An Attacker is Using Stolen OAuth Tokens to Steal Data From Private GitHub Repositories

Attacker stole $182 million from Beanstalk stablecoin protocol, State Department issues $5 million reward for N. Korea crypto thieves, Catalan civil groups and UK offices targeted with spyware, more

Feds Link Axie Infinity's $625 Million Hack to North Korea's Lazarus Group

Conti gang claims credit for Nordex hack, Google ships emergency Chrome patches, Experts raise the alarm about Microsoft RPC vulnerability, Lawmakers launch probe into ID.me and more

New, Dangerous Toolset from APT Threat Actor Can Seriously Disrupt Industrial Control Systems

Microsoft took down C2 servers from ZLoader botnet, Hacktivists used Conti gang's malware against Russia, Undersea cables were targeted in Hawaii, Hackers stole $11.2 million from Elephant DeFi, more

International Law Enforcement Operation Seized Control of Stolen Data Website RaidForums

T-Mobile tried to pay hackers who stole its customers' data, Microsoft issues fixes for two-zero days and other flaws, Sky Mavis launches bug bounty program, KKR to buy Barracuda Networks, much more

Russia's Sandworm Group Tried to Take Down Ukrainian Energy Facilities Last Week

CISA orders WatchGuard Firebox and XTM firewall appliances patches, Panasonic confirms second cyber attack, Five serious bugs patched in healthcare robots, Google sues puppy-buying scammer, much more

Senior EU Officials Were Targeted by NSO Group Spyware

Hacking group breached Russian entities using leaked Conti ransomware code, Denial of service attack knocked out Finnish government websites, Mirai malware now leverages Spring4Shell, more

Meta Countered Tactics by Russia and Belarus to Target Ukrainian Soldiers

Microsoft disrupted attacks against Ukrainian targets, Fin7 member sentenced, North Carolina A&T State hit by ALPHV ransomware attack, Bitcoin tracers took down biggest child sex abuse site, more

U.S. Disrupted Kremlin's Cyclops Blink Botnet Before It Could Be Weaponized

AirTags are used to stalk, harass women, Google pulls data-harvesting apps from store, VMWare urges critical patches, Top musicians' YouTube accounts hacked to show video of swindler, more

Treasury Department Sanctions Dark Web Market Hydra and 100s of Its Cryptocurrency Addresses

Ukraine's CERT discovers new Russian phishing campaigns, Russian state gas giant Gazprom's site forced offline after hack, Block confirms data breach by former employee, much more

Cops in Germany Bust Up Hydra Darknet Marketplace

Jordanian women human rights defenders targeted with Pegasus spyware, Hackers compromised 319 MailChimp accounts, The Works in UK forced to shutter stores in face of cyberattack, more

State Department Launches Bureau of Cyberspace and Digital Policy

Wallet company Trezor confirms phishing attack, Hackers stole $15.6 million from Inverse Finance, Lapsus$ teens charged, Claims of China's cyberattacks in Ukraine questioned, much more

New Data Wiper Discovered That Was Used in Viasat Cyberattack

Administration divided over Kaspersky sanctions, Treasury sanctions Russian lab that reported created Trisis, Biden eyes changing Trump-era policy that gave DoD unprecedented cyber authority, more