Brazil’s leading food-delivery platform, iFood, has revealed that personal information belonging to about 1.2 million users was exposed in a cyberattack. The company said the breach involved customers’ full names and CPF numbers, Brazil’s taxpayer identification number that is commonly used as a personal ID. iFood stated that no passwordsContinue Reading
The United States Federal Bureau of Investigation (FBI) has issued an urgent warning about an emerging phishing-as-a-service (PhaaS) platform known as Kali365, which enables cybercriminals to hijack Microsoft 365 accounts while bypassing traditional multi-factor authentication (MFA) protections. According to the FBI, Kali365 first appeared in April 2026 and is primarilyContinue Reading
A Singapore-based company has reportedly lost more than US$36 million in a sophisticated business email compromise (BEC) scam after fraudsters impersonated the chairman of the company’s headquarters and manipulated senior executives into authorizing massive fund transfers. According to Singapore authorities, the incident was among the major cases uncovered during “OperationContinue Reading
International law enforcement agency INTERPOL has announced the arrest of more than 200 suspected cybercriminals during a major multinational crackdown dubbed “Operation Ramz,” targeting phishing scams, malware attacks, and online fraud networks across the Middle East and North Africa (MENA). The operation, carried out in collaboration with national police agenciesContinue Reading
A Latvian national accused of helping ransomware gangs extort millions of dollars from victims worldwide has been sentenced to 8.5 years in a U.S. federal prison. According to U.S. prosecutors in Ohio, Deniss Zolotarjovs received a 102-month prison sentence for serving as a negotiator for several notorious cybercriminal operations, includingContinue Reading
Cybersecurity experts are raising concern over two emerging threat actors; Cordial Spider and Snarky Spider, linked to a rise in stealth attacks targeting cloud-based business platforms. The groups rely on voice phishing (vishing), impersonating IT personnel or executives to trick employees into logging into fake Single Sign-On (SSO) pages. OnceContinue Reading
Never trust urgent messages asking for money or sensitive information. Cybercriminals often impersonate banks, government agencies, or even your boss using emails, calls, or messaging apps. They create panic with phrases like “act now” or “your account will be blocked” to trick you into responding. Stay safe: Remember: Legitimate institutionsContinue Reading
