Global Cyber Threats Escalate: China-Linked APTs, Critical Telegram Flaw, and Widespread Ransomware Attacks
Summary
This period saw a significant escalation in cyber threats, highlighted by the discovery of the 'Red Menshen' China-linked APT using stealthy BPFdoor implants to infiltrate global telecoms. A critical zero-click RCE vulnerability in Telegram put millions of users at risk. Ransomware attacks continued their onslaught, crippling the Jackson County Sheriff's Office in Indiana and Foster City, California, while the new 'Uragan' strain emerged with double-extortion tactics. Major Canadian telecoms and the European Commission suffered significant data breaches, and the EU moved forward with its Cyber Resilience Act, signaling a new era of security regulation for digital products.
Today New Articles
Triple Threat: Canada's Top Telecoms Rogers, Telus, and Freedom Mobile Hit by Data Breaches
Canada's telecommunications sector is under fire after three of its largest carriers—Rogers, Telus, and Freedom Mobile—each reported significant data breaches. The incidents, which occurred within the same week, exposed customer information such as names, cont...
CRITICAL: Telegram Hit by 9.8-Rated Zero-Click RCE Flaw on Android & Linux
A critical zero-click remote code execution (RCE) vulnerability has been discovered in the Telegram messenger application, affecting both Android and Linux versions. The flaw, tracked as ZDI-CAN-30207, has been assigned a CVSS score of 9.8 out of 10, reflectin...
INC Ransomware Leaks 500GB of Data from Namibia Airports Company on Dark Web
The Namibia Airports Company (NAC) has confirmed that approximately 500GB of sensitive data stolen during a ransomware attack has been published on the dark web. The attack, attributed to the INC Ransomware Group, was first detected on March 6, 2026. The threa...
Iran-Linked 'Handala Hack Team' Breaches Personal Gmail of FBI Director Kash Patel
The personal Gmail account of FBI Director Kash Patel has been compromised by an Iran-linked hacking group calling itself the 'Handala Hack Team.' The group claimed responsibility for the breach and subsequently leaked personal data, including photographs, ema...
Supreme Court to Decide FCC's Power to Fine Telcos for Customer Data Breaches
The U.S. Supreme Court is set to hear a pivotal case, FCC v. Verizon and AT&T v. FCC, concerning the Federal Communications Commission's (FCC) authority to penalize wireless carriers for failing to protect customer data. The case stems from fines the FCC issue...
European Commission Hit by Data Breach; Attacker Claims 350GB Exfiltrated from AWS Cloud
The European Commission has confirmed a data breach affecting its cloud infrastructure hosted on Amazon Web Services (AWS). The attack targeted the Europa.eu websites, and an attacker has claimed to have exfiltrated over 350 GB of data, allegedly including dat...
'ClickFix' Campaign Tricks macOS Users into Installing Infiniti Stealer via Fake CAPTCHA
A social engineering campaign dubbed 'ClickFix' is targeting macOS users with a sophisticated ruse to install the 'Infiniti Stealer' malware. The attack begins with a fake Cloudflare CAPTCHA page that, instead of presenting a puzzle, instructs the user to open...
Article Updates
EU and Australia Issue New Cybersecurity Guidance as Regulatory Focus Sharpens
Update:The new article focuses on the release of draft guidance for the EU Cyber Resilience Act (CRA), providing crucial details on its provisions, such as security-by-design, vulnerability management, and the requirement for CE marking. It highlights critical compli...