The maintainers of the Python Package Index (PyPI) repository have issued a warning about an ongoing phishing attack that’s targeting users in an attempt to redirect them to fake PyPI sites. The attack involves sending email messages bearing the subject line “[PyPI] Email verification” that are sent from the emailRead More »PyPI Warns of Ongoing Phishing Campaign Using Fake Verification Emails and Lookalike Domain

A newly emerged ransomware-as-a-service (RaaS) gang called Chaos is likely made up of former members of the BlackSuit crew, as the latter’s dark web infrastructure has been the subject of a law enforcement seizure. Chaos, which sprang forth in February 2025, is the latest entrant in the ransomware landscape toRead More »Chaos RaaS Emerges After BlackSuit Takedown, Demanding $300K from U.S. Victims

Data reveals global ransomware trends for the first half of 2025.

Until recently, the cyber attacker methodology behind the biggest breaches of the last decade or so has been pretty consistent: Compromise an endpoint via software exploit, or social engineering a user to run malware on their device;  Find ways to move laterally inside the network and compromise privileged identities; RepeatRead More »How the Browser Became the Main Cyber Battleground

Cybersecurity researchers have discovered a new, large-scale mobile malware campaign that’s targeting Android and iOS platforms with fake dating, social networking, cloud storage, and car service apps to steal sensitive personal data. The cross-platform threat has been codenamed SarangTrap by Zimperium zLabs. Users in South Korea appear to be theRead More »Cybercriminals Use Fake Apps to Steal Data and Blackmail Users Across Asia’s Mobile Networks