In the first two months of 2025, AIB reported a significant rise in phone call fraud, with voice phishing—commonly known as vishing—surging by 79% compared to the same period in 2024.

North Korean hackers have successfully laundered $300 million from the massive $1.5 billion crypto heist targeting ByBit Exchange.

Malwarebytes Labs has uncovered a phishing scam exploiting the Docusign API, which allows users to send emails from legitimate Docusign accounts.

A recent report by LayerX Labs has uncovered a sophisticated phishing campaign that initially targeted Windows users but has now shifted its focus to macOS users.

Cyberattacks take many different forms, from PayPal scam campaigns to infostealer malware, but distributed denial of service (DDoS) attacks can cause widespread disruption—especially when the target is a high-profile platform like Elon Musk’s X (formerly Twitter).

Cybersecurity researchers have uncovered a large-scale phishing campaign leveraging fake CAPTCHA images embedded in PDF documents hosted on Webflow’s content delivery network (CDN).

Two critical security vulnerabilities in Cisco Smart Licensing Utility are being actively targeted by threat actors, according to the SANS Internet Storm Center.

A new report from SoSafe highlights the growing tension between AI adoption and its associated security risks, based on insights from 500 global security professionals and 100 SoSafe customers across 10 countries.

Asia is poised to claim nearly half of the world’s fintech transactions by the end of 2025, solidifying its position as a global leader in the sector, according to a new report from Singapore-based UnaFinancial.

Singapore authorities are alerting businesses to a surge in deepfake scam video calls, where criminals use AI-generated manipulations to impersonate high-ranking executives and deceive employees into transferring company funds.

Cybersecurity researchers at Cofense have uncovered a phishing campaign using fake LinkedIn InMail notifications to distribute the ConnectWise RAT. Unlike typical LinkedIn scams that steal credentials, this attack installs a remote access trojan. The fraudulent emails mimic LinkedIn branding but use an outdated template from before the platform’s 2020 redesign, making them appear legitimate at first glance.

Bybit has confirmed that hackers executed a "sophisticated attack" on one of its Ethereum (ETH) cold wallets, resulting in the theft of approximately 401,346 ETH, valued at over $1.4 billion.