TechCrunch reports that U.S. consumer-grade spyware app pcTattletale claimed to be hacked by a threat actor purporting to have exposed the app's internal data, including information stolen from its victims, to its website.

The Hacker News reports that several fake websites offering antivirus software from Avast, Malwarebytes, and Bitdefender have been leveraged by threat actors to distribute various information-stealing malware strains.

Operators of the BLOODALCHEMY malware leveraged in intrusions against Southern and Southeast Asian government entities derived the payload from the Deed RAT trojan, which descended from the ShadowPad malware, according to The Hacker News.

U.S. and European financial and insurance organizations were noted by Ukraine's Computer Emergency Response Team and the Cyber Security Center of the National Bank of Ukraine to have been targeted by the UAC-0188 threat operation in attacks leveraging a trojanized Python clone of the Minesweeper game to stealthily deploy the SuperOps RMM remote access tool, BleepingComputer reports.

TechCrunch reports that at least three U.S.-based Wyndham hotels were discovered by security researcher Eric Daigle to have had their check-in systems compromised with the consumer-grade spyware app pcTattletale, which is impacted by a vulnerability that exposed the screenshots it captured from the devices where it was installed.

Attacks leveraging Microsoft Exchange Server vulnerabilities to facilitate keylogger malware deployment have been launched against more than 30 government, financial, education, and IT organizations in Africa and the Middle East since 2021, reports The Hacker News.

Major U.S. oil and fuel distributor Atlas Oil has been claimed to be compromised by the Black Basta ransomware operation, which purportedly stole 730 GB of data, Security Affairs reports.

Blockchain gaming platform Gala Games had nearly $22.2 million worth of cryptocurrency exfiltrated following a cryptocurrency heist on the evening of May 20, reports The Record, a news site by cybersecurity firm Recorded Future.