News — Darkeye Industries Blog

First Malicious MCP Server Discovered in Fake Postmark-MC NPM Package

Koi Security reports the first malicious MCP server hidden in a fake Postmark-MC NPM package, highlighting new risks in software supply chain attacks.

Samuel · 1759253706

news

N4t0x SpainData Leak: Massive Data Breach of Spanish Politicians & Police

Hacker N4t0x uses SpainData tool to leak personal data of Spanish politicians, police, and intelligence officers, exposing families and raising privacy risks.

Samuel · 1758361698

news

Emerging Ransomware Groups: CoinbaseCartel and BlackShrantac

CoinbaseCartel and BlackShrantac launch major attacks on Sept 15 & 17, 2025, hitting multiple industries worldwide and exfiltrating massive sensitive data.

Samuel · 1758134720

news

New ransomware group on the scene: The Gentlemen

The Gentlemen, a new ransomware group, launched on 09/09/2025, linked to 32 attacks across multiple sectors worldwide, highlighting the growing global threat.

Samuel · 1757948523

news

Devman Group: New $91M ransom demand

Devman Group demands $91M after stealing 12TB of data, highlighting modern ransomware trends: massive thefts, targeted financial extortion, and high ransom demands.

Samuel · 1757947862

news

Recent notable cases in 2025

Recent ransomware attacks in 2025 affected hospitals, governments, banks, and companies worldwide. BlackSuit, Royal, and other groups caused massive data breaches and financial losses. Early detection

Samuel · 1757939622

news

BlackSuit dismantled

International law enforcement dismantles BlackSuit, heir of Royal/Conti, after causing $500M in damages through double-extortion ransomware operations.

Samuel · 1757936925