An international law enforcement operation has taken down 53 domains and arrested four people in connection with commercial distributed denial-of-service (DDoS) operations that were used by more than 75,000 cybercriminals. The ongoing effort, dubbed Operation PowerOFF, disrupted access to the DDoS-for-hire services, took down the technical infrastructure supporting them, and obtained access to databases containing…

Threat actors are exploiting security flaws in TBK DVR and end-of-life (EoL) TP-Link Wi-Fi routers to deploy Mirai-botnet variants on compromised devices, according to findings from Fortinet FortiGuard Labs and Palo Alto Networks Unit 42. The attack targeting TBK DVR devices has been found to exploit CVE-2024-3721 (CVSS score: 6.3), a medium-severity command injection vulnerability…

Educational publishing giant McGraw-Hill suffered a major data breach after hackers exploited Salesforce misconfigurations to access internal company data. The ShinyHunters ransomware group claimed responsibility for the attack, which exposed approximately 45 million Salesforce records containing personally identifiable information. This represents another significant cloud infrastructure breach targeting the education sector, following similar attacks on other…

A data breach at travel giant Booking.com exposed customer reservation details including full names, addresses, booking dates, email addresses, and phone numbers. Cybersecurity firm Norton reports criminals are now conducting reservation hijacks – contacting customers posing as hotels to trick them into sending money for fake reservation issues. The company has updated reservation PINs and…

An international law enforcement operation involving 21 countries (including Australia, the U.S., UK, Germany, and Japan) took down 53 domains and arrested four people running commercial DDoS-for-hire services. The operation disrupted “booter” services used by over 75,000 cybercriminals, with databases containing over 3 million criminal user accounts seized. Authorities are now sending warning emails to…

The notorious cybercrime group ShinyHunters has claimed responsibility for a ransomware attack on Rockstar Games (maker of GTA). The group claims to have stolen 78.6 million records from Rockstar Snowflake environment and issued a ransom deadline of April 14, 2026, threatening to publish stolen material if cryptocurrency payment demands were not met. This represents a…

Threat actors are actively exploiting a command injection vulnerability (CVE-2024-3721) in TBK DVR-4104 and DVR-4216 devices to deploy a Mirai botnet variant called “Nexcorium.” The malware also targets end-of-life TP-Link Wi-Fi routers and Huawei HG532 devices. Once infected, devices are enrolled into a botnet capable of launching large-scale DDoS attacks over UDP, TCP, and SMTP…

Grinex, a Kyrgyzstan-incorporated cryptocurrency exchange sanctioned by the U.K. and the U.S. last year, said it is suspending operations after it blamed Western intelligence agencies for a $13.74 million hack. The exchange said it fell victim to what it described as a large-scale cyber attack that bore hallmarks of foreign intelligence agency involvement. This attack…

Defend Your Network Against Cyber Threats The Australian Institute of Cyber Security is excited to launch Cyber Invaders, an interactive educational game designed to introduce students, young people, and anyone new to cyber security to the fundamental concepts of digital defence. How It Works Cyber threats are falling towards your network. Each threat has one…

Major Toy Manufacturer Suffers Cyberattack Hasbro Inc., one of the world’s largest toy manufacturers and the company behind iconic brands including Transformers, Play-Doh, Peppa Pig, Dungeons & Dragons, Monopoly, My Little Pony, and Magic: The Gathering, has disclosed a significant cyberattack that has disrupted its operations. Incident Timeline The company discovered unauthorized access to its…