In a bold move against cybercrime, Coinbase, a prominent cryptocurrency exchange, is offering a $20 million reward to anyone who can help identify and bring down the perpetrators of a recent cyber-attack, rather than succumbing to their ransom demands. Coinbase reported on May 15 that cybercriminals bribed and recruited a group of rogue overseas support agents to steal its customer data and facilitate social engineering attacks. The attackers planned to use the stolen data to…

A stealthy fileless malware attack leveraging PowerShell to deploy Remcos RAT has been observed bypassing traditional antivirus systems by operating entirely in memory, avoiding any obvious traces on disk. The campaign, uncovered by the Qualys Threat Research Unit (TRU), begins with a ZIP archive containing a deceptive LNK file, disguised as a legitimate document. Once executed, this file uses MSHTA.exe to launch an obfuscated VBScript, initiating a chain of events that includes: Bypassing Windows Defender…

Cybersecurity researchers are piling up evidence that a critical vulnerability affecting German software company SAP’s NetWeaver Visual Composer development server is being exploited in the wild by a range of threat actors. These include ransomware groups BianLian and RansomwEXX, as well as at least one Chinese nation-state actor known as Chaya_004. Strong Evidence of Exploitation The flaw, tracked as CVE-2025-31324, is an unauthenticated file upload vulnerability in the Metadata Uploader component of the SAP NetWeaver…

French luxury brand Dior has confirmed a data breach that compromised the personal information of some of its customers. The incident, which was discovered on May 7, involved unauthorized access to a portion of its customer database, the company told BleepingComputer. The types of information potentially accessed in the breach include: Financial information such as payment card details and passwords were not affected, as these were stored separately, the company said. The breach appears to…