Latest news

Evilginx: A Sophisticated Phishing Toolkit Undermining MFA
Phishing

Evilginx: A Sophisticated Phishing Toolkit Undermining MFA

4 December 2025 dark6

Advanced phishing tactics utilizing a sophisticated tool known as Evilginx are becoming increasingly common, raising serious concerns for security professionals...
A Critical Patch for Vulnerable Next.js: New Scanner Unveils Hidden Attacks
Vulnerability

A Critical Patch for Vulnerable Next.js: New Scanner Unveils Hidden Attacks

4 December 2025 dark6

With the rise of Serverless functions, static site generators like Next.js have become ubiquitous in web development, streamlining functionality and...
A Silent Vulnerability Exposed: How Hackers Used Hidden Commands to Steal Sensitive Data
Vulnerability

A Silent Vulnerability Exposed: How Hackers Used Hidden Commands to Steal Sensitive Data

3 December 2025 dark6

Microsoft’s seemingly “unremarkable” November 2025 Patch Tuesday update actually contained a major security fix. But even the most meticulous patching...
A Polish Arrest Uncovers the Real Face of Cybercrime
Cybercrime

A Polish Arrest Uncovers the Real Face of Cybercrime

28 November 2025 dark6

Recent developments in Poland have highlighted a disturbing trend – the rise of sophisticated cyberattacks targeting businesses across Europe, with...
The FBI’s Latest Warning: Phishing Scams Target the IC3
Phishing

The FBI’s Latest Warning: Phishing Scams Target the IC3

26 November 2025 dark6

The internet is a constant battleground, and today’s cybercriminal tactics are more intricate and insidious than ever before. Recently, the...
HashJack: weaponizing trust in AI browser assistants
AI

HashJack: weaponizing trust in AI browser assistants

26 November 2025 dark6

A vulnerability in the way AI browser assistants handle URL fragments opens doors for malicious attacks. For years, we’ve seen...
A Critical Security Flaws in HashiCorp’s Provider
Vulnerability

A Critical Security Flaws in HashiCorp’s Provider

25 November 2025 dark6

HashiCorp’s Vault Terraform provider, a cornerstone of secure secrets management for organizations worldwide, has been found with a critical security...
ClickFix: Fake Windows Updates and PNG Steganography Make a Darker Play for User Machines
Malware

ClickFix: Fake Windows Updates and PNG Steganography Make a Darker Play for User Machines

25 November 2025 dark6

For those deeply involved with cybersecurity, the past few years have seen a dramatic rise in sophisticated phishing campaigns leveraging...
How Hackers are using Open-Source repositories to steal crypto
Malware

How Hackers are using Open-Source repositories to steal crypto

24 November 2025 dark6

A new wave of malware targeting cryptocurrency users is hitting developers hard, showcasing the growing sophistication and accessibility of attacks...
ToddyCat’s new tricks: email hacking evolves with the cloud
Malware

ToddyCat’s new tricks: email hacking evolves with the cloud

24 November 2025 dark6

The age-old adage “if it ain’t broke, don’t fix it” doesn’t always hold true in cybersecurity. As attackers are increasingly...
APT24: three years of obscure espionage with the “BadAudio” download
Malware

APT24: three years of obscure espionage with the “BadAudio” download

21 November 2025 dark6

For years, APT24, a sophisticated cyber espionage group linked to China’s People’s Republic, has been quietly crafting targeted attacks against...
Databreach: 2.3TB data from Italian rail group, Almaviva
Databreach

Databreach: 2.3TB data from Italian rail group, Almaviva

21 November 2025 dark6

A colossal digital archive, estimated at approximately 2.3 terabytes, has appeared in the darkest corners of the web. A malicious...