The Silent Worm Turning Encryption into a Network-Wide Catastrophe

Advanced Persistent Threat

The Rise of “Mule-as-a-Service”: How Cybercriminals Industrialized Money Laundering

National Security

False Flag Ransomware: Inside the Shadow Campaign Linking Chaos Attacks to State-Sponsored Espionage

View All

Red Alert: Critical Cisco Flaw Exposes Businesses to Hostile Takeovers of Communication Systems

Imagine your phone calls being intercepted, your emails hijacked, and your entire internal communication network falling into the hands of cybercriminals. This frightening scenario...

Application Security

Deceptive Loans and Digital Extortion: Pakistan-based Threat Actor Targets Indians with Fake Loan App

In a concerning trend, Indian users are being targeted by a Pakistan-based threat actor wielding a deceptive weapon: a fake loan Android application. This...

Automotive & Cybersecurity

Securing Unmanned and Autonomous Systems: A Critical Priority

In today's rapidly evolving technological landscape, unmanned and autonomous systems have become increasingly prevalent across various industries. From drones and robots to self-driving vehicles,...

Africa

Cybersecurity Awareness 16 -Defending Your Digital Den: 10 Tips to Avoid Ransomware Attacks During AFCON 2024

As the electrifying drumbeat of AFCON 2024 echoes across Ivory Coast, fans worldwide gear up to celebrate the magnificent dance of football. But amidst...

Europe

Cyberwarfare on the Tundra: Ukrainian Hackers Cripple Russian Science Center

The digital frontlines of the ongoing conflict between Ukraine and Russia have witnessed another dramatic development. The notorious Ukrainian hacker group "BO Team" has...

Breached

Cards Dealt, Data Exposed: Indian Gaming Platforms Teenpatti.com and Mpl.live Face Leaked User Information

The Indian online gaming industry has been dealt a rough hand. Data from two prominent platforms, Teenpatti.com and Mpl.live, has reportedly been put up...

America

Double Dipping Disaster: Jason’s Deli Hit by Credential Stuffing Attack, Exposing User Data

In a concerning breach for the popular restaurant chain, Jason's Deli recently revealed that customer data was exposed in a credential stuffing attack. This...

America

H2O Hacked: Veolia North America Hit by Ransomware, Raising Concerns for Critical Infrastructure

In a chilling instance of cybercrime targeting critical infrastructure, global water services giant Veolia North America recently fell victim to a ransomware attack. While...

Breached

Leaked Identities, Shattered Trust: BuyGoods.com Breach Exposes Sensitive User Data

In a major cybersecurity breach, online retailer BuyGoods.com has exposed the personal information of millions of its customers and affiliates, including sensitive Personally Identifiable...

Africa

Cybersecurity Awareness 15 -Shielding the Beautiful Game: 10 Tips to Avoid DoS Attacks During AFCON 2024

As the electrifying anticipation for AFCON 2024 in Ivory Coast reaches fever pitch, fans worldwide prepare to witness footballing artistry unfold. But beyond the...

Africa

Cybersecurity Awareness 14 -Fortressing Your Fanhood: 10 Tips to Avoid Data Breaches at AFCON 2024

As the electrifying drumbeat of AFCON 2024 echoes across Ivory Coast, fans around the world gear up to celebrate the magnificent dance of football....

Malware Protection

Beyond Bamboozling: North Korean Hackers Mask RokRAT Backdoor with Fabricated Research

In a chilling display of digital deception, North Korean hackers have weaponized seemingly legitimate research papers to deliver the malicious RokRAT backdoor. This cunning...

Ransomware

Locked Out, Not Locked Down: 10 Steps to Outsmart Ransomware and Protect Your Digital Domain

Imagine this: you open your computer, only to be greeted by a chilling message. Your precious files, photos, and documents are locked, held hostage...

Data Security

Big Brother No More: FTC Cracks Down on InMarket for Selling Users’ Precise Location Data

In a significant victory for consumer privacy, the Federal Trade Commission (FTC) has banned data aggregator InMarket from selling or licensing precise location data...

Application Security

Ghost in the Machine: MavenGate Lurks in Abandoned Libraries, Threatening Android and Java

The digital world, like a bustling metropolis, thrives on interconnectedness. In this symphony of code, libraries play a crucial role, offering pre-written snippets to...

Africa

Burkina Faso Fighting Against Cybercrime: Burkina Faso Cracks Down on Cybercrime Gang Targeting Money Transfer Shops

Ouagadougou, Burkina Faso: Burkinabè authorities have dealt a blow to cybercrime, dismantling a ring of young criminals specializing in identity theft and digital cash...

Data Security

The Password Paradox: 10 Essential Habits for Digital Hygiene in a Data-Driven World

In the labyrinthine realm of the internet, passwords serve as our digital gatekeepers, guarding our private information and online identities. But just like an...

Password Security

Taming the Password Jungle: 10 Reasons to Embrace a Password Manager in the Digital Age

Passwords, passwords, everywhere! In our digital age, they act as the keys to our online lives, unlocking email accounts, bank vaults, and the endless...

Africa

Cybersecurity Awareness 13 -Heading the Ball of Truth: 10 Tips to Avoid Misinformation and Disinformation During AFCON 2024

As the excitement for AFCON 2024 in Ivory Coast reaches fever pitch, the digital pitch explodes with news, rumours, and opinions. While this vibrant...

Asia