The Breach News

Real-Time Phishing Kits Now Targeting Okta, Microsoft, and Google

Cybersecurity experts are currently grappling with a surge of voice-phishing attacks aimed at single sign-on (SSO) tools. These coordinated efforts have led to instances of data theft and extortion, as various cybercrime groups, including one claiming ties to ShinyHunters, harness sophisticated voice calls and phishing kits to deceive victims into…

Read MoreReal-Time Phishing Kits Now Targeting Okta, Microsoft, and Google

North Korean Hacker Group Andariel Launches New EarlyRat Malware Attack

A new report has unveiled a previously undocumented malware variant, named EarlyRat, which has been utilized by the North Korean-aligned threat actor known as Andariel in targeted phishing campaigns. This addition enhances Andariel’s already diverse toolkit, marking a notable shift in their operational capabilities. Kaspersky’s latest findings reveal that Andariel…

Read MoreNorth Korean Hacker Group Andariel Launches New EarlyRat Malware Attack

Wiper Malware Aimed at Poland’s Power Grid Linked to Moscow

Cyberwarfare / Nation-State Attacks, Fraud Management & Cybercrime Indicators Reveal Prolonged Engagement by ‘Sandworm’ Military Intelligence Hackers Mathew J. Schwartz (euroinfosec) • January 26, 2026 Polish Prime Minister Donald Tusk speaks at a press conference on January 15, detailing Russian cyberattacks on Poland’s power grid in late 2025. (Image: Polish…

Read MoreWiper Malware Aimed at Poland’s Power Grid Linked to Moscow

Nike Probes Possible Data Breach Following Cyberattack Allegations – GuruFocus

Nike Investigates Potential Data Breach Amid Cyberattack Claims In a developing story, global sports giant Nike has announced that it is investigating a potential data breach following claims of a cyberattack. This investigation responds to reports suggesting unauthorized access to sensitive data, marking a significant event for the company and…

Read MoreNike Probes Possible Data Breach Following Cyberattack Allegations – GuruFocus

MITRE Reveals 2023’s Top 25 Most Critical Software Vulnerabilities: Are You Protected?

In a significant report released for 2023, MITRE has unveiled its annual assessment of the Top 25 “most dangerous software weaknesses.” This list is crucial for understanding the vulnerabilities that pose the greatest risk to software systems and applications. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) emphasized the dangers…

Read MoreMITRE Reveals 2023’s Top 25 Most Critical Software Vulnerabilities: Are You Protected?

Prowli Malware Aims at Servers, Routers, and IoT Devices

After the recent discovery of the VPNFilter malware botnet, researchers have revealed another significant threat in the cybersecurity landscape: Operation Prowli. This extensive operation has already compromised over 40,000 servers, modems, and other internet-connected devices from a diverse array of organizations worldwide. Operation Prowli employs various attack techniques, including the…

Read MoreProwli Malware Aims at Servers, Routers, and IoT Devices