ShinyHunters Claims Breach of European Commission, Over 350GB of Data Allegedly Stolen

179/69 Monday, March 30, 2026 The cybercrime group ShinyHunters has claimed responsibility for breaching the European Commission and exfiltrating more than 350GB of data. The stolen data was reportedly published on the group’s Tor-based leak site and is believed to include email system data, databases, internal documents, and contractual records. However, the exact scope and […]

sittisak mintaboon

March 30, 2026

Alert: Hackers Begin Scanning for Critical Citrix NetScaler Vulnerability (CVSS 9.3)

178/69 Monday, March 30, 2026 There are reports of threat actors actively scanning for a newly disclosed critical vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway (CVE-2026-3055), which carries a high severity score of 9.3 (Critical). The vulnerability stems from insufficient input validation, leading to an out-of-bounds read issue. This flaw allows unauthenticated remote […]

sittisak mintaboon

March 30, 2026

New Phishing Campaign Targets TikTok for Business Accounts, Bypasses Two-Factor Authentication

177/69 Friday, March 27, 2026 Threat actors are actively targeting TikTok for Business accounts in a new phishing campaign designed to evade security bots and bypass detection mechanisms. These accounts are considered high-value targets, as they can be abused for malicious advertising, ad fraud, and the distribution of harmful content. Due to their credibility and […]

sittisak mintaboon

March 27, 2026

LAPSUS$ Claims Breach of AstraZeneca, Allegedly Stealing Over 3GB of Sensitive Data

176/69 Friday, March 27, 2026 The cybercrime group LAPSUS$ has claimed responsibility for breaching AstraZeneca and exfiltrating approximately 3GB of internal data. The allegedly stolen data includes system credentials, authentication tokens, source code in multiple languages such as Java, Angular, and Python, as well as employee information. However, AstraZeneca has not officially confirmed the incident. […]

sittisak mintaboon

March 27, 2026

Hundreds of Mirai Variants Drive 24% Surge in Botnet Activity, Expanding IoT Attack Risks Globally

175/69 Friday, March 27, 2026 A recent report from Pulsedive and Spamhaus highlights alarming trends in the second half of 2025, revealing a 24% increase in command-and-control (C&C) servers worldwide. These servers are increasingly leveraging everyday IoT devices from homes and offices as part of cyberattack infrastructure. Notably, the United States has surpassed China as […]

sittisak mintaboon

March 27, 2026

Google Releases Chrome 146 Update Fixing 8 High-Severity Memory Safety Vulnerabilities

174/69 Thursday, March 26, 2026 Google has released Chrome 146 to address eight high-severity vulnerabilities, primarily related to memory safety issues affecting seven different components of the browser. The most notable flaw, CVE-2026-4673, is a heap buffer overflow in WebAudio, for which the researcher received a $7,000 bug bounty reward. Another issue, CVE-2026-4677, involves an […]

sittisak mintaboon

March 26, 2026

QualDerm Partners Data Breach Impacts Over 3.1 Million Individuals

173/69 Thursday, March 26, 2026 QualDerm Partners, a U.S.-based provider of dermatology clinic management services, has disclosed a data breach that occurred in December 2025, affecting more than 3.1 million individuals. The incident involved unauthorized access to the company’s internal systems, allowing attackers to exfiltrate sensitive data. QualDerm supports multiple dermatology clinics by providing administrative, […]

sittisak mintaboon

March 26, 2026

FCC Moves to Restrict Sale of Foreign-Made Routers, Citing National Security Risks to Critical Infrastructure

172/69 Thursday, March 26, 2026 The Federal Communications Commission (FCC) has announced a major escalation in cybersecurity measures by adding consumer-grade routers manufactured outside the United States to its Covered List. This move means that new router models not produced domestically will no longer be eligible for authorization to be marketed or sold in the […]

sittisak mintaboon

March 26, 2026

INTERPOL-Led “Operation Alice” Dismantles Over 373,000 Dark Web Sites Exploiting Children

171/69 Wednesday, March 25, 2026 Law enforcement agencies from 23 countries, led by German authorities and Europol, have successfully carried out “Operation Alice”, targeting one of the largest fraudulent networks on the dark web. The operation resulted in the takedown of more than 373,000 onion domains. The investigation began in 2021, initially focusing on a […]

sittisak mintaboon

March 25, 2026

Nasir Security Group Targets Energy Companies in the Middle East

170/69 Wednesday, March 25, 2026 Cybersecurity firm Resecurity has reported the discovery of threat activity linked to a cyber threat group known as Nasir Security, which is targeting energy sector organizations across the Middle East. The activity comes amid heightened regional security tensions, particularly within Gulf Cooperation Council (GCC) countries. The energy sector remains a […]

sittisak mintaboon

March 25, 2026
1 2 3 83