-
Passkey attacks expose serious authentication weaknesses. Attackers use downgrade tricks to bypass FIDO2 passkeys and force weaker sign-in methods. Users are at risk unless they remove backup options and enforce strong access policies. How Downgrade Attacks Work Proofpoint researchers show that phishing kits can prompt users to sign in using passwords instead of passkeys—especially when…
-
Embargo ransomware has emerged as a sophisticated and high‑earning threat. The group racked up $34 million in crypto payments by targeting healthcare, manufacturing, and business services. Its Rust‑based toolkit and AI integration underline its advanced capabilities. High Earnings and Quiet Operations Blockchain analysts from TRM Labs estimate that Embargo commands around $34 million in incoming…
-
Russian military censorship has reached a new high, with authorities blocking more than 25,000 websites under wartime laws. This sharp increase highlights the Kremlin’s growing control over online communication and its determination to silence dissenting voices. Massive Growth in Blocks Independent watchdog Roskomsvoboda reports that Russian authorities added over 5,000 new websites to their blocked…
-
St. Paul cyberattack shut down city online systems, prompting officials to refuse ransom and launch a comprehensive recovery—Operation Secure St. Paul. The city brought in the National Guard and the FBI to secure its digital infrastructure. The Attack and Immediate Response The cyberattack started on July 25, when suspicious activity disrupted payment systems, public Wi‑Fi, and internal city…
-
Marks & Spencer online shop back online and fully operational after almost four months of disruption caused by a cyberattack. The retailer has restored full service, including Click & Collect, next-day delivery, and in-store returns, marking a significant milestone in its recovery. Full Service Restoration After weeks of uncertainty, Marks & Spencer has announced that…
-
Law enforcement has executed a major blow against the BlackSuit ransomware seizure, dismantling the gang’s core infrastructure in a global operation. Authorities removed key systems and seized over $1 million in cryptocurrency, disrupting the group’s ability to launch further attacks. What Law Enforcement Seized On July 24, 2025, agencies involved in Operation Checkmate seized four…
-
The Pacific HealthWorks ransomware incident has escalated into a serious health data breach. The Everest gang has published sensitive files from at least 50 partner medical practices—including data from both Pacific HealthWorks and its sister company, La Perouse—exposing a wide swath of patient and operational records. Scope of the Data Exposure Everest posted hundreds of sample…
-
The UK’s data watchdog has advised retailers to avoid sharing shoplifter photos in public areas, citing GDPR concerns. With theft on the rise, many shopkeepers feel compelled to act—but the Information Commissioner’s Office (ICO) emphasizes that privacy rules still apply. ICO Guidance on Privacy and Proportion The ICO warns that posting suspected shoplifter images in…
-
A New South Wales court has introduced a highly unusual ankle monitor selfie rule for bail supervision. This comes after the sudden collapse of the private company that provided electronic ankle monitoring services across the state, forcing officials to create new oversight methods almost overnight. From Ankle Monitor to Hourly Photos For months, murder suspect…
-
The GreedyBear crypto theft campaign has entered a more aggressive phase, targeting cryptocurrency users worldwide with a coordinated mix of fake browser extensions, phishing websites, and malicious software. Researchers say the group has stolen over $1 million in digital assets, marking one of its most profitable runs to date. Expanding the Attack Arsenal GreedyBear’s operation…