Reports of a new malware called ZionSiphon, designed to target Israeli water infrastructure, have been largely dismissed as overblown by cybersecurity analysts. The malware, initially identified by Darktrace and analyzed by industrial cybersecurity firm Dragos, was claimed to be capable of sabotaging water treatment plants by altering chlorine levels or…

North Korean state-sponsored actors are leveraging artificial intelligence to fuel a sophisticated phishing campaign targeting software developers. This campaign, identified by cybersecurity firm Expel and attributed to a subgroup within the broader Lazarus hacking ecosystem, uses AI-powered techniques to create convincing fake job opportunities and malicious coding challenges designed to…

A new macOS malware dubbed notnullOSX has emerged in early 2026, specifically designed to pilfer cryptocurrency from Mac users holding digital assets exceeding $10,000. This sophisticated threat operates with meticulous precision, aiming to appear entirely legitimate throughout its infiltration process, posing a significant risk to unsuspecting users. Researchers at Moonlock…

A sophisticated nation-state-linked hacking group, identified as the Harvester APT, has developed a novel method for concealing its malicious communications within seemingly legitimate Microsoft Outlook mailboxes. This innovative technique leverages the Microsoft Graph API and real Outlook accounts as a covert command-and-control (C2) channel, making the group’s activities significantly harder…

Cybersecurity researchers have identified a new malware campaign that is targeting financial traders by impersonating the popular charting platform TradingView. Attackers have created a fraudulent website promoting an AI-powered trading assistant called TradingClaw, which, upon download and execution, installs the potent Needle Stealer malware. This sophisticated data-stealing tool is designed…

A new cyberattack campaign attributed to the notorious threat group Tropic Trooper has been uncovered, employing sophisticated techniques including a custom beacon listener and Visual Studio (VS) Code tunnels for remote access. This campaign, which began on March 12, 2026, has been targeting individuals in Taiwan, South Korea, and Japan,…

Organized fraud networks are exploiting French fintech accounts to rapidly move stolen money, often before detection can occur. These sophisticated operations create fake business accounts on freelancer fintech platforms and utilize them as money mules to launder illicit funds, bypassing traditional security measures. This trend highlights a growing challenge in…

Cybercriminals are increasingly exploiting Google’s advertising platform to target cryptocurrency users, employing sophisticated tactics to drain digital wallets and steal sensitive seed phrases. Recent analyses reveal a sharp surge in these malicious Google Ads campaigns throughout 2026, with a significant peak in activity observed in March. This trend underscores a…

A sophisticated malware distribution campaign has been identified, leveraging 109 fake GitHub repositories to deploy the SmartLoader and StealC malware. This operation highlights a growing trend of threat actors exploiting trusted developer platforms to distribute malicious software to unsuspecting users. The campaign, active for at least seven weeks and still…

Microsoft has issued a stark warning about a sophisticated threat group named Jasper Sleet, which is leveraging stolen and fabricated identities to infiltrate organizations by posing as legitimate IT professionals. This North Korea-linked phishing attack, also known as cloud reconnaissance or supply chain attack, exploits the widespread adoption of remote…

House Republicans have introduced the Secure Data Act, a new legislative proposal aimed at establishing comprehensive digital privacy protections for American consumers. The bill, unveiled Wednesday, grants individuals more control over their personal information, focusing on data collection for targeted advertising, third-party sales, and automated decision-making processes. The Secure Data…

A new and highly destructive malware, dubbed Lotus Wiper, has been identified actively targeting organizations within Venezuela’s energy and utilities sector. Unlike typical ransomware that extorts victims for financial gain, this sophisticated threat is designed purely for destruction, permanently wiping drives and deleting files in a manner that makes data…