Hot Topic

A threat actor claims to have breached Huawei Technologies Co., Ltd. (Huawei), a multinational technology company based in Shenzhen, China, that specializes in telecommunications equipment. The incident, which the actor states occurred in October 2025, allegedly resulted in the exfiltration of internal company data. According to the actor, the compromised …

The Trinity of Chaos, a ransomware group linked to Lapsus$, Scattered Spider, and ShinyHunters, has created a Data Leak Site on the TOR network. This site includes data from 39 companies, such as Aeromexico, AirFrance, Google, Cisco, Stellantis, and Qantas Airlines, affected by attacks on weak Salesforce instances and other …

Afghanistan has plunged into a nationwide internet blackout, with the Taliban cutting off more than 43 million citizens from global communications as part of what it has described as “morality measures.” Internet watchdog Netblocks said Monday in a post on X that multiple networks had been disconnected through the morning …

In 2025, cyberattacks are increasing in frequency and scale, and 2026 will likely see no relief. New technologies like agentic AI and quantum computing present risks and benefits. Ultimately, humans remain the weakest link and the strongest defense. Experts predict that by 2026, cybercrime could become the world’s third-largest economy …

The UK’s National Crime Agency (NCA) has arrested a man in the UK as part of an investigation into a cyber incident impacting Collins Aerospace. The incident, which was reported on 19 September, affected flights at Heathrow and other European airports over the weekend. NCA officers, supported by the South …

Cloudflare announced today that it has successfully defended against the largest recorded DDoS attack, which peaked at 22.2 terabits per second and 10.6 billion packets per second, surpassing the previous record of 11.5 Tbps. This event shows the growing intensity of cyber threats. Record‐Breaking Speed and Scale: This record DDoS …

A new proof-of-concept tool named EDR-Freeze has been developed, capable of placing Endpoint Detection and Response (EDR) and antivirus solutions into a suspended “coma” state. Zero Salarium’s technique uses a built-in Windows feature, providing a stealthy option compared to the rising trend of Bring Your Own Vulnerable Driver (BYOVD) attacks …

AI-driven malware called ‘MalTerminal’ utilizes OpenAI’s GPT-4 to create harmful code like ransomware and reverse shells, indicating a major change in threat creation and deployment. The discovery was part of SentinelLABS’ “LLM-Enabled Malware In the Wild” research presented at the LABScon 2025 security conference. PromptLock: An Academic Proof-of-Concept: In August …

Cybersecurity researchers revealed a zero-click vulnerability in OpenAI ChatGPT’s Deep Research agent that lets attackers leak sensitive Gmail inbox data through a single crafted email, requiring no user action. Radware named the attack  ShadowLeak. After informing responsibly on June 18, 2025, OpenAI resolved the issue in early August. “The attack …

Several European airports are experiencing flight delays and cancellations due to a cyber attack on a check-in and boarding systems service provider. The attack has made automated systems unusable, forcing only manual check-in and boarding, says Brussels Airport. Heathrow and Berlin airports reported that the attack disrupted flights, advising passengers …