Update (1/6/2025): The UN General Assembly on Dec. 24, 2024, adopted the UN Cybercrime Treaty without a vote. The treaty will open for signature at a formal ceremony to be hosted in Hanoi, Viet Nam, in 2025. It will enter into force 90 days after being ratified by the 40th signatory. Most UN Member States,...Read More

Serge-Olivier Paquette, the Chief Product Officer at Flare, identifies some of the most significant blind spots in today’s cybersecurity workforce and explains how attackers are exploiting them. This article originally appeared in Insight Jam, an enterprise IT community that enables human conversation on AI. Downloading Roblox on a work laptop might seem innocent—until it isn’t. A...Read More

Victim negotiations and internal data leaked in major breach The notorious LockBit ransomware gang has fallen victim to a serious data breach, exposing sensitive information from its operations and internal infrastructure. The breach, which has defaced the group’s dark web affiliate panels, includes the leak of a MySQL database dump containing critical records related to...Read More

Patched Windows zero-day vulnerability (CVE-2025-29824) in the Common Log File System (CLFS) driver was exploited in attacks linked to the Play ransomware operation prior to its disclosure on April 8, 2025. The flaw, which enabled privilege escalation via a use-after-free condition in the clfs.sys kernel driver, was weaponized by Balloonfly, the cybercrime group behind Play...Read More

The cyber threat intelligence industry is strongly rooted in a military-government mindset in large part because so many people doing the work in private industry came from the national security space. These people bring with them the mission and objectives learned in the public sector. This can result in biasing espionage and spying over the...Read More

LockBit has suffered a data breach following panel defacement. (Photo: Tero Vesalainen/ Shutterstock) LockBit, a ransomware group known for numerous cyberattacks, has encountered a data breach following the defacement of its dark web affiliate panels. These panels now display a message stating, “Don’t do crime CRIME IS BAD xoxo from Prague,” along with a link...Read More

Five months after education software vendor PowerSchool paid an unnamed threat actor a ransom in exchange for the deletion of sensitive stolen data, some of the company’s customers are now receiving extortion demands.  A threat actor, who may or not be the same criminal group behind the attack, has contacted four school district customers of...Read More

LockBit Ransomware Gang Hacked, 59,975 Bitcoin Addresses Leaked; German Crypto Platform eXch Seized with €34 Million Amid Laundering Probe – “The Defiant”  The Defiant Source link .........................Read More

Insight Partners, a mega venture capital firm with more than $90 billion in funds under management, fears network intruders got their hands on internal sensitive data about employees, portfolio companies, investors, and more. In February, the biz informed folks that some miscreants had performed a “sophisticated social engineering attack” and gained access to Insight’s servers....Read More

(TNS) — The FBI is warning Americans to replace outdated Internet routers immediately, as cyber criminals are hijacking them to install malware and commit crimes through users’ home and business networks without their knowledge, the agency announced. In the new alert, federal agents said criminals are targeting “end of life” routers—older models no longer supported...Read More