Evilginx: A Sophisticated Phishing Toolkit Undermining MFA
4 December 2025 dark6
Advanced phishing tactics utilizing a sophisticated tool known as Evilginx are becoming increasingly common, raising serious concerns for security professionals...
Vulnerability
A Critical Patch for Vulnerable Next.js: New Scanner Unveils Hidden Attacks
4 December 2025 dark6
With the rise of Serverless functions, static site generators like Next.js have become ubiquitous in web development, streamlining functionality and...
Vulnerability
A Silent Vulnerability Exposed: How Hackers Used Hidden Commands to Steal Sensitive Data
3 December 2025 dark6
Microsoft’s seemingly “unremarkable” November 2025 Patch Tuesday update actually contained a major security fix. But even the most meticulous patching...
Cybercrime
A Polish Arrest Uncovers the Real Face of Cybercrime
28 November 2025 dark6
Recent developments in Poland have highlighted a disturbing trend – the rise of sophisticated cyberattacks targeting businesses across Europe, with...
Phishing
The FBI’s Latest Warning: Phishing Scams Target the IC3
26 November 2025 dark6
The internet is a constant battleground, and today’s cybercriminal tactics are more intricate and insidious than ever before. Recently, the...
AI
HashJack: weaponizing trust in AI browser assistants
26 November 2025 dark6
A vulnerability in the way AI browser assistants handle URL fragments opens doors for malicious attacks. For years, we’ve seen...
Vulnerability
A Critical Security Flaws in HashiCorp’s Provider
25 November 2025 dark6
HashiCorp’s Vault Terraform provider, a cornerstone of secure secrets management for organizations worldwide, has been found with a critical security...
Malware
ClickFix: Fake Windows Updates and PNG Steganography Make a Darker Play for User Machines
25 November 2025 dark6
For those deeply involved with cybersecurity, the past few years have seen a dramatic rise in sophisticated phishing campaigns leveraging...
Malware
How Hackers are using Open-Source repositories to steal crypto
24 November 2025 dark6
A new wave of malware targeting cryptocurrency users is hitting developers hard, showcasing the growing sophistication and accessibility of attacks...
Malware
ToddyCat’s new tricks: email hacking evolves with the cloud
24 November 2025 dark6
The age-old adage “if it ain’t broke, don’t fix it” doesn’t always hold true in cybersecurity. As attackers are increasingly...
Malware
APT24: three years of obscure espionage with the “BadAudio” download
21 November 2025 dark6
For years, APT24, a sophisticated cyber espionage group linked to China’s People’s Republic, has been quietly crafting targeted attacks against...
Databreach
Databreach: 2.3TB data from Italian rail group, Almaviva
21 November 2025 dark6
A colossal digital archive, estimated at approximately 2.3 terabytes, has appeared in the darkest corners of the web. A malicious...