ShadyPanda Weaponizes Trusted Browser Extensions in 7-Year Campaign
A seven-year malware campaign turned trusted browser extensions into spyware, affecting 4.3 million. WeTab and other extensions remain active in Edge's store.
Everest Ransomware Gang Claims Under Armour and Petrobras Breaches
Everest ransomware group claims breaches of Under Armour and Petrobras in mid-November 2025. The attacks exposed customer data and seismic survey information.
PureRAT Malware Campaign Exploits Hotels to Steal Guest Banking Details
Hotels worldwide face PureRAT infections via fake Booking.com emails. The result is stolen credentials and scams against real guests.
Memento Labs Spyware Used in Chrome Zero-Day Campaign
Operation ForumTroll used a Chrome zero-day to install spyware traced to Memento Labs. The phishing campaign hit research and media groups.
Medical Specialist Group Fined £100,000 After Cyber Attack Exposed Patient Data
A £100,000 fine hits the Medical Specialist Group after hackers stole patient data, highlighting major security lapses and the cost of poor cyber hygiene.
Hacker Group TA585 Deploys MonsterV2 Malware with Advanced Web Injection Capabilities
TA585 launches MonsterV2 malware, capable of live transaction tampering via browser injection. Just-in-time privilege controls help limit damage.
JLR’s Production Crisis Exposes Manufacturing’s Cyber Weakness
JLR's global factories remain offline after a major cyberattack. Weeks of halted production expose serious risks in connected manufacturing systems.
Salesloft Drift AI Agent Vulnerability Leads to Widespread Data Theft
Threat actors used stolen OAuth tokens to breach Salesforce data at scale, exposing major flaws in AI agent integrations and enterprise security.
Electronics Manufacturer Data I/O Hit by Ransomware Attack
A ransomware attack knocked out key systems at Data I/O, a chip services firm for Apple and Google. The fallout exposes serious supply chain vulnerabilities.
Dior Joins Growing List of Retailers Targeted by Cybercriminals
Dior joins a wave of retail brands hit by cyberattacks. While financial data was safe, exposed shopping histories raise major phishing risks.
