FortiClientEMS Vulnerabilities Under Active Exploitation, Expose Systems to RCE
CVE-2026-35616 and CVE-2026-21643 expose FortiClientEMS to SQL Injection and RCE attacks, with active exploitation observed in the wild.
$20 Billion Lost to Cybercrime as AI and Investment Scams Surge: FBI Report
The FBI Internet Crime Report 2025 highlights a shift in how cybercrime operates today.
German authorities identify REvil and GandCrab ransomware bosses
The Federal Police in Germany (BKA) has identified two Russian nationals as the leaders of GandCrab and REvil ransomware operations between 2019 and 2021.
German authorities identify REvil and GangCrab ransomware bosses
The Federal Police in Germany (BKA) has identified two Russian nationals as the leaders of GandCrab and REvil ransomware operations between 2019 and 2021.
New GPUBreach attack enables system takeover via GPU rowhammer
A new attack, dubbed GPUBreach, can induce Rowhammer bit-flips on GPU GDDR6 memories to escalate privileges and lead to a full system compromise.
Crypto Phishing and the Human Layer: The Real Weakness Is People
FBI: Cyber fraud surges to $17.6 billion in losses as scams, crypto theft soar
Medusa ransomware group using zero-days to launch attacks within 24 hours of breach, Microsoft says
Big tech vows to continue CSAM scanning in Europe despite expiration of law allowing it
Microsoft fixes Classic Outlook bug causing email delivery issues
Microsoft has resolved a known issue that was preventing some Classic Outlook users from sending emails via Outlook.com.
Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit
Exploit code has been released for an unpatched Windows privilege escalation flaw reported privately to Microsoft, allowing attackers to gain SYSTEM or elevated administrator permissions.
German police unmask two suspects linked to REvil ransomware gang
Microsoft removes Support and Recovery Assistant from Windows
Microsoft has deprecated and removed the Support and Recovery Assistant (SaRA) command-line utility from all in-support versions of Windows updates starting March 10.
Watch this video of how a job interviewer exposes a North Korean fake IT worker
An apparent North Korean worker was caught visibly stumped during a remote job interview when asked to insult the country's leader.
First stalkerware maker prosecuted since 2014 receives no jail time
Microsoft links Medusa ransomware affiliate to zero-day attacks
Microsoft says that Storm-1175, a China-based financially motivated cybercriminal group known for deploying Medusa ransomware payloads, has been deploying n-day and zero-day exploits in high-velocity attacks.
Drift $280M crypto theft linked to 6-month in-person operation
The Drift Protocol says that the $280+ million hack it suffered last week was the result of a long-term, carefully planned operation that included building "a functioning operational presence inside the Drift ecosystem."
Singapore, US warn of latest Fortinet bug being exploited in wild
CISA orders feds to patch Fortinet flaw exploited in attacks by Friday
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered federal agencies to secure FortiClient Enterprise Management Server (EMS) instances against an actively exploited vulnerability by Friday.
Why Simple Breach Monitoring is No Longer Enough
Infostealers are harvesting credentials and session cookies at scale, bypassing traditional defenses. Lunar explains why simple breach monitoring alone can't keep up with modern credential-based attacks.
Hackers threaten to leak data after cyberattack on German party Die Linke
Major outage hits Russian banking apps, metro payments across regions
UK Businesses Are Being Targeted Through Their Middle East Supply Chains — What to Do Now
Middle East supply chain risk is exposing UK firms to indirect cyberattacks, DDoS, and third-party threats across global dependencies.
75% of Cyberattacks Start with Phishing Emails, UAE Cyber Council Says
The UAE Cyber Security Council outlined how phishing emails cyberattacks are typically structured to push users into quick action.
North Korea Spent 6 Months Infiltrating Drift Protocol Only to Drain $285M in 12 Mins
The message Drift Protocol posted to X on April 1, opened with an unusual disclaimer: "This is not an April Fools joke." Within hours, the reason became clear. A $285 million exploit had wiped out more than half of the Solana-based decentralized perpetual futures exchange's total value.
Cyberattack Disrupts Massachusetts Emergency Dispatch, 911 Services Remain Active
Massachusetts Emergency cyberattack disrupts Patriot Regional services in Pepperell, Ashby, Dunstable, and Groton; 911 remains operational.
A Compromised Tool Opened the Door to a 91GB European Commission Data Leak
If the European Commission cloud breach feels familiar, it’s because the pattern is becoming more common.
Education Authority Cyberattack Disrupts Schools Across Northern Ireland
Education Authority cyberattack disrupts schools in Northern Ireland, blocking access to IT systems as recovery efforts continue before exams.
FCC Moves to Fine Voxbeam $4.5M in Robocall Case Linked to Foreign Traffic
The Voxbeam robocall case is built around what regulators see as a failure to follow clear compliance requirements.
Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab
An elusive hacker who went by the handle "UNKN" and ran the early Russian ransomware groups GandCrab and REvil now has a name and a face. Authorities in Germany say 31-year-old Russian Daniil Maksimovich Shchukin headed both cybercrime gangs and…