Sullivan Rozar

Discord Rejects Extortion Demand Discord is refusing to pay ransom to threat actors who claim to have stolen data belonging to 5.5 million users from the company’s Zendesk support system, as reported by BleepingComputer. The attackers allege that the breach exposed government IDs, partial payment information, and other sensitive details linked to millions of support […]

ShinyHunters Target 39 Global Brands in Massive Extortion Campaign A notorious cyber extortion group has launched a data leak site to publicly pressure dozens of companies compromised in a recent wave of Salesforce breaches, according to BleepingComputer. The site lists 39 alleged victims, including major brands such as FedEx, Disney, Marriott, Google, Cisco, Toyota, and

Google Ties Brickstorm Malware to Espionage on U.S. Tech and Legal Firms Suspected Chinese hackers have used a stealthy malware known as Brickstorm to spy on U.S. organizations for more than a year, according to Google’s Threat Intelligence Group (GTIG), as first reported by Bleeping Computer. The malware was deployed in long-term persistence operations targeting

224 Malicious Apps Pulled from Google Play After 38 Million Downloads Worldwide A massive Android ad fraud campaign known as “SlopAds” has been dismantled after investigators uncovered 224 malicious applications on Google Play generating more than 2.3 billion ad requests each day. The operation, uncovered by HUMAN’s Satori Threat Intelligence team and reported by BleepingComputer, involved

NPM Supply-Chain Compromise Hits 10% of Cloud Environments, While Attackers Net Just $600 The open-source software community was rocked this week by what researchers are calling the largest supply-chain compromise in the history of the NPM ecosystem, first reported by Bleeping Computer. The attack briefly infiltrated some of the most widely used JavaScript libraries, impacting