Passwords Exposed in Active Directory Description Fields

A significant security oversight has been revealed involving the storage of passwords in Active Directory description fields, leading to severe consequences for an organization.

A significant security oversight has been revealed involving the storage of passwords in Active Directory description fields, leading to severe consequences for an organization.

A ransomware affiliate mistakenly attacked a company in the CIS, leading to significant repercussions within the cybercrime community.

Microsoft has dismantled a cybercrime service that provided code-signing certificates to ransomware groups, impacting thousands of machines, including its own.

Instructure's assurances regarding the deletion of stolen student data from the recent Canvas breach are met with skepticism from security experts.

Recent findings reveal that Vect's ransomware is actually a data wiper, rendering recovery impossible for affected organizations.

The U.S. Cybersecurity and Infrastructure Security Agency has identified four vulnerabilities affecting SimpleHelp, Samsung MagicINFO 9 Server, and D-Link routers, with a deadline for federal agencies to address them.

Recent research has uncovered a significant botnet associated with The Gentlemen ransomware operation, revealing over 1,570 compromised victims worldwide due to the deployment of SystemBC malware.

0APT has issued threats against rival ransomware group Krybit, promising to expose their members unless demands are met. The motivations behind this unusual conflict remain unclear.

The Cybersecurity and Infrastructure Security Agency has identified four Microsoft vulnerabilities, including one dating back 14 years, that are being exploited by cybercriminals, particularly in ransomware attacks.

Despite a drop in ransomware payments, the number of attacks surged to unprecedented levels in 2025, according to Chainalysis' latest report.