Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts
Malware running as an ordinary user on a Windows machine can sign into a victim's passkey-protected accounts without a fingerprint,...
victims
Origin Energy Data Breach Exposes Customer and Partial Card Details
An Australian energy retailer has joined the country’s growing list of major cyberattack victims after confirming hackers accessed customer data,...
Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable
A malvertising operation dubbed SourTrade is making victims' browsers build the final Windows executable themselves, using a legitimate Bun runtime...
CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking
For years, phishing campaigns targeting financial institutions followed the same playbook. Victims were tricked into entering usernames and passwords, attackers...
Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge
The Chaos ransomware group ran its command-and-control through the victim's own browser. Cisco Talos on Thursday detailed msaRAT, the Rust...
New ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Password
ClickLock Stealer, a new macOS infostealer, answers a victim's refusal by killing their apps on a loop until they hand...
Friday Squid Blogging: Victims of Unregulated Squid Fishing
Friday Squid Blogging: Victims of Unregulated Squid Fishing Dolphins, sharks, turtles, and human workers are all victims of unregulated squid...
Krispy Kreme Settlement Deadline Nears: Eligible Members Could Claim Up to $3,500
Krispy Kreme’s data breach settlement is entering its final stretch, and eligible victims have only weeks left to claim cash...
When ransomware gets physical: cybercriminals turn to threats of violence
For years, ransomware has been a crime committed at arm's length. Hackers in one country, victims in another. The only...
Trump Taxes and the Price of Privacy
There is an old saw in privacy and data breach litigation: Everyone gets paid—except, often, the victims. Plaintiffs’ lawyers receive...
Storm-2561 lures victims to spoofed VPN sites to harvest corporate logins
Storm-2561 lures victims to spoofed VPN sites to harvest corporate logins Pierluigi Paganini March 14, 2026 Attackers linked to Storm-2561...
