09 Nov, 2026

New PathWiper data wiper malware hits critical infrastructure in Ukraine

A new data wiper malware named ‘PathWiper’ is being used in targeted attacks against critical infrastructure in Ukraine, aimed at disrupting operations in the country. The payload was deployed through a legitimate endpoint administration tool, indicating that attackers had achieved administrative access to the system through a prior compromise. Cisco Talos researchers who discovered the attack attributed […]

2 mins read

Critical Fortinet flaws now exploited in Qilin ransomware attacks

The Qilin ransomware operation has recently joined attacks exploiting two Fortinet vulnerabilities that allow bypassing authentication on vulnerable devices and executing malicious code remotely. Qilin (also tracked as Phantom Mantis) surfaced in August 2022 as a Ransomware-as-a-Service (RaaS) operation under the “Agenda” name and has since claimed responsibility for over 310 victims on its dark […]

2 mins read

Police arrests 20 suspects for distributing child sexual abuse content

Law enforcement authorities from over a dozen countries have arrested 20 suspects in an international operation targeting the production and distribution of child sexual abuse material. Starting in late 2024, the Spanish National Police discovered multiple instant messaging groups dedicated to the circulation of child sexual exploitation images and alerted authorities in other countries through […]

2 mins read

Google’s upcoming Gemini Kingfall is allegedly a coding beast

Google’s AI advancement is not slowing down, and we might be getting yet another powerful model codenamed “Gemini Kingfall.” As spotted by users on X, Gemini Kingfall briefly appeared on AI Studio for approximately 20 minutes before it was taken down. While the details aren’t available, Gemini Kingfall doesn’t appear to be an update to the existing […]

1 min read

ChatGPT prepares o3-pro model for $200 Pro subscribers

OpenAI is planning to ship an update to ChatGPT that will turn on the new o3 Pro model, which has more compute to think harder. ChatGPT currently offers o4-mini, o4-mini-high, GPT-4.5, GPT-4.1, GPT-4.1-mini, and o3 for $20 Plus subscribers. ChatGPT $200 Pro subscription has all of those plus an o1 Pro model, which offers more […]

1 min read

FBI: BADBOX 2.0 Android malware infects millions of consumer devices

The FBI is warning that the BADBOX 2.0 malware campaign has infected over 1 million home Internet-connected devices, converting consumer electronics into residential proxies that are used for malicious activity. The BADBOX botnet is commonly found on Chinese Android-based smart TVs, streaming boxes, projectors, tablets, and other Internet of Things (IoT) devices. “The BADBOX 2.0 botnet consists […]

5 mins read

Old AT&T data leak repackaged to link SSNs, DOBs to 49M phone numbers

A threat actor has re-released data from a 2021 AT&T breach affecting 70 million customers, this time combining previously separate files to directly link Social Security numbers and birth dates to individual users. AT&T told GeekFeed that they are investigating the data but also believe it originates from the known breach and was repackaged into […]

2 mins read

Hacker selling critical Roundcube webmail exploit as tech info disclosed

Hackers are likely starting to exploit CVE-2025-49113, a critical vulnerability in the widely used Roundcube open-source webmail application that allows remote execution. The security issue has been present in Roundcube for over a decade and impacts versions of Roundcube webmail 1.1.0 through 1.6.10. It received a patch on June 1st. It took attackers just a […]

3 mins read

Germany fines Vodafone $51 million for privacy, security breaches

The German data protection authority (BfDI) has fined Vodafone GmbH, the telecommunications company’s German subsidiary, €45 million ($51.4 million) for privacy and security violations. “Due to malicious employees in partner agencies who broker contracts to customers on behalf of Vodafone, there had been fraud cases due to fictitious contracts or contract changes at the expense of […]

2 mins read

ViLE gang members sentenced for extortion, police portal breach

Two members of a group of cybercriminals named ViLE were sentenced this week for hacking into a federal law enforcement web portal in an extortion scheme. According to court documents, ViLE specializes in obtaining personal information about targets to harass, threaten, or extort them, a practice known as “doxing.” To collect sensitive information on their victims, […]

2 mins read