Researchers Link DigiCert Security Incident To GoldenEyeDog Subgroup
Security researchers have linked the April 2026 DigiCert security incident to a GoldenEyeDog subgroup that allegedly stole code signing certificates and used them to sign malware.
Phishing Campaign Targets Punjab DLMIS Users Through Fake Driving License Portal
A phishing campaign targeting Punjab DLMIS users has been identified, using a fake driving license application website promoted through Facebook sponsored advertisements to harvest sensitive user information.
RedWing Malware As A Service Operation Offers Android Banking Fraud Tools Through Telegram
Security researchers at Zimperium have uncovered RedWing, an Android malware as a service platform being rented on Telegram to steal banking credentials, one time passcodes, and remotely control infected devices.
Fake Rewards Campaign Targets Mobile Users Through SMS
A new scam is targeting mobile users through SMS messages offering fake reward points and gifts, directing victims to a fraudulent website that requests shipping charges for non existent items.
WhatsApp Username Feature Raises Concerns Over Impersonation And Online Fraud
WhatsApp’s upcoming username feature is raising concerns over impersonation, phishing, and online fraud as regulators and security experts assess the risks associated with username based messaging.
Infoblox Identifies More Than 236,000 DCloud Uni App Websites Used In Crypto Scams And Phishing Campaigns
Infoblox has identified more than 236,000 DCloud Uni App based websites involved in cryptocurrency scams, phishing campaigns, fake exchanges, wallet drainers, and fraudulent investment schemes targeting victims worldwide.
FBI And CISA Warn Of Signal Backup Recovery Key Phishing By Russian Intelligence Hackers
FBI and CISA have updated their advisory warning that Russian intelligence linked hackers are targeting Signal Backup Recovery Keys through phishing campaigns to gain access to private messages and account backups.
Microsoft Warns of Photo ZIP Phishing Campaign Targeting Hotels With Node.js Malware
Microsoft has warned of an active phishing campaign targeting hotels across Europe and Asia using photo themed ZIP files to deploy a Node.js implant and establish persistent access to hospitality systems.
Google Reveals Turla’s STOCKSTAY Backdoor Used In Ukraine Cyber Espionage Campaigns
Google uncovers STOCKSTAY, a newly documented Turla backdoor targeting government and military organizations in Ukraine and European entities through phishing, malicious archives, and advanced espionage techniques.
Cybersecurity Bulletin Highlights Browser Threats, Software Flaws, AI Abuse, And Global Cyber Risks
A new cybersecurity bulletin details major security developments including browser threats, curl vulnerabilities, phishing campaigns, smart TV proxyware, AI driven cybercrime, ransomware activity, and software security updates.
