The notorious Everest hacking group has allegedly claimed responsibility for a significant data breach targeting Nissan Motor Co., Ltd. The cybercrime syndicate purports to have exfiltrated approximately 900 gigabytes of sensitive information from the Japanese automaker, signaling a potentially widespread compromise of internal systems. This incident, if confirmed, underscores the…

Cybersecurity professionals are issuing warnings about a new phishing campaign that weaponizes seemingly innocuous employee performance reports to deploy the Guloader malware. This sophisticated social engineering tactic exploits workplace familiarity and urgency to trick unsuspecting employees into downloading and executing malicious files. The attack vector, identified by ASEC analysts, aims…

A sophisticated cyber threat known as ValleyRAT_S2 is actively targeting organizations, deploying stealthy malware designed to maintain a prolonged presence and pilfer sensitive financial data. This second-stage payload, part of the broader ValleyRAT malware family, operates as a potent remote access trojan, granting adversaries extensive control over compromised systems and…

Security Middle East magazine will be present at Intersec Dubai 2026, the premier event for the security, fire, and safety sectors in the region. The exhibition is scheduled to take place at the Dubai World Trade Centre from January 12 to 14, 2026, and is expected to attract key stakeholders…

A recent investigation has illuminated the technical underpinnings of clandestine carding operations, discovering 28 unique IP addresses and 85 domains actively hosting illicit marketplaces where stolen credit card data is traded. These platforms function as sophisticated e-commerce sites for financial fraud, facilitating the exchange of compromised payment information, with prices…

The cybercrime landscape has been significantly altered by the emergence of “Pig Butchering as a Service” (PBaaS), a dangerous trend that lowers the barrier to entry for sophisticated fraud operations. The “Penguin” operation exemplifies this shift, offering a comprehensive ecosystem of tools and stolen data that empowers scammers to launch…

A sophisticated, large-scale scanning campaign conducted between December 25–28 identified over 240 exploits that threat actors could use to gain access to internet-facing systems. This extensive reconnaissance operation, orchestrated by a single threat actor and originating from two IP addresses linked to CTG Server Limited, signals a concerning evolution in…

A burgeoning cybersecurity threat, the Fog ransomware, has begun aggressively targeting educational and recreational organizations across the United States. Since early May 2024, security analysts have been tracking its proliferation through multiple incident response cases. The overwhelming majority, 80 percent, of impacted organizations fall within the education sector, with the…

A significant cybersecurity threat is currently targeting Windows users in Korea through popular webhard file-sharing services. The Ahnlab Security Intelligence Center (ASEC) has identified a sophisticated malware known as xRAT, also referred to as QuasarRAT, being actively distributed. This remote access trojan is being deceptively packaged and offered as adult…

Chinese-speaking threat actors are suspected of exploiting a severe vulnerability in VMware ESXi, a virtual machine management software, potentially as early as February 2024. This sophisticated attack chain, observed in December 2025, began with a compromised SonicWall VPN appliance and aimed to achieve a virtual machine (VM) escape. Cybersecurity firm…

The FBI has issued a warning concerning new spearphishing campaigns orchestrated by the North Korean state-sponsored hacking group Kimsuky. These sophisticated attacks are leveraging malicious QR codes, a tactic known as “Quishing,” to target U.S. organizations, particularly those with a focus on North Korea. The FBI highlights that think tanks,…

A sophisticated malware campaign is currently distributing a dangerous piece of malware, identified as Winzipper, through fake WinRAR download websites. This attack, which has emerged from links shared across various Chinese websites, targets users who seek to download the popular file compression tool from unofficial sources. The trojanized installer poses…