Non-Profit/Volunteering
40 threat reports.
- ShinyHunters Breach Harvard: 851,000 Alumni and Donor Records Leaked After Ransom Refusal
- Drupal's Critical RCE Flaws (CVE-2026-108097 & CVE-2026-108099): What Security Teams Must Do Now
- First Autonomous AI Agent Breach: DIVD Zammad Zero-Day Attack Analysis
- Russian State Hackers Deploy New RedFlick Technique in Automated Malware Campaigns
- Star Blizzard Scales Espionage Operations with RedFlick Malware Campaign
- The DIVD AI Agent Attack: When Machines Hack Autonomously
- Star Blizzard's RedFlick Evolution: How Russian APT Refined Espionage Tactics in 2026
- UTA0565 Exploits Chrome-Windows Zero-Day Chain in Sophisticated Campaign Against Asian Governments
- Iran's Handala Hack Weaponizes Telegram for Sophisticated Surveillance Operations
- Iranian State Hackers Deploy CHOSEN BRICK Malware in Global Espionage Campaign
- BlueMoon Exploit Kit Weaponizes Chrome and Windows Zero-Days in Multi-Group APT Campaign
- Five Critical WordPress Plugin Flaws Enable Complete Site Takeover
- Critical GiveWP Plugin Vulnerability Exposes 100K+ WordPress Sites to Remote Code Execution
- Apple Issues Warnings on Mercenary Spyware Threats in 110 Countries
- Vatican's 'Click to Pray' App Data Breach: A Wake-Up Call for API Security
- DigitalMint Negotiator's Betrayal: A Wake-Up Call for Cybersecurity
- UN World Food Programme Data Breach: A Wake-Up Call for Humanitarian Cybersecurity
- Critical Drupal Core SQL Injection Vulnerability (CVE-2026-9082) Actively Exploited
- DigitalMint Negotiator's Betrayal: A Stark Warning for Cybersecurity
- LucidRook Malware Targets Taiwanese NGOs and Universities in 2025
- UAT-10362's LucidRook Malware Targets Taiwanese NGOs in Spear-Phishing Attacks
- DigitalMint Insider Ransomware Scheme Unveiled
- Velvet Tempest's Use of 'ClickFix' in Recent Cyber Intrusion
- Lazarus Group's Medusa Ransomware Attacks on Healthcare in 2026
- CRESCENTHARVEST Malware Campaign Exploits Iran Protests to Target Supporters
- Polish Authorities Arrest Phobos Ransomware Affiliate in 2026
- Serbian Authorities' Misuse of Cellebrite Tools in 2024: A Wake-Up Call for Digital Privacy
- RedKitten 2026: Iranian State-Sponsored Malware Targets Human Rights NGOs
- Jordan Government’s Use of Cellebrite Forensics Tools Targets Activists in 2024
- Ukraine’s Army Compromised by Void Blizzard in Charity-Themed Malware Campaign
- FBI Warns of Kimsuky APT’s Advanced QR Code Phishing (Quishing) Attacks
- One Click IP Exposure: How Telegram Proxy Links Created a Privacy Vulnerability in 2026
- Kimsuky Leverages QR Code Phishing to Target U.S. Strategic Organizations in 2025
- Voice Phishing Attack Exposes Harvard Alumni and Donor Data in 2024 Breach
- Konni APT Exploits Google’s Find Hub to Launch Data-Wiping Attacks
- Chinese Nation-State Hackers Breach U.S. Non-Profit Using Legacy Bugs
- University of Pennsylvania Breach Exposes 1.2 Million Donor Records in 2024
- PhantomCaptcha Spearphishing Attack Targets Ukraine War Relief Orgs
- PhantomCaptcha: How Ukraine Aid Groups Were Targeted with Spear-Phishing PDFs in 2025
- Iran MOIS Targets Diplomatic Missions Worldwide in Sophisticated Phishing Campaign (2024)
40 threat reports