The Breach News

Dispersed Lapsus$ Hunters Linked to Attacks on Zendesk Users

Revealed: Typosquatted Domains Associated with Suspected Ransomware Attacks Akshaya Asokan (asokan_akshaya) • November 28, 2025 Image: Shutterstock Cybersecurity experts have identified over 40 typosquatted domains that imitate legitimate Zendesk URLs. This discovery has been linked to the hacking group known as Scattered Lapsus$ Hunters. According to a report from ReliaQuest,…

Read MoreDispersed Lapsus$ Hunters Linked to Attacks on Zendesk Users

Hezbollah Cyber Group Attacks Global Telecoms, Hosting Services, and ISPs

A persistent cyber threat actor, linked to Hezbollah, has updated its toolkit with a new version of a remote access Trojan (RAT) aimed at infiltrating organizations worldwide to exfiltrate sensitive information. This finding comes from a recent report by the ClearSky research team, published on Thursday, which outlines how the…

Read MoreHezbollah Cyber Group Attacks Global Telecoms, Hosting Services, and ISPs

India’s Data Protection Regulations Take on Greater Enforcement Power

Video Also: Prompt Injection Challenging Digital Forensics, AI’s Perceived Deception Anna Delaney (annamadeline) • November 28, 2025     Clockwise, from top left: Anna Delaney, Tony Morbin, Rashmi Ramesh, and Suparna Goswami This week’s ISMG Editors’ Panel addressed significant developments in India’s data protection landscape, including the ramifications of prompt…

Read MoreIndia’s Data Protection Regulations Take on Greater Enforcement Power

DarkGate Malware Targets Recently Patched Microsoft Vulnerability in Zero-Day Attack

A recently identified malware campaign, dubbed DarkGate, has raised alarms in the cybersecurity community. It exploits a now-patched security vulnerability in Microsoft Windows, known as CVE-2024-21412, which was used as a zero-day attack vector through fraudulent software installers. This incident was first observed in mid-January 2024, wherein attackers deceived users…

Read MoreDarkGate Malware Targets Recently Patched Microsoft Vulnerability in Zero-Day Attack