North Korean operatives are infiltrating European companies, particularly in defense and blockchain sectors, using fake identities and advanced technical skills to conduct illicit activities and extortion.
Google has launched a beta version of end-to-end encryption for Gmail, enhancing email security by ensuring that only the sender and recipient can access the content, while preventing Google from viewing inboxes.
Cybercriminals are increasingly using lookalike domains and spoofed websites to execute targeted email-based social engineering and financial fraud across various sectors, including finance, legal services, insurance, and construction.
A sophisticated multi-stage phishing attack leveraging vishing, remote access tools, and DLL sideloading has been identified, exploiting Microsoft Teams and Quick Assist to deploy a JavaScript-based command-and-control backdoor on victim devices.
Ukrzaliznytsia, Ukraine’s state-owned railway operator, suffered a significant cyber-attack attributed to Russian intelligence services, disrupting its digital services and prompting increased physical ticket sales while investigations into the incident continue.
A hacker group named Rose87168 claimed responsibility for breaching Oracle Cloud’s federated SSO servers, compromising approximately 6 million user records and exposing sensitive data due to a zero-day vulnerability.
