More than $1.67 billion worth of cryptocurrency has been exfiltrated across nearly 200 heists between January and March, which is not only 303% higher than the fourth quarter but also the highest amount of pilfered digital assets on record, Infosecurity Magazine reports.

Minnesota's Lower Sioux Indian Community had operations of its healthcare facility, government center, and casino taken down by a cyberattack initially disclosed by officials on Friday and later claimed by the RansomHub ransomware-as-a-service operation earlier this week, reports The Record, a news site by cybersecurity firm Recorded Future.

Cybernews reports that most of the over 2.8 billion user records belonging to X, formerly Twitter which were purported by threat actor "ThinkingOne" to have been exfiltrated by a disgruntled employee were publicly available information.

Sensitive data compromise could have been achieved through the exploitation of the recently patched Google Cloud Run privilege escalation flaw dubbed "ImageRunner," according to SecurityWeek.

Immediate patching has been urged by Cisco for a critical flaw impacting its Smart Licensing Utility, tracked as CVE-2024-20439, following the discovery of its attempted exploitation last month, reports BleepingComputer.

Mounting threats to the profitability of ransomware operations amid escalating law enforcement clampdowns, even by Russia, have prompted the Hunters International ransomware-as-a-service gang to alert affiliates regarding an ongoing rebrand to the data theft-focused "World Leaks" in November, only for the group to roll back such an announcement weeks later, The Register reports.

More advanced obfuscation techniques have been adopted by a new Hijack Loader malware variant, the SHELBY malware, and the Emmenhtal Loader to facilitate clandestine compromise, according to The Hacker News.

Updated Triada trojan compromises thousands of Android devices BleepingComputer reports that at least 3,000 Android devices that are counterfeits of widely known smartphones, most of which are in Russia, were confirmed to have been pre-installed with the latest iteration of the modular and stealthy Triada trojan.

Attacks with the novel Python-based Anubis backdoor have been deployed by Russian advanced persistent threat operation FIN7.

Vulnerable SSH servers have been primarily targeted by the Outlaw Linux cryptocurrency mining botnet, also known as Dota, which could self-propagate through its BLITZ initial access component, The Hacker News reports.