News related to
attacks

Bangladesh Plunges Into Fresh Turbulence After Tribunal’s Death Penalty To Sheikh Hasina

Netskope and NEVERHACK Launch Managed SSE for Cloud Security

Netskope has partnered with NEVERHACK to introduce an innovative, fully managed Security Service Edge solution aimed at enhancing zero-trust cloud security. This new offering is designed to address the growing need for comprehensive protection in a rapidly evolving digital landscape, where organisations are increasingly reliant on cloud-based infrastructure. The collaboration combines Netskope’s advanced network and cloud security technology with NEVERHACK’s expertise in managed security services. The integrated […]

Massive Credential-Stuffing Corpus Sparks Alarm

A vast data trove compiled by threat-intelligence firm Synthient has brought to light that 1.95 billion unique email addresses and approximately 1.3 billion passwords were exposed in credential-stuffing lists drawn from multiple underground sources. The corpus, now indexed by Have I Been Pwned, signals an escalation in the reuse-of-credentials risk by cyber-attackers targeting cross-platform logins. The aggregation effort by Synthient captured data embedded in previously breached credential […]

Drones Stir Tension Across Europe: Security Concerns Grow

Belgium has become the latest nation to fall prey to a series of mysterious drone incursions that have unsettled Europe’s security landscape. This wave of drone activity, which has increasingly targeted critical sites across the continent, has prompted fears about potential espionage, sabotage, and escalating tensions in the region. For weeks, drones have been spotted hovering near strategic locations in various European countries, including military bases, nuclear […]

Android Malware Poses Major Threat to South Korean Users

A new wave of malware attacks has been discovered targeting Android users in South Korea, with the attackers concealing harmful software in applications promoting stress relief and relaxation. This sophisticated attack takes advantage of Google’s asset-tracking service, Find Hub, to remotely erase sensitive user data, raising concerns about state-sponsored cyber threats. These attacks are disguised as psychological counselling tools or programs supporting North Korean human rights, allowing […]

CPA Australia Survey: Increasing AI Adoption Reshapes Future Roles in Accounting Industry and Rises Data Concerns in Hong Kong

HONG KONG SAR – Media OutReach Newswire – 10 November 2025 – CPA Australia’s regional survey about business technology adoption shows that most companies in Hong Kong have used artificial intelligence (AI) tools at different levels. Though the increasing AI application helps to improve productivity, it also transforms the hiring trends in the accounting and finance industry, and increases concerns on data protection and governance, according to […]

Ente Successfully Passes CERN-Sponsored Audit

Ente, a popular cybersecurity tool, has successfully completed a rigorous audit sponsored by CERN, the European Organization for Nuclear Research. The audit, carried out by five experts from the German cybersecurity firm Cure53, took place over the span of two weeks and focused on evaluating the platform’s security framework and vulnerability to cyber threats. CERN, one of the largest and most advanced scientific research organisations in the […]

Kyndryl Strengthens Cloud Security with Solvinity Deal

Kyndryl, a leading IT services provider, has announced its acquisition of Solvinity Group, a prominent Dutch cloud services company known for its expertise in secure managed and hybrid cloud environments. This strategic move, pending regulatory approval, will significantly enhance Kyndryl’s ability to deliver cutting-edge cloud solutions, with a particular focus on strengthening its security offerings. Solvinity, founded in 2000, has built a strong reputation for its secure […]

Synology Marks 25 Years by Unveiling Next-Gen Flagship Products

SINGAPORE – Media OutReach Newswire – 7 November 2025 – Synology marked its 25th anniversary today by unveiling a new generation of enterprise solutions designed to strengthen cyber resilience and accelerate intelligent transformation. Building on a quarter-century of innovation, it introduced advanced data protection, AI-powered video surveillance and high-performance storage systems tailored for today’s digital enterprises. Thachawan Chinchanakarn, Head of Southeast Asia at Synology, with the company’s […]

Flu Wave Hits Southeast Asia, Highlighting Gaps in Protection for the Elderly

HO CHI MINH CITY, VIETNAM – Media OutReach Newswire – 5 November 2025 – Many countries in Asia are reporting a sharp rise in flu cases. The intensified rainy season is fueling transmission and creating ideal conditions for rapid spread. In a single week, Thailand recorded more than 30,000 new cases.1 Meanwhile, Japan declared a nationwide flu epidemic on 3 October after confirming more than 6,000 patients […]

Bots Dominate Internet Traffic as Human Presence Shrinks

A new wave of digital activity has shifted the balance of the internet as automated bots now account for over half of global web traffic. Cybersecurity data shows that traffic from non-human sources rose to 51 per cent in 2024, overtaking human‐generated traffic for the first time. Behind this shift lies a complex web of generative-AI, automated crawlers and malicious botnets, raising questions about the role of […]

Proton’s Observatory Reveals Dark-Web Breach Surge

Swiss privacy firm Proton AG has unveiled its new “Data Breach Observatory”, a live-monitoring platform designed to track organisations’ data leaks by scanning hacker-forums and underground marketplaces on the dark web. According to the company, the tool has already identified 794 unique breach incidents in 2025 alone, exposing over 300 million records linked to identifiable companies. If broader data-compilations are included, the number of incidents rises to […]

Sophos introduces identity-first defence with ITDR launch

Cybersecurity firm Sophos has unveiled its new solution, Sophos Identity Threat Detection and Response, offering organisations continuous monitoring of identity risks, dark-web credential tracking and automated response capabilities within its Sophos Central platform. The UK-headquartered company positions the product as a strategic response to the “never-ending” rise of identity-based attacks. The new ITDR module integrates with Sophos’ existing Extended Detection and Response and Managed Detection and Response […]

North Korea’s “Contagious Interview” Campaign Surges in npm Attack Waves

A new wave of supply-chain assaults has seen North Korean hackers publish more than 300 malicious npm packages, infecting developer systems with sophisticated malware that steals credentials and crypto assets. The campaign, known as “Contagious Interview,” exploits the trust developers place in open-source tools by cloaking malware inside packages mimicking legitimate ones.

The Socket Threat Research Team disclosed that attackers uploaded 338 malicious npm modules, collectively downloaded over 50,000 times, many featuring a newly observed loader named XORIndex. About 27 of them remain active in the npm registry. Within those packages, XORIndex collects host metadata and downloads a second-stage payload, BeaverTail, which in turn leverages a backdoor called InvisibleFerret to maintain persistence and exfiltrate data. This expansion follows a preceding June surge of 35 malicious modules using a HexEval loader.

Researchers emphasise that Contagious Interview is not a static campaign but a dynamic interplay between defenders and adversaries. As packages are taken down, attackers quickly reissue variants under fresh aliases or change loader techniques. The latest 67-package load pushed last month illustrates this cat-and-mouse escalation: the new modules alone exceeded 17,000 downloads. Attackers have mixed XORIndex and HexEval in parallel deployments, suggesting modular development and adaptability.

The campaign’s social engineering backbone remains key. Actors pose as recruiters or HR contacts on platforms like LinkedIn, targeting software engineers or job-seekers. They offer interview assignments that require cloning a GitHub or Bitbucket repository, with the malicious npm module embedded deep in the project. Because many developers run these projects outside sandboxed environments, the malicious loader quietly executes and bridges the gap to full system compromise.

Analysts attribute Contagious Interview to DPRK-aligned threat groups tracked under names such as CL-STA-0240, DeceptiveDevelopment, Tenacious Pungsan and Void Dokkaebi. The methodology aligns with patterns shown by the Lazarus Group and its affiliates, as attackers continue to weaponise open source ecosystems for espionage and financial theft. XorIndex and HexEval share infrastructure and tactics, including encrypted communication with command-and-control servers. In several cases, submitters of the malicious packages have crafted repository names containing “interview,” reflecting the campaign motif.

Beyond npm, the campaign’s reach extends: some modules reference Bitbucket repositories, and similar tactics have appeared in PyPI package attacks. The broader goal appears dual: accessing developer environments to steal intellectual property or credentials and siphoning cryptocurrencies from wallets detected on compromised machines.

Security firms and registry maintainers have responded with takedown requests and account suspensions. Socket reported removing six live HexEval-based modules earlier this year, and the npm security team has collaborated to suspend associated accounts. But defenders admit the reactive posture is fragile; attack waves resurface within hours.

Africa Tops Global Fraud-Exposure Rankings in Sumsub Index

The 2025 Global Fraud Index ranks Africa as the world’s most exposed region to digital fraud, marking a significant shift in the global fraud landscape. Sumsub’s study, covering 112 countries across four structural pillars, places Nigeria, Tanzania, Uganda, Kenya and Senegal among the least protected nations. Sumsub built its index on four weighted dimensions: fraud activity, resource accessibility, government intervention, and economic health. The combined framework aims […]

Trump Has Not Got Nobel Peace Prize But The Winner Machado Is His Acolyte In Latin America

Stealit Campaign Harnesses Experimental Node.js Feature for Windows Infiltration

A newly observed wave of attacks is using the cutting-edge Single Executable Application capability in Node. js to deliver the Stealit malware to Windows systems, marking a strategic shift by threat actors to evade detection. Security analysts say the move underscores how attackers are co-opting development frameworks to bypass conventional defences. FortiGuard Labs security researchers discovered that this campaign packages malicious payloads using Node. js SEA, an […]

Synology Unveils Next-Gen Cyber Resilience Solutions in UAE

Cyber resilience has evolved from a mere operational necessity to a core strategic focus for businesses across the globe. As cyber threats continue to escalate in complexity and volume, companies are now recognising the importance of not just preventing cyberattacks, but also ensuring they can quickly recover and continue functioning in the face of such threats. Synology, a leader in data storage and network solutions, has taken […]

Quantum-Hardened Bitcoin Variant Emerges from Quantica Tech

Portuguese quantum computing firm Quantica Tech has revealed a new digital currency, Quantic Bitcoin, engineered to resist attacks from future quantum computers. The project rests on a proprietary “Quantum Interoperability” protocol designed to allow conventional blockchains and quantum‐era architectures to communicate and co-operate.

BTCQ is intended to preserve Bitcoin’s proof-of-work consensus but replace vulnerable cryptographic signatures with algorithms that conform to NIST-approved post-quantum standards. In transitional phases, the system runs quantum algorithm emulation on classical hardware—enabling development without immediate dependence on quantum hardware. Quantica has also introduced tiered fractional units, named Photons, Quarks and Bosons, to mirror Bitcoin’s Satoshi model at microtransaction scale.

The announcement reflects intensifying concern within cryptographic and blockchain communities about quantum threats to existing systems. Shor’s algorithm, for instance, is capable of undermining widely used public-key schemes, such as ECDSA, that secure most cryptocurrencies today. A literature review of quantum impacts on blockchain estimates that, although scalable quantum machines remain a work in progress, the threat horizon is accelerating, pushing many in the industry to preemptively explore quantum-safe alternatives.

Quantica says its interoperability protocol enables smart contracts in languages such as Solidity, Rust, Plutus and Vyper to invoke quantum layer functions through external script calls. The firm claims it has already shared the initial design of that protocol with the scientific community, though specific cryptographic details remain withheld. Plans are in place to issue Simple Agreements for Future Tokens in late 2025 and conduct a pre-sale of the token units ahead of public launch. The company is also working in parallel on related projects—Quanticacoin, USDT-Q and Q-Solana—to extend its quantum-capable ecosystem.

BTCQ joins a growing number of blockchain initiatives adopting quantum-resistant techniques. The Quantum Resistant Ledger, for example, has long leveraged XMSS to offer protection against quantum attacks, and many networks have begun integrating lattice-based or hash-based post-quantum cryptography.

Still, implementation and security challenges loom. Recent academic analysis warns that purely algorithmic guarantees do not suffice; side-channel attacks and hardware vulnerabilities may undermine post-quantum schemes if not carefully addressed. Analysts caution that the “harvest now, decrypt later” risk remains active: encrypted data captured today may be decrypted when quantum capabilities mature.

Market reception has been cautious. Many observers view Quantica’s claims as ambitious, given the dearth of open cryptographic proofs or independent audits so far. Some see the project as an early bet on quantum transition rather than an immediate substitute for existing value chains. Others argue the broader utility of quantum-resistant assets will depend heavily on regulatory frameworks, interoperability standards, and community adoption.

Quantica’s announcement arrives against the backdrop of intensifying activity in quantum and cryptographic infrastructure. Hardware vendors and research institutions are racing to scale error correction, qubit coherence and interconnects. Meanwhile, financial and security firms are preparing migration strategies for sensitive systems. Among commercial players, SEALSQ has unveiled hybrid cryptographic hardware intended to safeguard blockchain systems and IoT devices against quantum attacks.

Quantica has positioned BTCQ’s development as a shift from theoretical readiness to pragmatic construction. The firm contends it can build bridges between classical chains and quantum systems without heavy disruption to existing protocols. Early access via SAFTs and token presales aim to bootstrap an ecosystem of developers and enthusiasts.

Global AI Governance Enters Crossroads

Governments, tech firms and international bodies are intensifying efforts to structure artificial intelligence oversight, with sharp divergence emerging between innovation-led and precaution-based models. The European Union has begun implementing core provisions of its AI Act, the United States has unveiled a sweeping federal strategy prioritising deregulation, and Asia—with China leading—has laid out a coordinated global governance agenda. The EU’s AI Act, formally effective since August 2024, is […]

Mini-Monitor for Gamers Claims Open-Source Edge

A compact secondary display called WebScreen is being promoted as a hacker-friendly add-on for gaming and creator setups, with crowdfunding underway. It is designed to perch atop a primary monitor and display notifications, stats or reminders without distracting the user from full-screen work. WebScreen emerges from HW Media Lab, conceived by Pedro Martin and Eleo Basili. It features a 1.9–2.1 inch AMOLED panel at 240×536 resolution, powered […]

OPEC+ Set to Authorise Further 137,000 bpd Output Hike

OPEC+ is poised to approve another lift in oil output of at least 137,000 barrels per day when its core members convene on 5 October to finalise November quotas, according to three individuals familiar with the discussions. The decision is part of the alliance’s broader push to reclaim lost market share amid surging crude prices. Since April, the group has reversed earlier production cuts, having already raised […]

Harrods Alerts Shoppers Over Third-Party Data Breach

Harrods has informed certain customers that their names and contact details were exposed after a system belonging to one of its third-party service providers was compromised, though account passwords and payment information remain unaffected. The luxury retailer emphasised the breach was isolated and has been contained, reiterating that Harrods’ core internal systems remained untouched. The compromised data is said to be limited to basic identifiers. The company […]

Luma Protocol Ushers in Hash-Power Anchored DeFi 3.0 Era

Luma Protocol, incubated by PopChain and Nivex, officially entered the market on 20 September 2025, positioning itself as a new architecture in decentralized finance that anchors value in computing power rather than speculative token mechanics. At midday UTC+8 the project launched its pre-sale and, within hours, issued the first mining rewards — signalling a shift from purely token-based incentives toward infrastructure-backed models.

The project’s core proposition is that “Hash Power” — the computational capacity underlying blockchains — becomes a tangible, tradeable asset integrated into DeFi systems. Luma’s model seeks to counterbalance what its promoters describe as the unsustainable cycles of token subsidies that have affected prior generations of DeFi protocols. Underpinning the system, Luma plans to merge capital, computational resource markets, and application layers in a closed-loop infrastructure.

PopChain contributes its identity and settlement capabilities, while Nivex offers liquidity, exchange infrastructure, and compliance support. This strategic alignment aims to deliver an ecosystem where value issuance, transaction execution, and mining resource distribution interlock. According to the announcement, the first mining rewards were disbursed at midnight UTC+8, immediately after launching the pre-sale.

Market reaction to the LUMA token has been volatile. On the MEXC exchange, LUMA traded with a 24-hour jump of 26 per cent, reflecting speculative interest. Yet the token’s 7-day price variance is extremely steep, plunging nearly 99.97 per cent over the week, pointing to high risk and low liquidity stability. The circulating supply and full market capitalisation currently remain opaque.

Critics caution that the concept of tokenizing hash power is not without inherent risk. In the realm of blockchain security, high concentration of mining capacity has historically exposed smaller networks to attacks. The accessibility of mining power through services like NiceHash demonstrates how hash power can be rented and concentrated, creating vulnerability, especially for new entrants. At the same time, mainstream DeFi research underscores systemic risks emerging from leverage, protocol interdependence, and opacity in governance.

Luma’s governance architecture is not fully detailed in public documentation, but the model will need to grapple with decentralised decision-making, hardware centralisation, and incentives for fair participation. Without sufficient safeguards, the protocol may face the same challenges of centralisation, collusion, or exploitability that have troubled other DeFi platforms.

For its part, Nivex has been scaling its ecosystem prior to Luma’s debut. It recently launched a Web3 wallet integrated with PopChain, with plans to embed users into a flow from wallet to liquidity operations to settlement. This vertical integration may benefit Luma by driving demand for the infrastructure stack. Nivex also recently listed the POP/USDT trading pair, anchoring the POP ecosystem that underlies PopChain’s social finance ambitions.

On the supply side, the broader mining industry’s economics are under strain. Electricity, hardware depreciation, and operational costs continue to restrict profitable deployment of hash power. The Cambridge Digital Mining Report underscores that energy cost variance across geographies is a major barrier for expansion. Projects that seek to monetise compute power must navigate this cost differential.