DraftKings Account Breaches After Credential Stuffing
DraftKings account breaches in September 2025 highlight how password reuse still drives online account takeovers. The U.S. sports-betting giant confirmed that attackers used stolen logins from other sites to access a small number of customer accounts. Although no internal systems were compromised, the event renewed attention on multi-factor authentication and credential hygiene. Attack Overview On September 2, 2025, DraftKings’ security
Discord Data Breach Exposes Support Chats and User IDs
The Discord data breach has sparked concern after hackers accessed a third-party support vendor’s systems, stealing user information, support messages, and government ID images. While Discord’s core infrastructure remains secure, the incident highlights serious risks tied to external service providers managing user data. How the Breach Happened Discord confirmed that attackers compromised a third-party customer service platform used to manage
Klopatra Android Trojan Uses Hidden VNC to Hijack Phones
Security researchers warn that the Klopatra Android trojan is reshaping the mobile threat landscape. Unlike ordinary malware that steals data in the background, Klopatra gives attackers live visibility and full control of compromised phones. Hidden VNC sessions allow them to see the victim’s screen, simulate taps, and even transfer funds without detection. The malware is delivered through a fake IPTV+VPN
WestJet Data Breach Exposed Customer Passports
The WestJet data breach has placed thousands of travelers at risk after cybercriminals accessed sensitive passenger records. The Canadian airline confirmed that passport numbers and travel documents were among the exposed data. The breach has raised concerns about identity theft and placed renewed pressure on the aviation industry to strengthen its cybersecurity defenses. What Happened WestJet disclosed that an unauthorized
Fake Microsoft Teams Installers Push Oyster Malware in Malvertising Attack
Fake Microsoft Teams installers push Oyster malware through a new malvertising campaign. Cybercriminals exploit paid ads to trick people into downloading malware instead of legitimate software. By imitating Microsoft’s trusted collaboration platform, attackers increase the chances of success. This campaign is especially concerning because Microsoft Teams is a core tool for remote work and daily business communication. Employees often search
Rust Packages Malware Steals Crypto Wallet Keys
Rust packages malware has been discovered on Crates.io, the official Rust package registry. Security researchers flagged the packages for containing hidden code that stole cryptocurrency wallet keys. The incident adds to a growing wave of supply chain attacks targeting open-source developers and highlights the risks of blindly trusting dependencies. Malicious Crates on Crates.io Two malicious crates were uploaded to Crates.io,
Boyd Gaming Data Breach Exposes 184,000 Personal Records
The Boyd Gaming data breach has become another major cybersecurity incident in the casino industry. Boyd Gaming, which operates 28 casinos across 10 U.S. states, confirmed that a recent cyberattack exposed the personal data of more than 184,000 individuals. The breach disrupted critical IT systems and forced the company to take immediate containment measures. This attack highlights how vulnerable the
Ransomware Attack Causes European Airport Disruptions
A ransomware attack has disrupted operations at several major airports across Europe, creating widespread delays and cancellations for travelers. The cybercriminals targeted key IT systems that support check-ins, boarding, and baggage handling. As staff scrambled to implement manual workarounds, passengers faced hours of uncertainty and missed connections. This large-scale disruption underscores the aviation sector’s growing dependence on digital infrastructure —
SystemBC Malware Turns VPS Into Proxy Networks
SystemBC malware is evolving into a powerful tool for cybercriminals. First spotted in 2019, it has shifted from being a stealthy backdoor to a full-fledged proxy-building system. Today, attackers deploy it on compromised VPS servers to create large proxy networks. This development allows them to hide malicious traffic, making it harder for defenders to trace cyberattacks. How SystemBC Malware Operates
FileFix Attack Uses Steganography to Deliver StealC
A new FileFix attack campaign is targeting users with a blend of social engineering and advanced malware delivery. The operation impersonates Meta support notices to convince victims they must take action. Instead of fixing a problem, the tricked users end up executing hidden PowerShell commands. These commands launch a sophisticated chain of events that ends with the StealC infostealer installed
