A newly identified malware strain, known as Condi, is leveraging a vulnerability found in TP-Link Archer AX21 (AX1800) Wi-Fi routers to integrate these devices into a distributed denial-of-service (DDoS) botnet. This campaign, according to Fortinet’s FortiGuard Labs, has intensified since late May 2023, marking a significant escalation in cyber threats…
New Malware Alert: North Korean Hacking Group’s Tools Discovered The U.S. Cybersecurity and Infrastructure Security Agency (CISA), in collaboration with the FBI, has issued a joint technical alert regarding two recently identified pieces of malware deployed by the North Korean Advanced Persistent Threat (APT) group known as Hidden Cobra, also…
Each month, Cybersixgill’s threat experts provide insights into the latest tactics, techniques, and procedures employed by cybercriminals. Their reports shed light on emerging threats from the underground, detailing the actors involved and offering guidance on risk mitigation strategies. Regular updates on vulnerabilities, ransomware, and malware trends from the deep and…
Cybercrime, Fraud Management & Cybercrime Recent Developments: CIRO Phishing Breach, Ingram Micro Ransomware, and CVE Increase Pooja Tikekar (@PoojaTikekar) • January 22, 2026 Image: Shutterstock/ISMG ISMG compiles weekly summaries of cybersecurity breaches globally. Recent incidents include sensitive data shared by the U.S. Social Security Administration on an unauthorized Cloudflare server,…
A critical privilege escalation vulnerability in MikroTik RouterOS could allow remote attackers to execute arbitrary code, giving them complete control of vulnerable devices. This flaw, designated as CVE-2023-30799, carries a CVSS score of 9.1, indicating its severity. It is estimated that between 500,000 and 900,000 RouterOS systems might be exploited…
Major Data Breach at Staminus Communications Exposes Customer Information Staminus Communications, a hosting provider based in California known for its Distributed Denial of Service (DDoS) protection services, is facing a significant data breach. This incident has resulted in the unauthorized exposure of personal and sensitive information belonging to its clientele,…
The ICE List website, also referred to as the ICE List Wiki, has become incapacitated due to a significant cyber attack, occurring just as it aimed to disclose the identities of numerous federal agents in the United States, particularly those linked to Immigration and Customs Enforcement (ICE). Dominick Skinner, the…
Over a Decade in Prison for Massachusetts Man Behind DDoS Attacks on Healthcare Networks A Massachusetts man has been sentenced to over 10 years in federal prison for orchestrating Distributed Denial-of-Service (DDoS) attacks against the computer networks of two healthcare organizations in 2014. The attacks were reportedly motivated by a…
Recent law enforcement efforts reveal that individuals who engaged with DDoS-for-hire services may now be facing serious repercussions. Following the takedown of the world-renowned DDoS-for-hire platform Webstresser.org in April 2018, authorities are now focusing on the clients who utilized this service to orchestrate millions of cyber attacks against a range…
