Latest Cyber Attacks

RansomHub operators exploited an unpatched VPN vulnerability to gain initial access before deploying ransomware across the network. The attack leveraged double extortion tactics, exfiltrating patient data before encryption.

A malicious maintainer injected backdoor code into a widely used cryptography package. The malicious code silently exfiltrated environment variables and API keys from affected applications.

An IDOR (Insecure Direct Object Reference) vulnerability in the mobile banking API allowed attackers to enumerate account numbers and initiate unauthorised fund transfers.