ShinyHunters Claims Theft of Up to 1 Petabyte of Data from Telus Following Breach of Telus Digital

152/69 Tuesday, March 17, 2026 Canadian telecommunications giant Telus has disclosed that its subsidiary, Telus Digital, experienced an unauthorized system intrusion, allowing threat actors to access internal systems for a period of time. The incident was made public on March 12, 2026, and the company is currently investigating the full impact of the breach. While […]

sittisak mintaboon

March 17, 2026

Payload Ransomware Group Breaches Bahrain Hospital, Threatens to Leak 110 GB of Data if Ransom Is Unpaid

151/69 Tuesday, March 17, 2026 The cybercriminal group Payload Ransomware has claimed responsibility for breaching the systems of Royal Bahrain Hospital (RBH), a leading private healthcare provider in Bahrain. The group alleges that it has exfiltrated more than 110 GB of sensitive data and has published screenshots of internal system interfaces and patient databases on […]

sittisak mintaboon

March 17, 2026

Storm-2561 Uses SEO Poisoning to Distribute Fake VPN Software and Steal Corporate Credentials

150/69 Monday, March 16, 2026 Researchers from Microsoft Defender have identified a credential-theft campaign linked to the threat actor Storm‑2561. In this campaign, attackers use SEO poisoning to manipulate search engine rankings. When users search for terms such as “Pulse Secure client” or “VPN download,” they are redirected to fake websites impersonating legitimate vendors including […]

sittisak mintaboon

March 16, 2026

INTERPOL Operation Synergia III Dismantles Global Cybercrime Infrastructure, Arrests 94 Suspects Worldwide

149/69 Monday, March 16, 2026 INTERPOL has announced the results of a global cybercrime crackdown under Operation Synergia III, involving law enforcement agencies from 72 countries. The operation successfully took down more than 45,000 IP addresses and servers linked to malicious activities used to conduct cyberattacks such as phishing, malware distribution, and ransomware campaigns. The […]

sittisak mintaboon

March 16, 2026

Warning for OpenClaw Users: AI Agent Vulnerability Exposes Systems to Prompt Injection Attacks and Data Theft

148/69 Monday, March 16, 2026 China’s CNCERT has issued an urgent security advisory regarding OpenClaw (formerly known as Clawdbot). The warning highlights that the platform’s weak default security configurations, combined with high-level system permissions granted to the AI agent, may create serious risks. These permissions allow the AI to perform tasks on behalf of users, […]

sittisak mintaboon

March 16, 2026

Meta and 11 Countries Dismantle Southeast Asian Scam Network, Shut Down 150,000 Accounts and Arrest 21 Suspects

147/69 Friday, March 13, 2026 Meta has collaborated with law enforcement agencies from 11 countries to dismantle a major scam network operating in Southeast Asia, resulting in the shutdown of more than 150,000 accounts linked to scam centers and the arrest of 21 suspects by Thai police. The operation expands on a pilot initiative launched […]

sittisak mintaboon

March 13, 2026

KadNap Malware Hijacks Over 14,000 Network Devices to Build Botnet for Malicious Traffic

146/69 Friday, March 13, 2026 Cybersecurity researchers have discovered the spread of KadNap malware, which has compromised more than 14,000 edge network devices, most of them ASUS routers, to form a botnet used for relaying malicious internet traffic. The campaign was first detected in August 2025, with the United States accounting for more than 60% […]

sittisak mintaboon

March 13, 2026

As Vehicles Become Computers, Researchers Warn Ransomware Is Targeting Not Only Automakers but Also Drivers

145/69 Friday, March 13, 2026 Today, the automotive industry is transitioning from traditional mechanical systems to Software-Defined Vehicles (SDVs). While this shift enhances convenience through technologies such as cloud connectivity, Over-the-Air (OTA) software updates, and artificial intelligence, it also significantly expands the cybersecurity attack surface. Statistics from 2025 show that 494 cyberattacks against the global […]

sittisak mintaboon

March 13, 2026

BlackSanta Malware Targets HR Departments, Uses EDR Killer to Disable Kernel-Level Security Tools

144/69 Thursday, March 12, 2026 Researchers from Aryaka have identified a cyberattack campaign targeting Human Resources (HR) departments across multiple organizations for more than a year. The attacks are delivered through spear-phishing emails that include malicious ISO files disguised as resumes, often pretending to originate from cloud services such as Dropbox. When the file is […]

sittisak mintaboon

March 12, 2026

Modified AuraInspector Tool Used to Scan and Extract Data from Salesforce Systems

143/69 Thursday, March 12, 2026 The security team of Salesforce (CSOC) has warned that threat actors are actively scanning publicly accessible Salesforce Experience Cloud websites using a modified version of AuraInspector to identify and extract sensitive data. The original AuraInspector is an open-source tool developed by Google and Mandiant to audit Salesforce Aura and Experience […]

sittisak mintaboon

March 12, 2026
1 2 3 80