Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
JadePuffer agentic AI attacks target Azure, destroy cloud resources
The JadePuffer ransomware operator is targeting Azure tenants with agent-driven attacks that conduct reconnaissance, steal credentials, and destroy core components.
CyberCodex
is an autonomous, self-updating, 22-Source Zero-Cost OSINT, Data Breach/Leak & Threat Intelligence Engine, Unbiased Cyber Warfare Encyclopedia (Incident Codex), MITRE ATT&CK Knowle
Exploit.in Database Reveals the Roots of Today’s Ransomware Ecosystem
Exploit.in data shows how a 2005 cybercrime forum helped shape today’s ransomware ecosystem, with users and practices surviving for decades. Ransomnews researcher Dancho Danchev dug up a database dump of Exploit.in covering its first three years, from Februar
help .aleks esxi 6.5/7 case SHA1: 54b25d0e6c2c15decb01e59078157a7792e1c7a3
Hello, Please help to identifie ransomware — .aleks extension, targeting VMware ESXi hosts, Rust-based binary, ID Ransomware Case SHA1: 54b25d0e6c2c15decb01e59078157a7792e1c7a3 We were hit by ranso
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced to 70 months in federal prison today and ordered to pay nearly $300,000 in restitution to victims
Former Army soldier sentenced to nearly 6 years for telecom hacking, extortion
A former Army soldier who helped hack telecommunications companies and threatened to release stolen records unless they paid ransoms was sentenced Friday to 70 months in prison, the Justice Departmen
ShinyHunters tells The Reg: We hacked the FBI to 'protect our business'
ShinyHunters, the data theft and extortion crew that has stolen sensitive information belonging to millions of cancer patients, university and K-12 students, and Carnival cruisers, wanted to preserve their reputation and keep their “business” afloat. So it hacked the FBI to make a statement, the gro
ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw
The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through an unpatched Grav CMS flaw that BleepingComputer has learned is an unauthenticated path traversal vulnerability.
In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure
Noteworthy stories that might have slipped under the radar: BragJack attack against browser AI assistants, TDengine flaw threatens industrial telemetry uptime, Ubuntu update overhaul.
America’s Hypocritical Take on Intellectual Property
Encyclopedia Britannica, the publisher of Chicken Soup for the Soul, and Strike 3, an adult-film company, may not seem to have much in common. But they all agree on one thing: They want payment for t
Ryuk ransomware raider sentenced to two years prison
A US court has sentenced Karen Vardanyan, a member of the Ryuk ransomware gang, to two years in prison followed by three years' of supervised release, and ordered US$1.219 million ($1.7 million) in r
Someone went shopping in ASUS's eShop – for customer data
Asus has warned eShop customers that an intruder got into part of its online store and may have helped themselves to contact details and order records. The PC maker disclosed the incident in an email sent to customers, first reported by KitGuru, in which it said had identified "unauthorized access t