Category: News

Alleged ‘Hafnium’ hacker-for-hire extradited to the United States A Chinese national has appeared before the United States District Court in Houston after being extradited from Italy over the weekend. Thirty-four-year-old Xu Zewei is accused of directing a sophisticated computer intrusion campaign that compromised more than twelve thousand seven hundred North American organisations, including academic institutions…

US reportedly charges Scattered Spider hacker arrested in Finland A nineteen-year-old dual United States and Estonian citizen has been arrested in Finland following a request from American law enforcement authorities. The arrest represents a significant development in the ongoing international effort to disrupt the Scattered Spider hacking collective, a group that has been linked to…

CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline The U.S. Cybersecurity and Infrastructure Security Agency has added four actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog. The flaws impact SimpleHelp remote support software, Samsung MagicINFO 9 Server digital signage platform, and D-Link DIR-823X series routers. Federal Civilian Executive Branch agencies…

Researchers Uncover Pre-Stuxnet ‘fast16’ Malware Targeting Engineering Software Cybersecurity researchers at SentinelOne have discovered a previously undocumented malware framework called fast16 that dates back to 2005. The Lua-based implant was designed to sabotage high-precision engineering and simulation software by introducing systematic errors into mathematical calculations. The malware was uncovered after SentinelOne identified an artifact named…

26 FakeWallet Apps Found on Apple App Store Targeting Crypto Seed Phrases Cybersecurity researchers from Kaspersky discovered 26 malicious apps on the Apple App Store that impersonate popular cryptocurrency wallets to steal recovery phrases and private keys. The apps, dubbed FakeWallet, have been active since at least fall 2025 and mimic wallets including Bitpie, Coinbase,…

NASA Employees Duped in Chinese Phishing Scheme Targeting U.S. Defense Software The NASA Office of Inspector General revealed that Chinese national Song Wu posed as a U.S. researcher in a multi-year spear-phishing campaign targeting NASA, government entities, universities, and private companies. The campaign ran from January 2017 to December 2021, with victims including employees at…

FIRESTARTER Backdoor Hit Federal Cisco Firepower Device, Survives Security Patches CISA revealed that an unnamed federal civilian agency’s Cisco Firepower device running Adaptive Security Appliance software was compromised in September 2025 with malware called FIRESTARTER. The backdoor was deployed as part of a widespread campaign orchestrated by an advanced persistent threat actor to obtain access…

China-Linked GopherWhisper Infects 12 Mongolian Government Systems with Go Backdoors A previously undocumented China-aligned advanced persistent threat group dubbed GopherWhisper has been discovered targeting Mongolian governmental institutions. The group was first identified in January 2025 following the discovery of a novel backdoor named LaxGopher on a system belonging to a Mongolian governmental entity. According to…

Apple Fixes iOS Flaw That Let FBI Recover Deleted Signal Messages Apple has released emergency security updates for iOS and iPadOS to fix a vulnerability that allowed law enforcement to recover deleted notification data from iPhones, including message content from secure messaging applications like Signal. The flaw came to light after court testimony revealed that…