Thursday, April 30, 2026
HomeCyber News

Cyber News

Hackers Breach Intelligence Website Used by CIA and Other Agencies

Unidentified hackers recently breached a major intelligence website operated by the National Reconnaissance Office, compromising sensitive contract information and proprietary intellectual property used by the CIA and other federal agencies. The cyberattack targeted the Acquisition Research Center website, which serves as a critical platform...

Dark Web Forum Leak Exposes 22 Million Users’ IP Addresses and Locations

A significant data breach that exposes the browsing habits and personal information of users visiting illegal hacking forums. On Friday, July 18, the team discovered an unsecured Elasticsearch database containing approximately 22 million web request records, with 95% of the traffic directed to Leakzone.net,...

Cyber Attack – Hackers Use Malicious .HTA Files to Spread Red Ransomware

Security researchers at CloudSEK have uncovered a sophisticated malware delivery campaign using Clickfix-themed websites to distribute Epsilon Red ransomware, marking a dangerous evolution in social engineering tactics. The campaign leverages malicious.HTA files and ActiveX objects can silently execute shell commands, bypassing traditional security measures...

New “ToolShell” Exploit Chain Attacking SharePoint Servers to Gain Complete Control

Organizations about an active campaign targeting Microsoft SharePoint servers using a sophisticated exploit chain dubbed "ToolShell." The attacks combine previously patched vulnerabilities with new zero-day exploits to achieve complete remote control of enterprise systems, prompting CISA to add the associated CVEs to its catalog...

Arizona Woman Sentenced for Helping North Korean Hackers

Christina Marie Chapman, a 50-year-old Arizona woman, received a 102-month prison sentence for orchestrating a sophisticated fraud scheme that helped North Korean IT workers infiltrate over 300 U.S. companies while posing as American citizens and residents. The operation generated more than $17 million in...

Salesforce Vulnerabilities Expose Systems to RCE Attacks — Apply Patches Now

Salesforce has disclosed multiple critical security vulnerabilities affecting Tableau Server installations worldwide, with the most severe vulnerabilities enabling remote code execution and unauthorized database access. The vulnerabilities, addressed in the June 26, 2025 maintenance release, pose significant risks to organizations using affected versions of...