Critical VPN and Firewall Exploitation Campaign Leads to Credential Theft and Network Intrusions          *

Capcom Confirms Data Breach Exposing 11.7 Million Accounts          *

Critical PHP RCE Vulnerabilities Exploited Following Public PoC Release          *

SBI Notifies Affected Customers Following Cybersecurity Incident          *

APT41-Linked BlackX UEFI Bootkit Exploits Secure Boot Vulnerability to Evade Endpoint Security          *

Signal Vulnerability May Allow Microphone Access to Persist After Calls End          *

LiteLLM Supply Chain Attack Exposes Credentials and Enables Remote Code Execution          *

Meta Faces 25 Billion Dollar Penalty Over Millions of User Privacy Violations          *

INTERPOL Disrupts Over 10,900 Malicious Networks in International Operation          *

Railway Security Incident Exposes Customer Secrets and Cryptocurrency Wallet Credentials          *

Hackers Exploit Siemens Software Center Vulnerability to Execute Malicious Code          *

China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack          *

Critical Linux KSMBD Vulnerabilities Expose Servers to Remote Code Execution          *

Lazarus Group Uses Post-Quantum Cryptography for Malware Delivery in South Korea          *

Japan’s Onamae Desktop Cloud Hacked, Up to 27,000 Customer Servers Potentially Affected          *

Node.js Patches 10 Security Flaws, Including Critical Remote Code Execution Vulnerability          *

Attackers Exploit PAN-OS Vulnerability to Bypass MFA and Deploy Ransomware          *

Rust 1.100 Introduces Cargo Security Cooldowns to Mitigate Malicious Dependency Attacks          *

GMO Internet Reports Malware Infection Affecting 26,739 Cloud Servers, Raising Data Exposure Concerns          *

GhostShares Vulnerability Exposes Meta Muse AI Conversations Through Passive DNS, Raising Privacy Concerns          *

Industrial Defender Integrates Endpoint Intelligence and Network Monitoring for CIP-015 and Risk Management          *

Hackers Use Claude AI for Ransomware Attacks, Exposed Servers Reveal Stolen Data and Extortion Plans          *

Google Chrome Integrates Gemini AI to Detect Fake Antivirus Scams          *

Cloudflare Warns of Attacks Targeting Two Critical PHP Vulnerabilities          *

Dormant AI Agents Retain Active Credentials and Connections, Exposing Organizations to Security Risks          *

The Gentlemen Ransomware Exploits Vulnerable Kernel Drivers to Bypass Endpoint Security          *

U.S. Government Bans DeepSeek AI From Federal Civilian Agency IT Systems Over Security Concerns          *

Scammers Abuse Legitimate Fintech Platforms to Steal Banking Credentials          *

Compromised OVHcloud GitHub Account Distributes Secret-Stealing Malware          *

GhostAction Campaign Evolves with OAuth Token Theft and Persistent Credential Stealer          *

Revolut Outage Disrupts Online Banking Services Across the Globe          *

Online Ads Used to Deliver Zero-Click Spyware Attacks          *

PostgreSQL Feature Chaining Exposes Snowflake to Server-Level Code Execution Risk          *

SiteGuard Alerts Users to Actively Exploited Flaw, Warns Patching Could Erase Attack          *

Critical Drupal Vulnerability Could Enable Unauthenticated Remote Code Execution          *

Weekly CVE Report: Daily Cybersecurity Flags Exploited Flaws Ahead of CISA KEV          *

Critical Plex Media Server Vulnerabilities Enable Unauthenticated RCE, Cryptomining, and Proxyware Deployment          *

Government Linux Servers Targeted in AI-Assisted Attacks Involving Backdoors and Credential Theft          *

ROMULUS Malware Platform Exploits ClickFix Tactics to Distribute Stardock Trojans and LegionLoader          *

YuanKong Android RAT Enables Remote Device Control and Data Theft          *

Burger King Japan Suffers Data Breach Exposing 11 Million Customer Records          *

Armory Castle Chains BeyondTrust Zero-Day Exploitation with Web Shell Deployment and SOCKS5 Tunneling          *

UAT-11985 Targets Taiwan Researchers With Google AitM Phishing          *

Collabora Online Vulnerability Poses Critical Remote Code Execution Risk to Nextcloud Servers          *

iPhone 18 Pro iOS 27.0.1 Untethered Jailbreak Bypasses Kernel-Level Security Defenses          *

Google Chrome 155 Security Update Addresses 10 Vulnerabilities, Including a Critical Flaw          *

PEERSTITCH Malware Targets FortiGate Firewalls, Concealing Itself in System Memory          *

Palo Alto Networks Warns of Actively Exploited PAN-OS Remote Code Execution Vulnerability          *

Cisco Secure Email Gateway Zero-Day Exploited to Gain Root Access          *

NGINX Patches Five Vulnerabilities, Including Potential RCE and TLS Certificate Bypass          *

Hackers Exploit Targeted Online Ads to Deliver Zero-Click Spyware Without User          *

Critical Next.js SVG Processing Vulnerability Could Enable Remote Code Execution and Expose Servers to DoS Attacks          *

TFG London Cyberattack Disrupts IT Systems Supporting Phase Eight, Hobbs, and Whistles          *

Citrix Patches High-Severity XenServer Vulnerabilities That Could Compromise Hosts          *

SAP Addresses Critical Vulnerabilities Affecting NetWeaver and S/4HANA Systems          *

Security Breach Involving Meta's GitHub Repositories Exposes Software Code and Employee Personal Data          *

AI-Powered Exploit Chain Bypasses Chrome Sandbox to Execute Code on Windows          *

European Bank Targeted Through Compromised VPN Credentials and Misconfigured Gateway          *

Ransomware Gangs Threaten Employees’ Families as AI-Powered Attacks Escalate          *

Microsoft Warns of Three Windows BitLocker Vulnerabilities Enabling Privilege Escalation and Security Bypass          *

Hirudo Android Banking Trojan Replaces Legitimate Apps to Bypass Security Checks          *

Ivanti Connect Secure CVE-2026-104935 Enables Authentication Bypass and Remote Command Execution          *

Zoom Certificate Validation Flaw Could Expose Sensitive Information          *

Docker Hub Flaw Enables User Impersonation and Critical Container Image Tampering          *

DDoS Attack Disrupts Ubuntu and Canonical Websites for Over Four Hours          *

Anthropic Warns AI Models Could Soon Self-Replicate Across IoT Devices          *

ToFu Identifies 253 Security Vulnerabilities Across AI Agent Tools in MCP Servers          *

Danfoss Controller Compromise Triggers Refrigeration Disruption Across Hundreds of French Stores          *

LG Smart TVs Exposed to Pre-Authentication Root Takeover Attacks via Local Network          *

MarkLogic Server Security Update Addresses 31 Vulnerabilities Across Authentication, Privilege Controls, and Data Protection          *

XWorm Reborn RAT Threat to Windows Systems Through Browser Hijacking, Credential Theft and Advanced Surveillance          *

Kimsuky Deploys Funhouse Ransomware via Quasar RAT and Multi-Stage Scripts          *

Malicious Android Firmware Generates Revenue Through Ad Fraud and Proxy Botnets          *

CISA Warns of Actively Exploited Critical Apache Struts Command Injection Vulnerability (CVE-2016-3081)          *

WhatsApp-Delivered Malware Abuses Windows Task Scheduler to Gain SYSTEM Access          *

Critical Google DevSite Vulnerability Could Enable Unauthenticated Remote Code Execution          *

Critical Bricksforge Plugin Vulnerability Exposes WordPress Sites to Remote Code Execution          *

Researchers Discover Domain Spoofing Techniques That Bypass Chrome’s Phishing Protections          *

CyberXero Exploits WordPress Sites Using Claude Code, Stealing 628,000+ Ukrainian Records          *

Ahold Delhaize Shuts Down Systems Following Cyberattack          *

Cyberattack Disrupts Refrigeration Systems at Major French Supermarkets          *

Fake Meeting Application Used by DarkBlinders to Deploy Backdoor and Exfiltrate Sensitive Government Data          *

Nippon Columbia Malware Attack May Put 8.7 Million Daiichi Kosho Records at Risk          *

Unusual DNS Activity Raises Concerns Over VPN-Based Communications          *

Critical AWS Bedrock AgentCore Flaw Enables Credential Theft, Lateral Movement and Memory Poisoning          *

React Server Components Deserialization Flaw (CVE-2026-23870) Can Disrupt Web Services          *

GhostAction Campaign Targets GitHub Repositories to Steal Sensitive Credentials          *

Emerging AI Swarm Technology Raises Concerns Over Automated Cyberattacks          *

Suspected North Korean Threat Actors Deploy Rust-Based FLATROOF Backdoor via Terraform Supply-Chain Attack          *

Attackers Exploit Critical AhsayCBS Vulnerabilities to Deploy XMRig Miners Disguised as Microsoft Edge          *

CastleStealer Malware Evades Chromium’s ABE Protection and Introduces Remote Command Execution Capabilities          *

GreyNoise Detects Surge in Hikvision Camera Exploitation Attempts in Ukraine Amid Airstrikes          *

UAC-0099 Deploys Evolving MATCHBOIL Malware to Target Ukrainian Critical Infrastructure Through Spear-Phishing          *

Cisco Talos Warns AI Agent Swarms Could Accelerate Cyberattacks From Months to Hours          *

Ransomware Attack Disrupts Japan’s IDCF Cloud, Affecting 495 Businesses and Local Government Entities          *

Midnight Mimosa Malware Targets Low-Cost Android Devices for Ad Fraud and Proxy Abuse          *

Insignary Introduces Clarity AIR to Address Open-Source and AI Code Risks          *

Malicious Tensorlake npm Package Spreads Shai-Hulud Supply Chain Malware          *

wolfSSH Fixes Five Security Vulnerabilities          *

Gitea 28.0.0 Fixes 20 Vulnerabilities Affecting Authentication, CI/CD Workflows, and Network Security          *

DarkSword and Coruna Exploits Target iPhones to Steal Cryptocurrency Wallet Recovery Phrases          *

UAC 0099 Targets Ukrainian Government Personnel with ASHVEIN RAT          *

AI-Powered ARTEX Pentesting Tool Abused to Steal Data from South Korean Financial Firms          *

Critical Splunk Enterprise Flaw Enables Unauthenticated Remote OS Command Execution          *

Threat Actors Exploit GH, SL, and AS Domains to Obtain Unauthorized SSL Certificates          *

ChainDrop and PolinRider Fuel Web3-Driven Supply Chain Attacks, Stealing Credentials Across Global Cloud and CI-CD Environments          *

Critical Unpatched LMCache Vulnerability Enables Unauthenticated Remote Code Execution          *

EY Data Breach Exposes Client Tax and Financial Information          *

SonicWall SMA1000 Pre Authentication SSRF Vulnerability Rated Critical          *

Capacitor WebView Vulnerability (CVE-2026-103922) Enables Same-Origin Code Execution          *

AI Bots Used in $10 Million Music Streaming Royalty Fraud          *

PoeLLM Malware Targets Exposed AI Servers in Cryptomining Campaign          *

Critical LMCache Flaw Lets Unauthenticated Attackers Execute Code Remotely          *

South Korean Banks Targeted in Suspected AI-Driven Cyberattacks          *

Critical Progress DataDirect Flaw Enables OS Command Execution Through Malicious OpenAPI Files          *

LUNEXSTEALER Campaign Uses Fake Cloudflare Checks and LUNARAXE Extension to Hijack Browsers          *

ClickFix Campaigns Exploit Browser Cache to Bypass Windows Run Limits          *

Critical Dell System Update Flaw Enables Root Privilege Escalation          *

Denmark Population Registry Data Breach Exposes 8.8 Million Records          *

Ninja Forms Vulnerability Exploited to Compromise WordPress Websites          *

IQVIA Health Data Anonymization Failures Lead to €7 Million Fine          *

Nikkei Reports Google Workspace and Microsoft 365 Account Compromises Used in Phishing Campaign          *

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Execute Code Without Security Warnings          *

Apache Struts Vulnerabilities Could Enable Remote Code Execution, DoS, and Data Exposure          *

Atlassian Jira and Confluence Data Center Affected by Critical CVE-2026-21589 Vulnerability          *

IBM Patches 25 Critical Langflow OSS Flaws Threatening AI Applications With Code Execution and Data Exposure          *

AWS Fixes Critical AI Agent Vulnerabilities Enabling Credential Theft and Authentication Bypass          *

Google PageBreak AI Agent Finds 500+ XSS Vulnerabilities          *

Timor-Leste Authorities Dismantle Japanese Police Impersonation Scam Operation          *

Denmark CPR Data Breach Exposes 8.8 Million Citizen Records          *

Citrix NetScaler Vulnerability CVE-2026-88779 Under Active Exploitation          *

Attackers Exploit Critical Rejetto HFS Flaw to Forge Admin Sessions and Execute Code          *

Cling Malware Disguises Malicious IoT Traffic as Google STUN Communications          *

Microsoft Issues Emergency Patch for Exchange Server Vulnerability          *

CISA Warns of Actively Exploited Vulnerabilities in Zammad          *

Critical Fortinet FortiMail Zero-Day CVE-2026-104286 Actively Exploited          *

MediaTek Fixes 31 Security Flaws, Addressing Critical Vulnerabilities Across Modem, Video, and AI Components          *

Warlock Exploits Microsoft SharePoint Vulnerabilities Against Critical Infrastructure          *

ShinyHunters Suspect Detained Amid Investigation Into Data Theft and Cyber Extortion          *

GitLab Addresses Critical Flaw in AI Gateway Enabling Arbitrary Commands          *

Android 17 Advanced Protection Restricts Accessibility Services to Verified Accessibility Tools          *

Android 17 Advanced Protection Restricts Accessibility Services to Verified Accessibility Tools          *

China-Linked TA419 Launches AitM Phishing Campaign Against U.S. AI Policy Experts          *

Dell CSM Flaws Enable Unauthenticated Admin Access and Root          *

New PS5 Relapse Exploit Unlocks Kernel Access Across Multiple Firmware Versions          *

Multiple ModSecurity Vulnerabilities Let Attackers Bypass WAF Rules and Execute Malicious Requests          *

OpenSSL DTLS Vulnerability (CVE-2026-84782) Enables Remote Heap Memory Disclosure          *

HPE Instant On AP Flaws Enable Unauthenticated Remote Code Execution          *

Vulnerable TeamViewer Systems Face Multiple Security Flaws          *

Critical Axios Security Flaws Affect Node.js Applications          *

OpenSUpdater Malware Conceals Malicious Code in 7 Zip Installers to Evade Detection          *

Star Blizzard Expands RedFlick Phishing Campaign, Exploiting Malicious Archives and Windows Utilities for Global Cyberespionage          *

Kernel Flaw CVE-2026-72018 Enables Local Privilege Escalation          *

Spectre-v2 BTR Attack Exposes Linux Memory          *

SilverFox Fake Software Sites Use Visitor Tracking to Evade Security Researchers          *

Storm-3068 Abuses Azure DevOps Pipelines to Steal Kubernetes Credentials After Account Compromise          *

GPT-6 Astra Demonstrates Unauthorized Supply-Chain Attack Behavior in Cyber Simulations          *

Malicious Hugging Face Models Exploit Unsloth Studio for Arbitrary Code Execution          *

Security Vulnerability in Anthropic MCP Python SDK Enables OAuth Credential Theft and Account Takeover          *

Octopus Deploy Discloses High-Severity Server Flaw Enabling Authenticated Arbitrary Code Execution via JSON Deserialization          *

AgtaBackup RAT Exploits Fake Microsoft Store Pages and RMM Tools to Take Control of Windows Systems          *

WatchGuard Access Point Vulnerabilities Enable Unauthenticated API Access and OS Command Injection          *

SilverFox Fake Software Sites Use Visitor Tracking to Evade Security Researchers          *

WolfSSL 5.9.4 Fixes 11 TLS and Certificate Security Vulnerabilities          *

PostgreSQL Vulnerability Enables Remote Code Execution          *

Japan's Keio Corporation Confirms Ransomware Attack Disrupted Business Systems          *

Bitget Reports $388 Million Theft Following Exploitation of Third-Party Security Product Vulnerability          *

AI Agent Used in Cyberattack Against Cybersecurity Nonprofit DIVD          *

Kiteworks Strengthens Security Controls Following Critical Vulnerability Discovery          *

MCP Python SDK Flaw Enables OAuth Credential Theft via Malicious Servers          *

DPRK-Linked Hackers Hide Malware C2 Details Inside Ethereum Transactions          *

Oracle PeopleSoft Servers Targeted by ShinyHunters in Active Exploitation          *

RatHat Android Banking Malware Exploits Accessibility Services, Malicious APKs, and ADB for Remote Data Theft          *

NeedyMantis Malware Enables Persistent Access to Compromised Networks          *

Apple Fixes CoreGraphics Vulnerability Potentially Exploited in Targeted Attacks          *

JADEPUFFER Abuses Compromised Azure Service Principals to Execute Destructive Cloud Operations          *

Carbonato Botnet Targets Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent          *

Norwegian Cruise Access Control Flaw Enables NFC Keycard Replay          *

TrustSink Attack Abuses Microsoft Entra External Authentication Methods to Steal Passwords          *

Kiteworks Potential Zero-Day Threat Prompts Emergency Server Shutdown Advisory          *

JADEPUFFER Attackers Used Stolen Azure Credentials to Launch Destructive Cloud Attack          *

Lumma, RedLine and Vidar Drive Credential Theft Across Cloud Environments          *

Apache Qpid Broker-J 10.1.1 Fixes Six Security Vulnerabilities          *

CISA Warns of Active Exploitation of Critical Citrix NetScaler Flaws          *

Sudo Vulnerability CVE-2026-96512 Enables Privilege Escalation          *

Microsoft to Phase Out Windows Deployment Services and WDS-Based PXE Infrastructure          *

ServiceNow Security Vulnerabilities Enable SQL Execution and Unauthorized Instance Data Modification          *

Carbonato Botnet Exploits Exposed Docker Hosts to Deploy AI Agents          *

Hackers Actively Exploiting Critical WordPress Vulnerability to Deploy Malicious PHP Files          *

Storm-2570 Uses Consistent Attack Blueprint Across Multiple Ransomware Families          *

Microsoft Advances SOC Capabilities with AI Agents Against Machine-Speed Attacks          *

Unpatched OnePlus Flaws Allow Installed Apps to Gain Root Access          *

Critical Linux Kernel Vulnerability Exploited Through Public RustyTux Local Privilege Escalation Proof-of-Concept          *

GitLab Email Token Vulnerability Enables Unauthorized Code Pushes and CI/CD Execution          *

Critical Ansible Automation Platform Vulnerabilities Enable Privilege Escalation and Code Execution          *

Roundcube Webmail SQL Injection Vulnerability (CVE-2026-48842) Actively Exploited          *

cPanel Fixes Vulnerability Exposing Customer Calendar and Contact Information          *

RemControl Malware Abuses Accessibility Services to Steal Banking Data          *

AvisLoader Windows Malware Exploits ClickFix Social Engineering and Tox P2P Network for Persistent Remote Access          *

Galago Ransomware Operation Emerges With Possible Panzer Connections          *

Operation Conflict Compass Deploys VelvetCake PowerShell Malware Through Malicious LNK Files          *

Apache Tomcat 11.0.26 Fixes 12 Security Flaws, Including WebSocket Bypass and DoS          *

Exvicy MaaS Exploits Compromised WordPress Sites and Fake Cloudflare CAPTCHA Pages in ClickFix Attacks          *

Critical HPE Networking ALE Vulnerabilities Could Enable Remote Root-Level Access          *

PamStealer Campaign Targets macOS Users Through Fake Crypto Wallet Applications          *

ShinyHunters Claims Breach of FBI Systems Exposing Employee and Applicant Data          *

Hackers Exploit Critical Check Point Flaw to Execute Code on Management Servers          *

SolarWinds Observability Vulnerabilities (CVE-2026-28324 and CVE-2026-28325) Enable Remote Code Execution          *

Critical D-Link DAP-1360 Vulnerability Enables Unauthenticated Root Command Execution          *

Malicious TV Streaming Ads Target Users With StreamRat Android Malware          *

Stealthy WordPress Malware Uses MU-Plugin Persistence and Ethereum EtherHiding for Persistent Backdoor Access          *

Rogue External MFA Providers May Capture Credentials During Authentication          *

Critical ARM64 KVM Flaw Enables Guest-to-Host Escape Through Nested Virtualization          *

Feral Wolf Exploits Public-Facing Enterprise Services in GenieLocker Ransomware Intrusions          *

Malicious npm Packages Exploit Runtime Execution in Million-Download Supply-Chain Attack          *

Microsoft Disrupted AI-Powered EvilTokens PhaaS Platform After 12,000 Accounts Compromised          *

D-Link Warns of Critical Zero-Day Vulnerability in DIR-822A Routers          *

Fake LastPass Authenticator Installer Deploys Rapuncel Infostealer via Vulnerable Kernel Driver          *

Vidar Uses Custom Bytecode Interpreter and ARX Stream Ciphers for Per-Build String Obfuscation          *

Meta Muse AI Agent Zero-Day Vulnerability Enables Prompt Injection and Credential Theft          *

Stolen NTDS dit File Puts Entire Windows Domain Credentials at Risk          *

Zyxel and Veeam Vulnerabilities Targeted in Active Exploitation Campaigns          *

Exposed AWS IAM Keys on GitHub Trigger Automatic Security Quarantine          *

PAYLOAD Ransomware Exploits Active Directory Group Policy to Disrupt Windows Networks          *

Rapunzel Infostealer Weaponizes Microsoft-Signed Driver to Disable 145 Security Tools          *

NightEagle Exploits BlueKeep and DCSync to Target Active Directory Domain Controllers          *

BigCommerce Data Breach Linked to Compromised Ribon Applications          *

10 Critical and High-Severity CVEs Under Active Exploitation          *

BigDiskBuster Exploit Targets Defender Updates, Creating Potential Security Intelligence Gaps Across Windows Systems          *

STOMP PowerShell Backdoor Targets Documents, Wi-Fi Passwords, and Clipboard Data          *

Cache Key Injection Attack Puts Vulnerable Nginx Servers at Risk          *

Microsoft Teams Attacks Target Employees Through Fake IT Help Desk Messages          *

TraderTraitor Exploits Terraform Lock Files to Deliver macOS Backdoors Through Malicious GitHub Repositories          *

Windows Server 2022 Mainstream Support Ending in 2026          *

Hangro VPN Certificate Reveals Hidden Network Infrastructure          *

BragJack Attack Lets Malicious Extensions Hijack AI Agents Across 5 Major Browsers          *

Critical IBM MQ Vulnerability CVE-2026-10747 Scores CVSS 10.0          *

Multi-Stage PowerShell Malware Uses Registry and DNS TXT Records to Deploy XMRig Miner          *

RatHat Android Trojan Targets Banking Credentials, PINs, and MFA Codes          *

CISA Warns Organizations of Linux Kernel Vulnerabilities Being Actively Exploited          *

WordPress Click2Shell Theme Preview Vulnerability Enables Malicious Links to Chain Installation Flaws Into RCE          *

Gyazo Server Vulnerability Exposed 23.6 Million User Records          *

Plugin4Shell Exposes Claude Code, Codex, Copilot and Gemini CLI to Supply-Chain Attacks          *

MovieReaper Malware Campaign Exploits Pirated Movie Torrents          *

WordPress 7.1.1 Fixes 11 Security Flaws Including Stored XSS and Path Traversal          *

Hackers Weaponize Brevo JavaScript to Deploy WordPress Backdoors and ClickFix Malware          *

Critical pgAdmin Authentication Bypass Allows Administrator Login Without Credentials          *

Steam Client Vulnerability Enables Local Privilege Escalation to SYSTEM on Windows          *

Handala Campaign Abuses CRUDEEXCLUDE to Disable Defender and Deploy HEAVYGRAM          *

Axoflow Unveils AxoDetect to Streamline Threat Detection and Reduce SIEM Data Ingestion          *

SilkParasite Campaign Targets Central Asian Governments and Energy Organizations Using SpiceRAT Infrastructure          *

Attackers Exploit Hacked Educational Websites and Google Search to Bypass Ad Moderation          *

Check Point Management Server Vulnerability Allows Unauthenticated Root-Level Code Execution          *

BIND 9.20.29 Patches 14 Critical DNS, DNSSEC, and DoS Security Vulnerabilities          *

Cisco Secure Firewall Vulnerabilities Enable Remote Code Execution and Other Security Impacts          *

Cisco ISE Authentication Bypass Vulnerability (CVE-2026-76460) Enables Unauthenticated Remote Access          *

APT36 Targets Indian Government and Defense With New Rust Malware          *

Noodle RAT Backdoor Targets Windows and Linux Systems          *

CenterPoint Energy Data Breach Exposes Customer Personal Information          *

VectraRAT Malware-as-a-Service Targets Windows Systems with UAC Bypass and Credential Theft          *

CVE-2026-39919: Critical Ghostscript Flaw Enables Unauthenticated RCE          *

GhostCode Exploits Microsoft Entra Device Enrollment for Post-Revocation Persistence          *

New Apache Superset Flaw Enables Database Data Exposure          *

Critical Security Flaws Expose TP-Link Tapo C200 Cameras to Attackers          *

KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens          *

Google Patches Actively Exploited Zero-Day Vulnerability on Pixel Devices          *

PAPERMILL Malware Campaign Abuses Signed Notepad++ to Deliver VenomRAT to Windows Users          *

Casbaneiro Banking Trojan Campaign Targets Latin American Users          *

BambooToken Malware Uses MQTT for Multi-Platform Command and Control          *

China-Aligned Threat Actors Conceal PeckBirdy C2 in Casino and Adult Websites          *

WSO2 API Manager JWT Authentication Bypass Under Active Exploitation          *

Critical WordPress Events Calendar Vulnerabilities Enable Remote Code Execution          *

Critical WooCommerce Plugin Vulnerability Actively Exploited to Deploy PHP Backdoors          *

Red Heron Weaponizes Gitea RCE Deploying JITTERLY and SIXZUT for Data Theft          *

Linux Kernel ZcopyReaper Vulnerability (CVE-2026-43502) Could Enable Local Privilege Escalation          *

Advanced Cyclops Blink Malware Infiltrates Cisco FMC Devices          *

Nintendo Switch Wireless Pairing Flaw Enables Nearby Code Execution Attacks          *

Cybercriminals Leverage Agentic AI for Automated Exploitation and Credential Theft          *

PuzzleMask Plain-Prose Prompt Injection Bypasses AI Security Gatekeepers          *

Windows Shadow Copies Weaponized for Credential Theft and Ransomware          *

KGUARD DVR Unauthenticated Remote Command Execution Vulnerability          *

Vite Vulnerability CVE-2026-39364 Exploited to Steal Cloud Credentials          *

VLC Media Player Vulnerabilities Could Enable Memory Corruption and Sensitive Data Leakage          *

AsyncRAT Attack Uses Hidden PowerShell, AutoIt and Memory Injection for Stealth          *

AsyncRAT Attack Uses Hidden PowerShell, AutoIt and Memory Injection for Stealth          *

China-Linked Hackers Chain Chrome Zero-Day With Windows Kernel Flaw in Attacks          *

JFrog Artifactory Attack Chain Enables Unauthenticated Token Abuse and Server-Side Code Execution          *

Trezor Users Targeted in Phishing Campaign Following Brevo Data Breach          *

Windows Server RDS Session Freeze Reported After September 2026 Security Updates          *

Microsoft Excel KB5002914 Causes Critical Copy-Paste Functionality Regression          *

Mantax Otax Android Ransomware Spies on Users, Steals OTPs and Encrypts Files          *

Critical Dell OS10 Vulnerabilities Patched: Immediate Upgrade Recommended          *

SloppyRAT Uses ClickFix Tactics to Enable Ransomware Lateral Movement          *

Apple Xcode Integer Underflow Vulnerability Can Cause Memory Disclosure and Build Crashes via Crafted Archives          *

Critical LiteLLM Vulnerabilities Expose AI Gateways to Authentication Bypass and Remote Code Execution          *

Hackers Steal Active Directory Password Hashes Without Directly Attacking Domain Controllers          *

CISA Warns of Active Exploitation of Citrix NetScaler Vulnerability          *

OnePlus Android Flaw Could Enable Session Hijacking and Data Exposure          *

GitLab Critical Vulnerability – CVE-2026-85706          *

Critical Check Point VPN Certificate Vulnerabilities Expose Gateways to Unauthenticated RCE          *

CISA Warns: WatchGuard Firebox RCE Flaw Exploited by Ransomware Gangs          *

LSPromise Attack Chain Enables Full Android Device Compromise          *

Palo Alto Networks PAN-OS Buffer Overflow Vulnerability (CVE-2026-0310) Could Lead to Remote Code Execution          *

Pegasus Spyware Targets Serbian Activists Through Zero-Click iMessage Exploit Ahead of Elections          *

Multiple MongoDB Server Vulnerabilities Could Lead to Authentication Bypass, Denial-of-Service, and Unauthorized Data Access          *

Critical Okta Vulnerabilities Patched Across Multiple Tools          *

Critical Vulnerabilities Impact Siemens Industrial Edge and Siveillance Control          *

OpenAI Develops Defense Factory to Counter AI-Powered Cyber Attacks          *

Veradigm Reports Patient Data Breach Following Ransomware Attack Claim          *

Google CAPTCHA, WebDAV, and BNB Smart Chain Abused by Hackers in Sophisticated Malware Campaign          *

Cisco Secure FMC Authentication Bypass Vulnerability Actively Exploited, Allowing Root Access to Attackers          *

SpyCloud Warns of Growing Enterprise Risk from Exposed API Keys, Tokens and Service Accounts          *

Windows BitLocker Hit by Heap Overflow Vulnerability Allowing Code Execution          *

Gigabud Android Malware Exploits Vwork for App Cloning and Remote Access          *

Critical cPanel Flaw Enables Root Code Execution from Hosting Accounts          *

ChatGPT Vulnerability Could Lead to Gmail Data Theft          *

Hackers Turn Agentic AI into an Automated Engine for Reconnaissance, Exploitation and Credential Harvesting          *

Google Chrome 153 Fixes 230 Security Vulnerabilities Including Actively Exploited Zero-Day          *

Attackers Use AI-Assisted Intrusions and Data Exfiltration to Target Latin American Organizations          *

Unauthenticated Remote Code Execution Vulnerability in Apache Nutch          *

Microsoft Teams Impersonation Campaign Escalates from Endpoint Access to Domain Controllers and Certificate Authorities          *

Microsoft Patch Tuesday Security Advisory – September 2026          *

Jellyfin 12.0 Released With Major Security Fixes for File Access and XSS Flaws          *

New Linux Bot Tengu Hides as Kernel Process and Launches DDoS Attacks          *

Linux Kernel 7.1 Series Reaches End of Life          *

Threat Actors Abuse Trusted Google Services to Deliver Credential-Stealing Phishing Attacks          *

Threat Actors Abuse Trusted Google Services to Deliver Credential-Stealing Phishing Attacks          *

Linux Rootkit Deploys Fileless PHP Web Shells on Compromised F5 BIG-IP Systems          *

Bimbo Bakeries USA Data Breach Linked to Oracle E-Business Suite Zero-Day          *

N-able N-central Pre-Authentication Remote Code Execution Vulnerability (CVE-2026-86218) Enables Critical Remote Server Compromise          *

Threat Actors Leverage Frontier AI Agents for Rapid Enterprise Network Compromise          *

Telerik RadAsyncUpload Vulnerabilities Chained to Enable Remote Code Execution          *

Linux HAProxy Backdoor Used to Target South Korean Organizations          *

MikroTik RouterOS Exploitation Grants Attackers Admin Control          *

10 Actively Exploited Vulnerabilities Added to CISA KEV Catalog          *

Microsoft Project Zenith Creates a Developer-Ready Windows 11 Experience          *

Toy Ghouls Uses HiveMQ and Element Messenger for Windows Backdoors          *

Panzer Ransomware Campaign Targets 16 Victims Across 11 Countries, Combining Data Theft and Encryption          *

Critical PostGREShell Flaw Enables Code Execution Through PostgreSQL Replication Accounts          *

Russian APT28-Linked Hackers Deploy HOOKEDGE Backdoor in Espionage Attacks Across Europe          *

FalconFlank Targets Falcon Sensor’s Office Macro Remediation for Windows LPE          *

TP-Link Archer AX55 Vulnerabilities Enable Remote Code Execution and Admin Password Theft          *

Rogue ScreenConnect Clients Spread Worm-Like Malware Across Connected Windows Systems          *

CERN Plans Migration of 2200 Accelerator Control Systems to Debian 13          *

BraZetsu Malware Transforms Compromised Windows Hosts Into Criminal Marketplace Assets          *

Node.js and ClickFix Abuse Enable Stealthy Malware Deployment While Bypassing Security Controls          *

Coder Registry Infrastructure Compromised to Distribute Malicious Terraform Modules          *

Chrome Zero-Day Vulnerability Exploited in the Wild          *

Ransomware Infrastructure Exposes TukTuk C2 Framework and EDR-Killing Toolset          *

Hugging Face Transformers Vulnerability Allows Malicious Python Modules to Be Cached          *

Authorization Failure in LiteLLM Admin API Opens Path to Full Proxy Compromise          *

Critical Dropbox Lenovo ID Flaw Could Allow Attackers to Hijack Accounts          *

WAGO PLC Pre-Authentication RCE Vulnerability Poses Growing OT Security Risks          *

Sangoma Switchvox Vulnerability Exploited to Deploy Reverse Shells          *

BREEZE COMET Breaches Brazilian Financial Firms to Execute Hundreds of Fraudulent Transactions          *

Chrome Security Update Fixes Critical WebGL and Shared Tab Group Flaws          *

HPE Aruba Networking Fabric Composer Vulnerabilities Pose Critical Risks          *

Critical HPE Fabric Composer Flaws Could Lead to Full System Compromise          *

Critical Langflow and Ruby on Rails Flaws Exploited in Active RCE Attacks          *

Debian 11 End of Security Support Leaves Systems Exposed to Unpatched Vulnerabilities          *

Threat Actors Misuse Faronics Deploy Admin Tool for Unauthorized ScreenConnect Installation          *

Aesto Health Data Breach Exposes Sensitive Information of 9.5 Million Individuals          *

Hackers Hijack BGP to Push Malicious Virtualizor Update          *

Novocure Data Breach Compromises Patient IDs and Employee Information          *

JSCeal Crypto Stealer Uses V8 Bytecode to Steal Browser Credentials and Intercept HTTPS Traffic          *

Mirage Kitten Targets Developers with Malicious Coding Tests          *

PHP Composer Security Flaw Allows Malicious Packages to Access Sensitive Files          *

Cybercriminals Target Kansas ATMs With Jackpotting Malware          *

19 Malicious Chrome and Edge Extensions Deliver Modular Malware for Crypto and Credential Theft          *

Malicious npm Package Attack Targets Developers and Steals Sensitive Credentials          *

CISA Alerts on Actively Exploited PaperCut NG and MF Vulnerabilities          *

Malicious Virtualizor Updates Delivered Through BGP Hijacking Attack          *

D-Link Router Flaws Allow Unauthenticated Attackers to Change Admin Password and Steal Wi-Fi Credentials          *

Chinese Fire Ant Hackers Turn Cisco Routers Into Covert Spying Platforms          *

Aurora Ransomware Group Exploits Cursor AI in Attacks Targeting 10 Organizations          *

Silver Fox Campaign Deploys ValleyRAT Through Trusted Signed Process and Malicious DLL          *

Unitree G1 EDU Flaws Enable Root Code Execution Through Network and Bluetooth Chains          *

TA4922 Deploys PackClient RAT Through Tax-Themed Phishing Campaigns          *

Magecart HexMage Campaign Targets E-Commerce Stores          *

Unpatched Calix Vulnerability Allows Attackers to Bypass NAT and Expose Internal Devices          *

PaperCut Issues Urgent Alert Over Actively Exploited Server Vulnerability          *

Toy Giant Hasbro Discloses Data Breach Affecting Employees          *

Threat Actors Leverage ownCloud WebDAV Flaw in Philippine Nuclear Data Breach          *

Over 8,300 Gitea Servers Exposed to Remote Code Execution Attacks          *

Critical cPanel/WHM Flaw Exposes Servers to Root-Level Compromise          *

TP-Link Kasa Smart Home Devices Vulnerability Allows Attackers to Disrupt Device Functionality          *

CISA Alerts on Active Exploitation of Critical Citrix NetScaler ADC and Gateway Vulnerability          *

Malicious npm Packages Abuse Trusted Mirrors for ClickFix Cloudflare Phishing Attacks          *

Apache Tomcat Vulnerabilities Could Enable Security Control Bypass and Server Crashes          *

CISA Flags Gitea Vulnerability as Actively Exploited in the Wild          *

Tortoiseshell Enhances Espionage Operations with OpenSSH Reverse Tunneling and DLL Side-Loading          *

Critical WatchGuard Agent Vulnerabilities (CVE-2026-57910, CVE-2026-57909) Enable Unauthenticated Remote Code Execution          *

SonicWall NetExtender Linux Client Vulnerabilities Enable Root-Level Arbitrary File Write          *

Hackers Abuse Trusted npm Mirrors to Host Fake Cloudflare ClickFix Pages          *

New CoreRAT RAT Helps Core Werewolf Hackers Control Targeted Windows Machines          *

Critical Microsoft SharePoint Flaws Enable Unauthenticated Remote Code Execution          *

Elementor Pro File Upload Vulnerability (CVE-2026-32475) Enables Unauthenticated Remote Code Execution          *

Apollo Global Management Confirms Third-Party Data Breach Following Cl0p Supply Chain Attack          *

Attackers Exploit Microsoft Teams Trust to Deliver SynkLoader Malware          *

91 Spring CVEs Impact Over 209,000 Software Components Across the Supply Chain          *

ToxNetV2 AI-Assisted Linux Botnet Targets Vulnerable AArch64 Systems          *

Multiple OpenSSL Vulnerabilities Could Enable Remote Server Crashes and Heap Memory Corruption          *

Multiple OpenSSL Vulnerabilities Could Enable Remote Server Crashes and Heap Memory Corruption          *

CISA Red Team Breaches Critical Infrastructure to Expose SOC and Cloud Security Gaps          *

Red Hat Keycloak Account Takeover Vulnerability (CVE-2026-18963)          *

Distributed Traffic Flood Overwhelms Norway’s Shared Digital Infrastructure          *

NVIDIA NemoClaw Vulnerability Enables Malicious Webpages to Poison Local AI Models          *

Fake OpenAI Codex Pages Used to Deliver Malware to Mac Users          *

PavinLoader Campaigns Exploit ClickFix and Fake Downloads to Deliver Amatera Stealer via Blockchain C2          *

Cybercriminals Use Fake GTA 6 Demo to Steal Passwords, Cookies and Browser Data          *

Hackers Exploit Critical Oracle HTTP Server Flaw to Bypass Access Controls          *

Critical TP-Link Vulnerability Threatens Omada Gateways          *

Fake Minecraft Clients Used to Distribute Weedhack Malware Through SEO Poisoning          *

TP-Link Archer C20 v6 Command Injection Vulnerability          *

Ox Alpha Stealth AI Model Emerges With Advanced Coding and Agentic Capabilities          *

Palo Alto GlobalProtect Affected by Five High Risk Security Vulnerabilities          *

Critical miniOrange SAML SSO Flaws Under Active Exploitation Enable WordPress Admin Takeover          *

ReliaQuest Confirms Failed Data-Theft Attack Following ShinyHunters Social Engineering Campaign          *

South Korean Startup Platform Breach Reveals Critical Key Management Security Failures          *

AI-Driven Autonomous Cyberattacks Using DeepSeek and Hermes Agent          *

U.S. Bank Investigates Alleged Data Breach Following LockBit Extortion Claim          *

Agent Tesla Malware Hidden Behind Emojis Steals Browser and Email Credentials          *

Critical Vulnerability in N-able Passportal Extension Enables Unauthorized Password Vault Access          *

New Cryptographic Injection Attack Exposes Grok User Data Through Malicious Webpages and Runtime Decryption          *

UAT-10147 Campaign Targets Windows and Linux Servers with BadIIS Malware          *

New E4del and PINHOLE RATs Delivered Through Malicious FTP Banner Commands          *

Hackers Poison arrayref Rust Crate to Push Infostealer Malware          *

SickKids Data Breach Exposes Employee and Job Applicant Personal Information          *

CVE-2026-59270: Spring Security Vulnerability Allows Unauthorized LDAP Access          *

Supply Chain Attack Hits Popular Rust Crates With Hidden Build Time Malware          *

Critical Forminator Forms Vulnerability Enables Remote Code Execution          *

CVE-2026-69836: Critical Entra ID RCE Flaw Exploited in the Wild          *

Critical Security Flaw in Spring for GraphQL Could Allow Remote Code Execution          *

Windows Hello for Business Key Abuse Enables Persistent Microsoft Entra ID Access          *

CISA Adds Actively Exploited Langflow, Apache Tomcat, and N-able Vulnerabilities to KEV Catalog          *

CRLF Desynchronization Flaw Could Enable HttpOnly Cookie Theft and Account Hijacking          *

MacSync Stealer Uses 30+ Rotating Domains to Steal macOS Credentials and Exfiltrate Data          *

Cisco BroadWorks Vulnerability Enables Unauthorized Access to Sensitive Files          *

ErrTraffic ClickFix Campaign Uses Fake CAPTCHA to Deploy Cruciferra and Disable 145 Security Processes via BYOVD          *

NASA AIT-GUI Critical Security Flaw          *

AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure          *

Zombie Card Flaw Revives Expired Visa Cards for Contactless Payments          *

Pass-the-Passkey Attack Exposes Gaps in Windows WebAuthn and Entra ID Authentication          *

Apple Spyware Threat Notifications Expanded to Users in 110 Countries          *

Microsoft Investigates Windows Update Related Gaming Crashes          *

CyberPanel Pre-Auth RCE Chain Enables Remote Server Access          *

Hackers Exploit AI Agents to Trick Users Into Installing Malware          *

Claude AI Exposes Critical Security Flaws in Multiple SAML Implementations          *

StopAndProtect Uses Nearly 2,000 Compromised WordPress Sites to Spread Malware          *

Remote Spectre Attack Exposes JWT Data from Co Located Cloudflare Workers          *

China-Nexus Campaign Uses VHD Files to Target Myanmar Government and Diplomats with QUICAgent Backdoor          *

CISA Warns of Active Exploitation of Microsoft Internet Key Exchange RCE Vulnerability          *

JWR Phishing-as-a-Service Framework Enables Real-Time Banking and Payment Fraud          *

Trojanized GEEKOM Realtek Ethernet Driver Raises Software Supply-Chain Security Concerns          *

Projextor Campaign Abuses Electron Applications for Hidden Surveillance Capabilities          *

Critical SSRF Vulnerability in MLflow Under Active Exploitation          *

France’s DGFiP Hit by Credential-Based Cyberattack Exposing Data of 678,000 Individuals          *

Docker CopyEscape Vulnerability Allows Host File Overwrite and Code Execution          *

CISA Flags Actively Exploited Ray Vulnerability (CVE-2025-62593) Enabling Browser-Based Remote Code Execution          *

GitLab Patches Critical GraphQL Vulnerabilities Allowing Project Manipulation and CSRF Attacks          *

Operation ASTERIX Uses Vishing and Fake Crypto Wallet Apps to Harvest Seed Phrases          *

C2Looper v2 Abuses GitHub for Command and Control and Payload Delivery          *

Red Hat Patches Critical RHACM Bugs Enabling RCE and Privilege Escalation          *

Critical Forminator Forms Vulnerability Enables Remote Code Execution          *

Misconfigured Microsoft Power Pages Exposes 27 Million Records          *

Unisoc Modem Exploit Escalates From Baseband Code Execution to Kernel Level Privileges          *

Philips and GE Probe Clop Claims of Ransomware-Linked Data Theft          *

MCP Servers and the Growing Threat to Enterprise Secrets          *

Google Apps Script Campaign Targets Crypto Users with Signed Windows Malware          *

SafePal Data Breach Exposes Information of Nearly 40,000 Customers          *

MessiahGPT Unrestricted AI Model Enables Ransomware and Phishing Content Generation          *

ChainDrop Worm Exploits npm Supply Chain to Steal Developer and Cloud Credentials          *

Global Protect Security Flaws Could Lead to System and Root Access          *

macOS Screen Sharing Flaw Enables Remote Root Command Execution          *

Download More RAM Attack Bypasses Windows Security          *

VINclarity Faces Reputation Attack Allegations Over Subscription Claims          *

Novel DRAM Controller Attack Challenges Hardware Security Boundaries in AMD Processors          *

PATCHCORD Campaign Exposes SuperShell C2 Infrastructure for Remote Command Operations          *

Attackers exploit macOS Screen Sharing flaw to mine Monero          *

Malware Crypter Services Enable EDR Evasion and In-Memory Malware Execution          *

DeadLock Ransomware Strengthens Operations with Blockchain-Based Infrastructure          *

ShieldBreak Zero-Day Demonstrates Bypass of Microsoft Defender Patch to Regain SYSTEM Privileges          *

Multiple Vulnerabilities in Microsoft Exchange Server Could Lead to DoS, Privilege Escalation, and RCE          *

Critical Dell VMware vSphere Client Vulnerability          *

Critical Cloud Login Bypass Exposes Mira Hormone Monitor Accounts          *

Apple Threat Notifications Warn of Targeted Mercenary Spyware Attacks          *

Jewelbug Exploits Google Docs to Deliver Antino and Malicious Browser Extensions          *

Trezor Reports Data Breach Impacting Nearly 14,000 Customers          *

Malicious Chrome VPN Extensions Found Intercepting Browser Traffic Through SOCKS5 Proxies          *

SAP Commerce Cloud Vulnerability Enables Unauthenticated Remote Code Execution          *

Kimwolf v7 Android Botnet Emerges With Stealthy HTTP/2 DDoS Attacks          *

Lazarus Exploits Windows Zero-Day (CVE-2026-68820) to Target Defense and Aerospace Organizations          *

CISA Warns of Critical Metabase SQL Injection Vulnerability Enabling Unauthenticated Admin Access          *

City-Forum Hackers Target Salesforce and ServiceNow Instances Worldwide for Data Theft          *

Critical Adobe ColdFusion Vulnerabilities Enable Remote Code Execution, Server Takeover          *

ShieldBreak Windows Defender Zero-Day Bypasses Microsoft Patch          *

Signal Introduces New Security Feature to Block Man-in-the-Middle Attacks          *

Delta Investigates Wi-Fi Disruption Aboard Flight Carrying Hackers          *

Project CAV3RN Abuses Google Apps Script and DNS for Covert C2 Communication          *

Critical Rancher Vulnerability Enables Authenticated Users to Gain Full Administrative Access Across Managed Clusters          *

WindRelay Malware Converts Android Devices into Rogue Payment Terminals for Remote Card Fraud          *

Sandworm Targets IT Professionals with Trojanized WireGuard VPN Client          *

Plug and Pwn Research Reveals Windows PnP Flaws Enabling SYSTEM-Level Code Execution          *

LiteLLM Supply Chain Attack Exposes AI Infrastructure and Credentials Globally          *

Copeland XWEB Pro Vulnerabilities Enable Root-Level Access and Refrigeration System Manipulation          *

Gunra Ransomware Expands Attacks as US and South Korea Issue Alert          *

ClamAV Vulnerabilities Could Allow Remote Attackers to Disrupt Antivirus Scanning          *

Microsoft Patch Tuesday Security Advisory – August 2026          *

DDoS Attacks Exceeding 1 Tbps Surge Fivefold in Q2          *

DeadLock Ransomware Disables Security Defenses and Backups Before File Encryption          *

Android Banking Malware Adopts Dropper-Based Delivery to Evade App-Store Detection          *

Play Ransomware Masquerades as PsExec to Enable Stealthy Lateral Movement          *

Poland Energy Sector Hit by Private APN Cyberattack, Revealing New Threat to Industrial OT Networks          *

Kimsuky Adopts Offline AI to Enhance Cyberattack Operations          *

Levi Strauss Investigates Unauthorized Endpoint Access and Corporate Information Exfiltration          *

Valve Steam Hardware Data Breach Exposes European Customer Information          *

LexisNexis Suspends Services Following Suspicious Server Activity          *

Ransomware Threats Spread Through Multiple Employee Accounts          *

Internet-Exposed PLCs Targeted in Coordinated Attacks on U.S. Water Utilities          *

Kimsuky Expands AI-Assisted Espionage Research Through Local LLMs and Speech Analysis          *

New CSS Attacks Exploit Webmail to Steal Credentials and Authentication Tokens          *

Critical Metabase Flaw Allows Unauthorized Administrative Access          *

Claude Opus 5 Demonstrates Strong Resistance to Indirect Prompt Injection Attacks          *

Fake Zoom Update Campaign Deploys Overlord Remote Access Trojan          *

Atlassian Rovo Can Be Manipulated to Exfiltrate Jira and Confluence Data to Attackers          *

Head Mare Trojanizes TrueConf Client Installers with PhantomCore and PhantomGraph Backdoors          *

SCTPhantom Exploits High Severity Linux Kernel UAF Enabling Root Access and Container Escape          *

Microsoft 365 AiTM Phishing Campaign Hijacks Accounts to Collect Payroll and Finance Emails          *

Cyberattack Disrupts Critical Port Infrastructure Across North Carolina          *

Critical Firmware Backdoor Found Across Multiple Zbtlink Router Models          *

WordPress Pre-Auth XSS (CVE-2026-64638) Could Lead to PHP Code Execution          *

Powercat Java Stealer Targets Gamers Through Malicious Roblox Utility          *

Cloudflare Unveils Open-Source AI Security Platform          *

NTLM Relay Attack Enables Malicious Update Deployment Through Microsoft WSUS          *

Critical Enterprise Java Vulnerabilities Enable Pre-Authentication Remote Code Execution          *

Critical Vulnerabilities in Claude Code, Gemini CLI, and OpenAI Codex Enable AI Agent Hijacking          *

Google Addresses 41 Chrome Vulnerabilities in Latest Security Update          *

Zapscape Vulnerability in KVM Could Allow Privileged L1 Guests to Escape to Linux Hosts          *

Critical WordPress XSS Vulnerability Could Lead to Remote Code Execution          *

Critical ENDLESSDOORS Backdoor in Zbtlink Router Firmware Discovered by VulnCheck          *

CryptoJS RNG Vulnerability Impacts Multiple Wallet Apps and Exposes User Funds          *

Internet-Exposed Rockwell PLCs Increase Cyber Risks for U.S. Water Utilities          *

AWS, Google, and Vercel Patch AI Agent Flaws That Allowed Unauthorized Tool Execution          *

Fraudulent Cloud Trial Abuse Fuels Underground AI Proxy Services          *

Critical Cisco SD-WAN Vulnerabilities Enable Access Control Bypass          *

OpenAI Reveals Autonomous AI Agents Collaborated to Bypass Security Controls During Evaluation          *

Cisco Addresses High-Severity IOS XE Privilege Escalation Vulnerabilities          *

CoreBreak Flaws Expose AI Agent Frameworks to Unauthorized Tool Execution          *

Canadian Cybercriminal Pleads Guilty to Snowflake Customer Data Theft Campaign          *

OVSwrap Privilege Escalation Vulnerability Enables Root Access on Linux Systems          *

Ransom Cartel Ransomware Creator Sentenced to 16 Years in U.S. Prison          *

QuickFox Supply Chain Attack Uses Trojanized Installer to Deploy FDMTP Malware          *

Hackers Exploit Oracle Database to Gain SYSTEM Level Access          *

Paperclip AI Patches Critical Vulnerabilities Enabling Host Command Execution          *

Critical Veeam, Terraform MCP, and Django Vulnerabilities Patched, Including a CVSS 10.0 Cross-Tenant Flaw          *

Malicious npm Packages Use NullReceiver Method to Hide and Retrieve C2 IPs via Blockchain          *

7-Zip Default Configuration Allows Extracted Files to Bypass Windows SmartScreen          *

Multiple Django Vulnerabilities Enable RCE, SSRF, DoS, and XSS Attacks          *

Active Botnet Campaign Targets Router Diagnostic Interfaces for Command Injection          *

Multiple TP-Link Omada ZTP Flaws Expose Enterprise Networks to Remote Attacks          *

Keyv Linked NPM Malware Campaign Targets Developer Credentials          *

Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Authentication Tokens          *

Critical Flowise Vulnerabilities Enable Remote Code Execution and Hijacking of AI Workflows and Servers          *

Fake Xeno Roblox Cheats Deliver Java-Based RAT          *

nvestigation of the Keyv-Linked npm Worm and Malicious VS Code and Claude Code Hooks          *

Google Password Manager Weakness Could Enable Malware to Compromise Passkey-Protected Accounts          *

Malicious npm Packages Target Alibaba Developer Tools with Cross Platform RAT          *

Critical Gitea Arbitrary File Read Vulnerability Exposes Sensitive Repository Data          *

ExfilSquad Breaches UK Police Database, Exposes 100,000+ Records          *

Adobe Campaign Classic Vulnerability (CVE-2026-48331) Poses Critical Security Risk          *

Critical cPanel & WHM Vulnerabilities Enable Privilege Escalation and HTTP Request Smuggling          *

BTMOB Android RAT Exposes the Growing Malware-as-a-Service Economy          *

TP-Link TL-WR940N Router Command Injection Vulnerability (CVE-2023-33538) Enables Mirai Botnet Attacks          *

Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS          *

ESET Highlights the Rise of Malicious AI Skills and Adaptive Malware Threats          *

XCSSET v40 Expands macOS Supply Chain Attacks with Memory-Resident Malware and Browser Hijacking          *

Thermo Fisher Addresses Vulnerability That Threatens Integrity of Digital DNA Evidence          *

PNLD Data Breach Exposes Personal Information of UK Police and Government Personnel          *

Critical N-able N-central Vulnerability Enables Full Administrative Control of MSP Environments          *

Critical Hugging Face Diffusers Flaws Enable Arbitrary Code Execution          *

Coldcard Firmware Vulnerability Enables Theft of $70 Million in Bitcoin          *

Fake Browser Updates on Compromised Hotel Wi-Fi Deliver Surveillance Malware          *

Spear-Phishing Attack on Law Firm Delivers Matryoshka Backdoor via HollowFrame Loader          *

AI Agent Conducts Multi Stage Attack on Hugging Face Infrastructure          *

CRPX0 Ransomware Claims Hyundai Turkey Breach          *

Arch Linux Suspends AUR Package Adoptions Following Malicious Commit Campaign          *

MCBS Data Breach Exposes Personal and Medical Information of 12.6 Million Individuals          *

SplitVPN Data Breach Exposes 865,000 User Accounts and Sensitive Connection Metadata Globally          *

Critical SolarWinds Web Help Desk Vulnerabilities Enable Authentication Bypass and Remote Code Execution          *

Ransomware Killers Abuse Process Overwrite Technique to Disable Security Software          *

Work Panel Vishing Platform Automates Enterprise Account Takeovers          *

Multiple PHP Database Component Vulnerabilities Patched in Security Update          *

JetBrains TeamCity Flaw Exposes CI/CD Servers to Remote Code Execution Attacks          *

Keycloak Vulnerability Allows Restricted Admins to Access Users' Personal Data          *

Backdoored Android TV Boxes Impersonate Phones and Hijack Broadband for Ad Fraud          *

Researchers Uncover 84 Vulnerabilities Across 4G and 5G Core Network Implementations          *

SSH-Based Recon Operation Sets the Stage for Advanced Cyber Intrusion          *

BlackTech Uses BlueShell Linux Backdoor to Target Japanese Organizations          *

Critical Vulnerabilities in Adobe Campaign Classic Expose Systems to Remote Attacks          *

EtherHiding-Backed ClickFix Campaign Exploits Ethereum Smart Contracts Targeting macOS Cryptocurrency Users          *

Linux XMRig Botnet Leverages PAM for Fileless Cryptomining and Persistent System Access          *

Hackers Abuse Microsoft Teams Fake IT Helpdesk Calls to Deploy Chaos Ransomware          *

OpenMatter Calls for a Verification Based Approach to Enterprise AI Security          *

Home Assistant FFmpeg Vulnerability Could Allow Remote Code Execution          *

Google Chrome 151 Fixes 370 Security Vulnerabilities, Including Seven Critical Flaws          *

AtlasRAT Targets Windows Systems Through Advanced Four-Stage Loader Chain          *

Analog Devices Discloses Data Breach Following Cyberattack; Operations Remain Unaffected          *

Hackers Exploit AnySign4PC via Hacked Korean Websites to Install Backdoors          *

Russian Hackers Exploit Exchange OWA Zero-Day for Persistent Mailbox Access          *

Hackers Impersonate IT Helpdesk Staff on Microsoft Teams to Deploy Chaos Ransomware          *

Node.js Security Release Fixes 11 Vulnerabilities Across Multiple Components          *

Copybara RAT Powers Sophisticated N26-Themed Vishing Campaign in Italy          *

Russian Intelligence-Linked Threat Actors Target Signal Backup Recovery Keys for Account Takeover          *

Building Secure AI Systems with Identity and Least Privilege          *

Critical Ruby on Rails Vulnerability Threatens Sensitive Server Data          *

Threat Actor Alleges Revolut Data Breach Impacting 75 Million Customer Records          *

VMware vCenter Authentication Bypass and RCE Vulnerabilities Require Immediate Patching          *

Critical IPMI Weakness Exposes Password Hashes on More Than 24000 Servers          *

Critical Ruflo MCP Bridge Flaw Allows Unauthenticated Remote Code Execution          *

First Documented Autonomous AI Cyberattack Exploits Zero-Day Vulnerabilities to Breach Hugging Face          *

Malicious npm Packages Deploy Cross-Platform RAT Targeting Windows, Linux, and macOS Developers          *

Threat Actors Distribute RAT Components Across Multiple npm Packages to Evade Detection          *

JFrog Artifactory Zero-Day Flaws Exploited by OpenAI Models to Escape a Sandbox          *

Critical Gitea Vulnerability Allows Arbitrary Shell Command Execution Through Diffpatch Remote Code Exploitation          *

Guangdong Chanming Tied to RedRelay Infrastructure Used in Global Cyber Espionage          *

GoGRPC Malware: A New Wave of Pre-Ransomware Intrusion Activity          *

Threat Actors Repurpose Kratos Phishing Techniques to Target Microsoft 365 Users          *

JetBrains TeamCity On-Premises Servers Exposed to Critical Unauthenticated RCE Attack          *

Arista VeloCloud Orchestrator Command Injection Vulnerability (CVE-2026-16812) Under Active Exploitation          *

Nimbus Manticore Deploys NightLedger for Covert Cyber Espionage          *

CastleLoader Campaign Expands with NeedleStealer Malware to Target Cryptocurrency Wallets and Browsers          *

24,000+ Exposed Server BMCs Vulnerable to Password Hash Leakage Through Legacy Flaw          *

Dysphoria IoT Botnet Infects 200,000 Devices Using Blockchain-Backed C2 Infrastructure          *

Bank of Baroda Probes Alleged 1TB Customer Data Leak Linked to Employee Email Breach          *

AI-Discovered Linux Kernel Zero-Day (CVE-2026-31431 “Copy Fail”) Enables Privilege Escalation          *

Windows WalletService Privilege Escalation Vulnerability (CVE-2026-49176) Could Grant SYSTEM-Level Access          *

Multiple libssh2 Vulnerabilities Expose SSH and SFTP Clients to Memory Corruption Attacks          *

LegacyHive Windows User Profile Service Zero-Day Enables Local Privilege Escalation          *

Arista Patches Critical VeloCloud Orchestrator Vulnerability Under Active Exploitation          *

Project COMPASS Aims to Dismantle The Com and Protect Vulnerable Youth          *

Apple Releases iOS 26.6 and iPadOS 26.6 to Fix Critical Kernel and Security Vulnerabilities          *

Coca-Cola Confirms Data Theft in Fairlife Ransomware Attack          *

Vatican Click to Pray API Vulnerability Exposes Sensitive User Information          *

NVIDIA Launches Open Secure AI Alliance and Releases Open-Source NOOA Framework          *

Operation BlueDash Targets Users with Fake Microsoft Teams Update to Install RMM Malware          *

TELESHIM Malware Abuses Telegram for C2 in Targeted Attacks Against Middle East Government Entities          *

Malvertising Campaign Uses Browser to Build Malware and Evade Detection          *

Anthropic Launches Claude Opus 5 on AWS with Enhanced Cybersecurity Features          *

Critical n8n Sandbox Escape Enables Authenticated Remote Code Execution          *

Cruciferra Crypter Employs BYOVD and Process Ghosting to Bypass Security Controls          *

Cyber Threat Alert: Rise of Violent Crypto Wrench Attacks          *

Critical vBulletin RCE Vulnerability Enables Unauthenticated Server Takeover          *

Fake Windows Application Websites Pose Malware Distribution Risk          *

SourTrade Malvertising Campaign Uses Browser-Based Malware Assembly to Evade Detection          *

Public GitLab RCE PoC Enables Authenticated Users to Execute Commands as Git          *

Command Injection Through Malicious SVG Files in Bing Image Search          *

DevMan Ransomware-as-a-Service Enhances Affiliate Operations          *

Cl0p Exploits Critical PTC Windchill Flaw to Deploy JSP Web Shells          *

Unpatched Fastjson 1.x RCE Flaw Actively Exploited in Ongoing Attacks          *

CTM360 Reveals Insurance Sector Targeted by AI-Powered Phishing and Brand Impersonation Campaigns          *

Certighost Vulnerability Allows Low-Privilege Active Directory Users to Impersonate Domain Controllers          *

New Remote Access Malware SectopRAT Threatens Personal and Corporate Data Security          *

China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks          *

Lampion Malware Targets Portuguese Users With Multistage Phishing and 750MB RAT Payload          *

Foxit PDF Reader Vulnerability Enables SYSTEM Privilege Escalation via DLL Sideloading          *

Dolphin X Malware Automates High-Value Target Identification Using AI          *

Chrome 150 Update Addresses Four High-Severity Security Vulnerabilities          *

Microsoft 365 Accounts Targeted Through Hotel Wi-Fi DNS Hijacking Campaign          *

Clop Ransomware Targets PTC Windchill & FlexPLM Through Critical RCE Vulnerability (CVE-2026-12569)          *

Google Introduces Selfie Video Verification for Secure Account Recovery          *

Synthetic Identity Fraud Emerges as a Growing Threat to Machine Identities          *

Check Point SmartConsole Authentication Bypass Vulnerability          *

Origin Energy Confirms Customer Data Breach          *

Kimi K3 AI Agent Discovers Multiple Redis Remote Code Execution Vulnerabilities in 27 Minutes          *

msaRAT Abuses Chrome and Edge to Conceal C2 Traffic          *

Claude Cowork VM Escape Vulnerability Exposes macOS Files          *

Critical Linux Kernel Flaw RefluXFS Enables Root Privilege Escalation          *

Chick-fil-A Data Breach Exposes Loyalty Account Information Through Credential Stuffing Campaign          *

Ubuntu snap-confine Security Flaw Allows Privilege Escalation to Root via Sandbox Race Condition          *

Critical Windmill Security Flaw Under Active Attack Worldwide          *

Meta Patches Critical Access Control Flaw Exposing Customer Support Data          *

Adobe Acrobat Chrome Extension Vulnerability Could Expose WhatsApp Web Data          *

SEO Poisoning Campaign Uses Fake ManageEngine Download to Deploy Akira Ransomware          *

Apple Patches Hide My Email Flaw That Revealed Users' Actual Email Addresses          *

Microsoft Defender XDR Detection Gap Enables Public C2 Traffic to Bypass Query Visibility          *

OpenAI AI Model Sandbox Escape Incident Targets Hugging Face During Internal Cybersecurity Evaluation          *

AWS Kiro Flaw Bypasses Approval Controls, Enabling Arbitrary Code Execution          *

Daxin Malware Resurfaces with Stupig Backdoor          *

Invisible Screen Text Can Hijack Android AI Agents and Execute Commands on Host PCs          *

Zimbra SNMP Command Injection Vulnerability Enables Unauthenticated Remote Command Execution          *

SolarWinds Serv-U Update Fixes 15 Critical Vulnerabilities          *

Trojanized Newtonsoft.Json Fork Delivers Malware Through Malicious NuGet Package          *

Bit2Watt Exploring GPU Workloads as a Potential Threat to Power Grid Stability          *

Amatera Stealer Campaign Uses Ethereum Smart Contracts to Conceal C2 Infrastructure          *

CAV3RN Malware Leverages Outlook Calendar for Stealthy Cloud Based Command and Control          *

Critical SharePoint Remote Code Execution Vulnerability (CVE-2026-50522) Under Active Exploitation          *

Craneware Confirms Data Breach Impacting Employees and U.S. Healthcare Clients          *

Critical PAN-OS Authentication Bypass Enables Qilin Ransomware Attacks          *

Critical Gitea Flaw Allows Unauthorized Triggering of Actions Workflows          *

AgentBaiting Leverages Fake AI Skills and MCP Servers to Spread SmartLoader and StealC Malware          *

SonicWall SMA Appliances Targeted in Zero-Day Attacks Enabling Root Access          *

Iran-Linked APT42 Combines AI, Cloud Abuse, and TAMECAT for Advanced Cyber Espionage          *

AsyncAPI Supply Chain Compromise via GitHub Actions Impacts Trusted npm Packages          *

OneDrive Desktop Sync Support to End for Legacy Windows 10 Systems          *

The Exposure Window Measuring Cyber Risk Beyond CVE Counts          *

Estee Lauder Reports Data Breach Linked to Oracle E-Business Suite Vulnerability          *

Sandbox Escape Vulnerabilities in AI Coding Assistants          *

SleeperGem Campaign Uses Malicious RubyGems Packages to Target Developers          *

FakeGit Attack Campaign Abuses AI Skills and MCP Servers to Spread SmartLoader          *

Windows PCs Receive Unwanted LG Companion App With McAfee Promotions          *

HollowByte Vulnerability Impacts OpenSSL-Based Services          *

HOLLOWGRAPH Malware Hides C2 and Stolen Data Using Microsoft Graph          *

TELEPUZ Malware Uses WebInjector to Steal Cookies and Manipulate Banking Transactions          *

Russian Intelligence Exploits IP Cameras to Monitor Military Logistics in NATO Countries and Ukraine          *

Kimai Docker Vulnerability Could Enable Account Takeover Through Predictable Application Secret          *

AnyDesk Zero-Day Vulnerability (CVE-2026-15682) Allows Local Denial-of-Service Attacks          *

Kimai Docker Image Flaw Allows Account Takeover Through Default APP_SECRET          *

Hugging Face AI-Driven Infrastructure Breach Highlights Emerging Autonomous Cyber Threats          *

EY Data Breach Linked to Third-Party IT Support Provider Exposes Tax Documents          *

The Evolving Role of Residential Proxies in Modern Carding Operations          *

Abbott Investigates Dual Cybersecurity Incidents Following Extortion Claims          *

Critical WordPress Core "wp2shell" Remote Code Execution Vulnerabilities          *

Threat Actors Exploit ViPNet Software to Target Russian Government Organizations          *

Microsoft Reports Surge in ACR Stealer Campaigns Targeting Enterprise Environments          *

OpenSSL Vulnerability Exposes Servers to Remote Denial-of-Service Attacks          *

PolinRider Supply Chain Attack Targets Developers Through Malicious Open-Source Packages          *

Attackers Exploit Font File Format to Deploy Fileless Malware and RAT Payloads          *

GoSerpent Cyber Espionage Campaign          *

Ernst & Young Reports Data Breach Following Support System Compromise          *

LegacyHive Zero-Day Enables Windows Privilege Escalation via Administrator Registry Hijacking          *

SharePoint RCE Zero-Day CVE-2026-58644 Added to CISA KEV Catalog          *

CISA Warns of Active Exploitation of Critical SharePoint RCE Zero-Day          *

GoSerpent Secretly Collects Government Files Before Transferring Them to Hackers          *

Critical Splunk Enterprise Security Flaws Could Lead to Credential Exposure and Arbitrary SPL Execution          *

Hackers Exploit SonicWall SMA1000 Zero-Day Vulnerabilities in Active Attacks          *

Next.js Schedules July Security Release for High- and Medium-Severity Flaws          *

Critical Zoom Workplace Vulnerability          *

Dutch Police and Europol Dismantle International Investment Fraud Network          *

OpenAI Launches GPT-Red AI Model for Automated Prompt Injection Testing          *

New AI Penetration Testing Framework Targets Prompt Injection and Behavioral Objective Violations          *

Critical AWS IoT Core MQTT Authorization Flaw Enables Remote Code Execution on Shark Robot Vacuums          *

New Spirals Ransomware Encrypts Victim Network in Under 24 Hours          *

TELEPUZ Malware Exploits ClickFix to Steal Data and Execute Remote Commands          *

Microsoft 365 Users Targeted by Kratos Phishing-as-a-Service Campaign          *

JetBrains Patches Critical Vulnerabilities Impacting Software Development Infrastructure          *

F5 Fixes Three NGINX Vulnerabilities, Including Two Critical Remote Code Execution Flaws          *

ClickLock Stealer Targets macOS Users Through Social Engineering and Credential Theft          *

Critical TP-Link Kasa Camera Flaw Enables Potential MITM Attacks          *

LabubaRAT Uses Fake NVIDIA Components to Establish Persistent Access on Windows          *

Critical Vulnerabilities in Dell PowerProtect Data Domain Enable Remote System Compromise          *

OkoBot Malware Uses ClickFix and SeedHunter to Steal Ledger and Trezor Seed Phrases          *

Fortinet Fixes Seven Security Vulnerabilities Across Enterprise Products          *

Cursor AI Editor Vulnerability Exploited Through Malicious Git Repositories          *

Cursor Windows Code Execution Vulnerability Allows Malicious Cloned Repositories to Execute Arbitrary Code          *

Critical Supply Chain Attack: Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware          *

Threat Actors Abuse Gemini CLI to Rapidly Deploy and Manage C2 Botnet Infrastructure          *

Socket Uncovers 11 Malicious NuGet Packages Spreading Pepesoft Malware via Fake Game Tools          *

FaceTime Impersonation Scams Target Apple Users Through Account and Security Lures          *

Microsoft Patch Tuesday Security Advisory – July 2026          *

ServiceNow Patches Critical Sandbox Escape Flaw in AI Platform          *

Pro-Iran Hacktivist Groups Intensify DDoS and Hack-and-Leak Campaigns Against Critical Infrastructure          *

NSA Warns of Russian State-Sponsored Attacks Targeting Network Routers          *

xAI Grok Build CLI Automatically Uploaded Entire Git Repositories          *

Miasma v3 RAT Campaign Targets Developers Through Compromised npm Packages          *

LastPass and Bitwarden Users Targeted by Fake Security Alert Phishing Campaign          *

Attackers Distribute Password Attacks Across Thousands of IP Addresses to Evade Detection          *

Crypto Wallet Extensions Enable Cross-Site Address Tracking Without Exploiting Software Bugs          *

Massive Phishing Campaign Targets Turkish Banks Using 8,400 Malicious Domains          *

WinFsp Race Condition Vulnerability Enables SYSTEM-Level Privilege Escalation on Windows          *

ANY.RUN Integrates Threat Intelligence with Interactive Sandbox to Improve Malware Analysis          *

Software Supply Chain Attack Leverages 148 Fake npm Packages          *

ModHeader Extension Exposed Hidden Data Collection Threat Impacts 1.6 Million Users          *

CrashStealer macOS Malware Uses Sophisticated Evasion Techniques to Steal Sensitive Data          *

WinFsp Race Condition Vulnerability Enables SYSTEM-Level Privilege Escalation on Windows          *

Cyberattack on Nihon Kotsu Impacts Taxi Operations Across Japan          *

Threat Actors Exploit Salesforce OAuth to Steal CRM Data          *

Operation Capsule Vault: Malware Delivery Through Disguised PDF and ISO Files          *

Critical Zimbra Web Client XSS Vulnerability          *

Balochistan Police Portal Compromised in Coordinated Cyber Espionage Operation          *

AI Assisted Intrusion Uses PowerShell Automation to Enumerate Active Directory Environments          *

MemGhost Attack Enables Persistent False Memory Injection in AI Agents Through a Single Email          *

CISA Warns of Actively Exploited RCE Flaws in Joomla Extensions (CVE-2026-48939 & CVE-2026-56291)          *

RedHook Android Malware Abuses Wireless ADB for Shell Access          *

RabbitMQ OAuth Vulnerability Lets Attackers Access Messages, Queues, and User Data          *

Lidl Discloses Customer Data Breach After Vendor Compromise          *

WordPress OAuth SSO Plugin Affected by Critical Bug Enabling Unauthorized Administrator Access          *

Jscrambler npm Supply Chain Attack Enables Cloud Credential Theft          *

Researchers Unveil VEXAIoT Framework for AI-Driven IoT Vulnerability Exploitation          *

APT-C-60 Leverages Proton Drive and Trusted Platforms to Deliver SpyGlace Malware Campaign          *

iCagenda (CVE-2026-48939) and Balbooa Forms (CVE-2026-56291) Vulnerabilities Actively Exploited; CISA Issues Urgent Warning          *

Critical GNU Guix Vulnerabilities Expose Systems to Remote and Local Attacks          *

Zimbra Releases Security Patch for Stored XSS Vulnerability          *

Linux FUSE Kernel Vulnerability          *

Windows Trojan Targets Visual Studio Projects to Spread Multi-Stage Malware          *

Forg365 Enables MFA Bypass and Persistent Microsoft 365 Access          *

AWS GovCloud Credentials Exposed in Public Repository Prompt CISA Security Review          *

Dell BIOS Vulnerability Allows Plaintext Password Extraction Without Brute-Force Attacks          *

Progress ShareFile Storage Zone Controller Under Credible External Threat          *

China Linked Silver Fox Expands Arsenal With Rust Based MODBEACON RAT Using Advanced C2 Framework          *

Critical XSS Flaw Discovered in Zimbra Web Client          *

MODBEACON RAT Employs gRPC Streaming for Encrypted Command-and-Control Communications          *

Critical Gitea Docker Flaw Enables Authentication Bypass Attacks          *

npm 12 Disables Install Scripts by Default to Strengthen Supply Chain Security          *

GigaWiper Windows Backdoor Combines Disk Wiping, Fake Ransomware, and Spyware Capabilities          *

AI Security Agents Vulnerable to Manipulation That Triggers Malicious Code Execution          *

Fake Apps Fuel Proxy Botnet          *

Dormant GitHub Accounts Used for Corporate Reconnaissance          *

Microsoft Patches RoguePlanet Vulnerability Enabling SYSTEM-Level Privilege Escalation          *

Meta AI Image Tool Allows Reuse of Public Instagram Photos          *

GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses          *

HP Linux Imaging and Printing Software Vulnerabilities (CVE-2026-8631 & CVE-2026-8632) Enable Privilege Escalation and Arbitrary Code Execution          *

AssuranceAmerica Data Breach Exposes Data of 6.9 Million Drivers          *

UNC6692 Uses SNOW Malware Ecosystem for Multi-Channel Enterprise Intrusions          *

GoodPersonRAT Malware Delivered via Fake LetsVPN Installer          *

Everest Ransomware Expands Double-Extortion Operations with Advanced Encryption and Defense Evasion          *

Google Patches 27 Chrome Vulnerabilities, Including Two Critical RCE Flaws          *

CISA Flags Adobe ColdFusion Vulnerability as Actively Exploited          *

APT-C-20 Uses Malicious PNG Images to Deploy Fileless C# Backdoor          *

Banana RAT Campaign Uses Dynamic Payload Generation to Evade Detection          *

New ClickFix Campaign Targets Banking Users with Multi Stage Malware          *

Sophisticated Tax Phishing Campaign Targets Indian Users with Dual RATs          *

PromptSpy Android Spyware Uses Google Gemini to Evade Detection          *

Microsoft Edge Remote Code Execution Vulnerability          *

KDDI Data Breach Exposes Over 12 Million Customer Email Addresses and 7.6 Million Passwords          *

Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS          *

HalluSquatting Attack Exploits AI Coding Assistants to Deploy Botnet Malware          *

AI-as-a-Service Botnet Routes Malicious Workloads Across Compromised Windows and Linux Hosts          *

CrowdStrike Expands AI Prompt Injection Taxonomy with 18 New Attack Methods          *

SindriKit 1.3.0 Introduces Dynamic Call Stack Spoofing for Advanced EDR Evasion          *

Critical Google Cloud AI Vulnerability Allowed Stealthy Chatbot Hijacking          *

GitLost Vulnerability Enables Attackers to Manipulate GitHub AI Agents and Expose Private Repositories          *

Accenture Reports Isolated Security Breach Amid Claims of Stolen Source Code          *

Targeted Spear-Phishing Campaign Uses AnyDesk for Persistent Remote Access and Data Exfiltration          *

BeyondTrust Patches Multiple Critical Vulnerabilities Allowing Remote Access Control Bypass          *

Public GitHub Issue Exploits Agentic Workflows to Expose Private Repository Data          *

RedWing Android Malware Sold as Telegram Banking Fraud Service          *

Flipper Zero Firmware Development Continues with Community Support          *

GitHub Actions Attack Pattern Exposes Hidden CI/CD Supply Chain Risks Beyond Traditional Security Scanners          *

New PHP PDO Security Flaw Exposes Applications to SQL Injection Attacks          *

Cavern Manticore Abuses SysAid RMM and WinDirStat DLL Sideloading to Deploy Modular .NET C2 Framework          *

Critical Roundcube Flaws Enable Credential Theft, Remote Code Execution, and VShell Deployment Worldwide          *

SilverFox Campaign Uses ValleyRAT With Rootkit Capabilities          *

Multiple IBM WebSphere Vulnerabilities Expose Systems to XSS and Path Traversal Attacks          *

Januscape 16-Year-Old Linux KVM Vulnerability Enables Guest-to-Host Escape          *

AI-Assisted Research Reveals High-Risk Vulnerabilities in FatFs          *

Microsoft Device Code Authentication Flow Abused to Hijack Enterprise Accounts          *

SkillCloak Technique Enables High Rate Evasion of AI Agent Skill Static Detection Systems          *

China-Linked Hackers Target Indian Taxpayers with Fake Tax Filing Utility to Deploy DcRAT          *

JadePuffer Ransomware Uses AI Agent to Automate the Entire Attack Chain          *

Emerging QuimaRAT MaaS Delivers Cross-Platform Malware via Java          *

TrojPix Research Demonstrates High-Speed Data Theft from Air-Gapped Systems          *

Opera GX Auto-Install Mods Vulnerability Enables Cross-Site Data Theft          *

Alibaba Blocks Claude Code After Alleged Detection Logic Flags System-Level Environment Profiling          *

Critical Vulnerabilities Patched in IBM WebSphere Products          *

ModSecurity Flaws Allow WAF Rule Evasion via Crafted HTTP Requests          *

Critical Fast-MCP-Telegram Vulnerability (CVE-2026-52830) Enables Session Authentication Bypass          *

Gentlemen Go-Based RaaS Employs Curve25519 Encryption and Multi-Vector Network Propagation Techniques          *

BusySnake Stealer and the Evolving Tactics of Armored Likho          *

Fake Google and Cloudflare Verification Pages Used to Distribute StealC, HijackLoader, and NetSupport Malware          *

Critical Security Flaws Identified in FatFs Filesystem Library          *

Advanced TimbreStealer Malware Uses Large Malicious DLLs to Evade Detection          *

Avalon Malware Framework Deploys CrownX Ransomware Through Fileless Attack Chain          *

Fake Google Play Store Pages Used to Distribute SpyNote Android Malware          *

Hackers Exploit Fake API Documentation to Trick AI Agents into Sending Cryptocurrency Payments          *

FBI Warns of TeamPCP's Trojanized Updates Targeting Cloud Tokens, SSH Keys, and Kubernetes Secrets          *

Anthropic Introduces Cyber Jailbreak Severity Framework          *

Pegasus Spyware Compromises European Parliament Member Investigating Spyware Abuse          *

Pegasus Spyware Compromises European Parliament Member Investigating Spyware Abuse          *

Exploitation of the CitrixBleed Vulnerability Within 24 Hours of Disclosure          *

PureLog Stealer Campaign Targets Windows Users Through Multi-Stage Malware Delivery          *

Microsoft Exchange SSRF Vulnerability Enables Arbitrary File Access          *

AsyncRAT Attack Uses Cloud-Based Services to Bypass Security Defenses          *

Critical WatchGuard Firebox OS Vulnerabilities Allow Integrity Check Bypass and Arbitrary Code Execution          *

HSIN Cyber Breach Impacts DHS Inter-Agency Information Sharing Coordination Platform          *

ChatGPT File Download Logic Flaw Leads to Local File Inclusion Risk          *

ToddyCat-Linked Umbrij Malware Abuses OAuth to Compromise Gmail Accounts via Google API          *

Medtronic Notifies Customers After ShinyHunters Data Breach          *

Opera Introduces Paste Protect to Block Clipboard Hijacking and Command Injection Attacks          *

JADEPUFFER Demonstrates Agentic AI-Driven Ransomware Through Autonomous Multi-Stage Attacks          *

RedLine Stealer Infrastructure Linked to Targeted Maritime Phishing and BEC Campaign          *

81 Million Login Attempts LSHIY LLC IPv6 Credential Spray Targets Microsoft 365 Campaign          *

ChocoPoC Malware Campaign Abuses GitHub PoC Repositories to Deliver Python RAT          *

Fake Google Notes Extension Hijacks Cryptocurrency Wallet Addresses          *

Shadow Token via Remote Debug: ToddyCat's Advanced OAuth Attack          *

MacSync Stealer Hijacks macOS via Fake Claude Code Google Ads          *

Ousaban Banking Trojan Uses Fake PDF Lures to Target Spain and Portugal          *

Critical Cursor AI Vulnerabilities Enable Prompt Injection and Command Execution          *

BioShocking Attack Exploits AI Browsers Through Hidden Prompt Injection          *

SystemBC Malware: The Silent Backdoor Behind Major Ransomware Attacks          *

BumbleBee and AdaptixC2 Deliver Akira Ransomware Through Bing SEO Poisoning          *

Malicious Chromium Extension Impersonates Perplexity AI to Hijack Browser Searches          *

Multiple AirDrop and Quick Share Vulnerabilities Expose Apple, Samsung, and Google Devices to Wireless Attacks          *

Boss Scam Campaign Uses DLL Sideloading to Hijack WhatsApp Sessions          *

New Mustang Panda Campaign Targets Indian Government and Energy Organizations with Advanced Malware          *

Japan Hospitality Industry Faces TONResolver RAT Phishing Attack          *

Progress Kemp LoadMaster Vulnerability Allows Unauthenticated Root-Level Remote Code Execution          *

Kali Linux 2026.2 Introduces Faster VM Boot and Nine New Security Tools          *

Critical Oracle PeopleSoft Flaw Enables ShinyHunters' Global Campaign Exposing Nissan Employee Data          *

Oracle E-Business Suite Flaw Actively Exploited          *

Mistic Backdoor Exploits DLL Sideloading to Blend into Microsoft Endpoint Processes          *

Critical Splunk Secure Gateway Vulnerability Enables Arbitrary Code Execution          *

Malicious Chromium Extension Spoofs Perplexity AI to Steal User Data          *

Critical Hoppscotch Vulnerability Exposes Self Hosted Instances to Account Takeover          *

Browser-Based Analysis of EvilTokens Phishing Campaigns          *

CVE-2026-46817 – Critical Oracle E-Business Suite File Transmission Vulnerability Actively Exploited          *

STOCKSTAY Malware Employs Encrypted WebSocket C2 and Modular Components for Covert Cyber Espionage          *

Infoblox Tracks Expanding DCloud Uni App Scam Ecosystem Targeting Crypto Users Worldwide          *

Gamaredon Intensifies Cyberattacks on Ukraine with New Malware and Cloud-Based Techniques          *

Critical SimpleHelp Vulnerability Exploited to Deploy Cross-Platform Djinn Stealer          *

Mustang Panda Abuses Zoho WorkDrive for Stealthy Cyber Espionage          *

UNC1151 Conducts Gmail Phishing Attack Against Belarusian Politician          *

INC Ransomware Claims Over 830 Victims Since 2023, Expands as a Major RaaS Threat          *

Millenium RAT Updated with Native C++ for Improved Stealth          *

Windows Injection Technique Hijacks Win32k Shared Memory to Evade EDR Detection          *

KDDI Discloses ISP Email System Data Breach Affecting Up to 14.22 Million Accounts          *

Critical Vulnerabilities in Dell Wyse Management Suite Could Enable Enterprise Server Compromise          *

New Bluekit Phishing Platform Targets Microsoft 365 Accounts          *

Host-Level Code Execution Vulnerability Discovered in Google Gemini CLI          *

Threat Actors Exploit DCloud Uni-App Framework to Power Large-Scale Scam Infrastructure          *

Zhipu AI Vulnerability Detection Tool Exposes Risks in AI-Generated Code          *

Mitigating Bucket Hijacking Risks in Multi-Cloud Environments          *

New Miasma Malware Wave Targets Developer Workflows Through npm Packages and CICD Systems          *

Amazon Q Developer Workspace Trust Vulnerability (CVE-2026-12957) Enables Arbitrary Code Execution via Malicious MCP Configurations          *

Microsoft Warns of Photo ZIP Phishing Campaign Delivering Node.js Malware to Hotels          *

DirtyClone Linux Kernel Flaw Enables Local Privilege Escalation          *

Critical Linux Kernel Flaw Enables Root Access Through Cached Binary Poisoning          *

OpenAI Reportedly Adopts Controlled GPT-5.6 Rollout Amid U.S. Security Review          *

CISA Adds Cisco Unified CM Vulnerabilities to Known Exploited Vulnerabilities (KEV) Catalog          *

KuinaExtractor Rust-Based Infostealer Rebrands as k0to with Advanced Stealth Capabilities          *

CL-STA-1062 Deploys TinyRCT Backdoor in Southeast Asia Targeting Government and Energy Sectors          *

LoaderClient Malware Campaign Exploits Malicious Minecraft Mods to Deploy WeedHack Stealer          *

Advanced AWS Phishing Kit Bypasses MFA with Real-Time Credential Theft          *

LokiBot Malware Uses API Hashing to Evade Detection and Steal Credentials          *

Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability          *

Critical AD360 Authentication Flaw Enables Unauthorized Account Access          *

New Gaslight macOS Malware Uses Prompt Injection to Mislead AI Analysis Tools          *

Android Malware Campaign Uses Trojanized Document Reader App to Deploy Anatsa Banking Malware Payload          *

Microsoft Teams Phishing Campaign Delivers Legitimately Signed Remote Access Tool          *

Malicious Microsoft Edge Extension Enables Full Endpoint Compromise          *

ModeloRAT and Mistic Backdoor Linked to Initial Access Broker Operations Supporting Ransomware Attacks          *

Fake Document Reader App Used to Deploy SpyNote Android Malware          *

Tata Electronics Confirms Cyberattack Amid Alleged Data Leak          *

In-Browser Data Inspection Enhances Detection and Analysis of Phishing Attack Activity          *

Bajaj Auto Confirms Ransomware Attack Impacting Internal IT Infrastructure          *

Dropping Elephant Targets Organizations with China-Themed Lures and In-Memory Malware          *

Eight-Year-Old Security Flaw Discovered in Samsung KNOX Framework          *

Dify and Tap Flaws Expose AI Application Data and Backend Services          *

LG and Samsung Smart TV Apps Exposed for Monetizing User IP Addresses Through Proxy SDKs          *

WhatsApp Malware Campaign Uses Fake Documents to Install ManageEngine RMM          *

Cordyceps Supply Chain Vulnerability Exposes Organizations to Widespread Risk          *

OpenAI Leverages GPT-5.5-Cyber to Support Proactive Vulnerability Mitigation          *

Researchers Uncover WhatsApp-Based Malware Campaign          *

Critical Vulnerability in libssh2 Allows Remote Code Execution Through Malicious SSH Packets          *

FBI Warns Cybercriminals Exploiting TDS Infrastructure for Phishing, Malware, Ransomware          *

PixelSmash FFmpeg Vulnerability (CVE-2026-35033) Enables Remote Code Execution via Malicious Video Files          *

FlutterShell Malware Uses Flutter Framework to Evade Traditional macOS Detection          *

Malicious npm Package Impersonates PostCSS Utility to Deploy Multi-Stage Windows RAT via PowerShell Payload          *

Klue Supply Chain Attack Impacts Cybersecurity Firms          *

Windows RAT Uses Encrypted HTTP C2 Communications to Evade Detection          *

OXLOADER Malware Campaign Exploits Search Engine Ads to Infect Users          *

Threat Actors Deploy FortigateSniffer Malware to Harvest Credentials from Compromised FortiGate Firewalls          *

Critical Squidbleed Vulnerability in Squid Proxy Enables Sensitive Data Exposure          *

Malicious GST Debit Note Phishing Campaign Deploying Remcos RAT          *

Attackers Exploit Outlook Groups and Calendar Reminders to Increase Phishing Success Rates          *

ClawHub Scope Squatting Campaign Distributes Malicious npm Packages          *

Microsoft 365 Sensitivity Labels Prevent AI Content Analysis in Office Applications          *

Steganographic Loader Deploys Remcos RAT Through Hidden Malware Delivery          *

QNAP Patches 14 Critical Vulnerabilities Across NAS and Surveillance Platforms          *

Malicious GitHub Repository Network Delivers Trojanized Files Through 10,000 Fake Projects          *

SQL Injection Security Vulnerability Discovered in Apache Doris          *

North Korean Sapphire Sleet Targets Developers Through Malicious npm Supply Chain Attack          *

Prinz Eugen Ransomware Prioritizes Recently Modified Files to Maximize Business Disruption          *

Canada’s First Court-Approved CSIS Botnet Takedown Against Foreign IoT Router Networks          *

Thousands of D-Link Routers Worldwide Infected by AryStinger Botnet          *

Beats Studio Buds Vulnerability Could Expose Audio During Bluetooth Pairing          *

GentleKiller Ransomware Employs BYOVD to Neutralize Endpoint Security Solutions          *

FortiBleed Attack Exploits Fortinet Devices for Large-Scale Credential Harvesting          *

Critical Chrome Extension Vulnerabilities Expose Millions of Users          *

Security Analysis of AutoJack in Microsoft AutoGen Studio          *

CISA Adds Actively Exploited LiteSpeed cPanel Plugin Vulnerability to KEV Catalog          *

Over 1 Million WordPress Sites at Risk Due to Critical Avada Builder File Deletion Vulnerability          *

New Crypto Clipper Malware Exploits Windows Script Host and ActiveXObject for Remote Code Execution          *

Gentlemen Ransomware Uses EDR-Killer Tools to Disable Security Defenses          *

Nintendo Confirms Employee Data Exposure Following TinyPulse Cyberattack          *

Attackers Could Abuse SQL Server 2025 AI Features for Data Exfiltration          *

UEFI Secure Boot Trust Model Weakness Exposes Systems to Pre-Boot Compromise          *

SmartApeSG Abuses Okendo Component in Large-Scale E-Commerce Attack          *

Node.js Patches Dozen Security Flaws Including DoS and Authentication Bypass Issues          *

IBM X-Force Maps the Shared Ecosystem Behind Interlock and Rhysida          *

HazyBeacon Malware Abuses AWS Lambda Function URLs for Stealthy Command-and-Control Operations          *

Showboat malware Linux framework evades detection using Pastebin code targeting telecoms          *

Attackers Exploit Fake Software Updates to Compromise macOS Systems          *

F5 Patches Critical NGINX Vulnerability Enabling Remote Code Execution and Denial-of-Service Attacks          *

Cisco Warns of Severe ISE Vulnerabilities Affecting Network Access Control Systems          *

Klue Integration Abused to Exfiltrate Salesforce Data          *

New usbliter8 Exploit Targets Apple SoCs, Allowing Hardware Level Security Bypass          *

Windows Systems Targeted Through Microsoft Fondue.exe Side-Loading Technique          *

Crypto-Stealing Rust Malware Spreads Through Fraudulent GitHub Projects and Fake Trust Signals          *

Mozilla Addresses Multiple Critical Vulnerabilities in Firefox 152          *

Brazilian Banking Users Targeted in New SmartRAT Malware Attack Using ClickFix Tactics          *

China-Themed Loader Chain Delivers Multi-Stage Malware Through Decoy Documents          *

Microsoft Uncovers Windows Clipper Malware Campaign Leveraging USB LNK Worm and Tor-Based C2          *

WordPress POST SMTP Plugin Vulnerability (CVE-2023-6875) Exposes 300,000+ Websites to Account Takeover Risks          *

Splunk Patches Critical AI Toolkit Vulnerability Leading to Arbitrary Command Execution          *

FortiBleed Campaign Exposes Fortinet VPN Credentials          *

AI-Generated YouTube Narrators Spread Rust-Based Crypto Clipboard Hijacker          *

Critical OpenBSD Vulnerability Enables Complete PAP Authentication Bypass After 27 Years          *

GitBait Campaign Abuses GitHub Pages for Financial Sector Phishing Attacks          *

ClickFix Attack Deploys Potemkin Loader, RMMProject RAT, and EtherRAT Across 11 Hosts          *

Google Cloud Vertex AI Double Agent Vulnerability Enables Sensitive Data Access          *

Kodak confirms data breach claimed by ShinyHunters extortion gang          *

Sapphire Sleet Deploys Multi-Stage macOS Malware via curl-to-osascript Execution Chain          *

Malicious JetBrains Marketplace Plugins Steal AI API Keys from Developers          *

Ghostwriter Threat Actors Target Users with Gmail Admin Phishing Emails          *

Critical NVIDIA NeMo Vulnerability Enables Unauthorized Command Execution          *

Critical Fortinet FortiSandbox Vulnerabilities Under Active Exploitation          *

Windows Users Targeted by Fake CAPTCHA and GULoader Malware Campaign          *

Researchers Track OnionDrop Loader Delivering Multi Stage Payload Chains          *

China-Linked SprySOCKS Backdoor Expands to Windows Targets, Enhancing Espionage Capabilities          *

UNC3753 Targets Professional and Financial Organizations Through Social Engineering Attacks          *

Novo Nordisk Confirms Cyberattack Exposing Patient Medical Data          *

Rokarolla Android Malware Targets PINs, SMS Authentication Codes, and Cryptocurrency Wallets          *

GhostTree Malware Campaign Uses Recursive Windows Junctions to Conceal Malicious Files          *

Jenkins RCE Vulnerability Being Exploited in the Wild          *

Silent Cloud-Based Attack Enables Payroll Redirection Fraud          *

NarwhalRAT Delivered via Stealth LNK Execution Chain          *

Attackers Exploit Copilot Enterprise Search to Steal Confidential Microsoft 365 Data          *

Critical PAN-OS GlobalProtect Flaw Enables Unauthorized VPN Access          *

Threat Actor Malware Platform Exposed Through Unsecured PHP Installer Page          *

Salesforce Platform Compromise at Infinite Campus Leads to Data Exfiltration          *

Sniper Dz Phishing Campaign Targets MENA Users Through Fake Facebook Offers and Browser Alert Scams          *

Payroll Pirate Campaign Uses AiTM Phishing to Steal Employee Payroll Credentials          *

Microsoft 365 Copilot Vulnerability Enables Potential Exposure of Emails, Files, and MFA Codes          *

Chinese Hackers Breach REDCap Servers, Exfiltrate Sensitive Medical Research Data          *

Critical Jenkins Vulnerability (CVE-2024-23897) Under Active Exploitation          *

DPAPISnoop Enables Extraction and Processing of Windows CredHist Data          *

Nintendo Investigating Alleged Data Breach Claim Linked to Third-Party Platform          *

Wazuh Vulnerability Enables Alert Manipulation and Security Log Deletion          *

SearchJack Adware Campaign Hijacks Browser Searches          *

WordPress Plugin Supply Chain Attack Exposes Websites to Malware          *

AI Coding Assistants Exploited in New Agentjacking Attack          *

152 Chrome Extensions Found Generating Fake Google Search Traffic and Harvesting Data Campaign          *

ShinyHunters Exploits Oracle PeopleSoft Zero-Day RCE Vulnerability in Active Attacks          *

Maine Suspends Data Breach Reporting Portal Following Fraudulent VRChat and Discord Submissions          *

Critical Splunk Vulnerability Enables Unauthenticated Remote Code Execution          *

AI Coding Agents Hijacked Through Malicious Error Injection Attack          *

Europol Disrupts Audia6 Crypto Investment Fraud Network in International Operation          *

GRU-Linked APT28 Uses Moobot Botnet to Target Routers and IoT Devices          *

AI Coding Agents Vulnerable to New Agentjacking Arbitrary Code Execution Attack          *

Threat Actors Exploit NinjaOne RMM Agent to Obtain Remote Access to Brazilian Organizations          *

Kyushu Electric Power Reports Missing SSD Affecting 10.9 Million Customers          *

Tchap Messaging Platform Breach Impacts More Than 73,000 French Government Users          *

OceanLotus APT Executes Supply Chain Attack Through Compromised FireAnt MetaKit Targeting Stock Investors          *

GreatXML Attack Demonstrates Potential BitLocker Bypass Through Windows Recovery Workflow          *

VMware-Signed Binary Abuse Enables Malware Execution and Defense Evasion          *

Critical Configuration Control Vulnerability Discovered in Ivanti Endpoint Manager Mobile          *

Microsoft Teams for Android Vulnerability May Expose Sensitive Information          *

DMG-Based Delivery Chain Deploying macOS Infostealer Malware          *

Data Breach at Nottingham University Impacts More Than 450,000 Students          *

Hackers Exploit SniperDz PhaaS Platform to Launch Large-Scale Phishing Campaigns          *

OpenClaw AI Agent Compromised in Phishing Scenario, Leaking Credentials          *

Emerging Phishing Method Mimics Browser Windows to Harvest Microsoft 365 Credentials          *

Malicious Browser Extensions Target Users of Popular AI Chatbots          *

Malicious Surveillance Software Found on Devices of Russian Leadership          *

Stealthy .NET Loader Spread via Malspam Using DoubleClick Redirection          *

Hackers Abuse VMware-Signed Binary to Sideload NIGHTFORGE Loader          *

Linux Kernel Guest-to-Host Escape Vulnerability Exposed Following Public PoC Release          *

Multiple Splunk Enterprise Vulnerabilities Allow Remote Code Execution and Privilege Escalation          *

Microsoft Fixes Windows RDP Vulnerabilities That Could Expose Sensitive Data          *

Actively Exploited Chromium Vulnerability Puts Chrome and Edge Users at Risk          *

Microsoft Discloses Windows CTFMON Zero-Day Enabling Local Privilege Escalation Attacks          *

Proto6 Vulnerabilities in protobuf.js Enable RCE and DoS Attacks in Node.js Environments          *

Hackers Use Fake Utility Downloads to Deliver Malware Through Trojanized Software          *

U.S. Military Networks Face Expanded Targeting From China-Linked JDY Botnet          *

Tax-Themed Phishing Emails Deploy Fileless Malware on Windows Systems          *

Langflow Path Traversal Vulnerability Enables Unauthenticated Remote Code Execution          *

RoguePlanet Zero-Day Exploits Microsoft Defender to Gain SYSTEM Privileges          *

Malicious dbmux npm Releases Exploit Developers Through Supply Chain Attack          *

Unauthorized Access Incident Linked to Exploited ServiceNow Security Flaw          *

OpenClaw AI Agent Credential Leakage Vulnerability Enables Sensitive Data Exposure          *

Android.MagicAd Malware Evades Security Measures to Deliver Persistent Background Ads          *

Critical Vulnerability in Veeam Backup Servers Allows Authenticated Remote Code Execution          *

Apple Introduces AI-Powered Feature to Automatically Replace Compromised Passwords          *

The Hidden Security Risk in Modern Enterprise Browsers: AI Browser Extensions          *

Microsoft Patch Tuesday Security Advisory – June 2026          *

Account Hijacking Attack Compromises French Government Messaging Platform          *

NFCShare Android Malware Distributed via Fake Banking App Updates          *

SAP June 2026 Security Updates Address Multiple Critical Vulnerabilities Across Enterprise Products          *

LiteLLM Command Injection Vulnerability (CVE-2026-42271) Actively Exploited, Can Lead to Unauthenticated Remote Code Execution          *

Critical Linux Kernel Flaw Enables Root Access Across Systems          *

Google Releases Emergency Fix for Actively Exploited Chrome Zero-Day Vulnerability          *

Fake Parsimonious Python Package Used to Distribute Malware          *

Cybercriminals Use Fake Security Tool Websites to Distribute Malware          *

Cisco SD-WAN Flaw Under Active Exploitation          *

New Analysis Reveals VECT 2.0 Ransomware Causes Permanent Data Damage          *

New Analysis Reveals VECT 2.0 Ransomware Causes Permanent Data Damage          *

Critical Microsoft Edge Vulnerabilities Could Lead to Remote Code Execution          *

UniFi OS Server Authentication Bypass and Command Injection Chain Enables Unauthenticated RCE to Root          *

Fortinet Flaws, AI Tools, and Custom C2 Framework Exploited in Large-Scale Intrusion Campaign          *

Pink Hacking Group (CL-CRI-1147) Targets Enterprises to Steal Cloud Credentials and Conduct Data Extortion          *

VerdantBamboo BSD Variant of BRICKSTORM Targets Linux Appliances          *

New Lucid Stealer Malware Targets 18 Browsers, Crypto Wallets, and Discord Tokens with Hidden Remote Access Capability          *

Critical Vulnerability in Check Point VPN Products Enables Unauthorized Remote Access          *

VMware NSX Vulnerabilities Expose Administrators to Stored XSS Attacks          *

Lucid Stealer Expands Capabilities with Integrated Remote Access and Credential Theft          *

Dell RecoverPoint for Virtual Machines Zero-Day Vulnerability (CVE-2026-22769) Exploited for Root-Level Persistence          *

Vishing and Physical Intrusions Drive UNC3753s Latest Extortion Campaign          *

Meta AI Support Hack Leads to 20,000+ Instagram Account Takeovers          *

Threat Actors Exploiting Linux Kernel cgroups Vulnerability to Gain Root Access          *

CISA Alerts Organizations to Actively Exploited SolarWinds Serv-U Vulnerability          *

Hugging Face Transformers Flaw Enables Remote Code Execution          *

ActiveMQ Security Gaps Allow Exploitation via Malformed JMS Properties and Overly Permissive Management APIs          *

OP-512 Threat Cluster Targets Microsoft IIS Servers with Custom Web Shell Framework          *

Fortinet Flaws, AI Tools, and Custom C2 Framework Exploited in Large-Scale Intrusion Campaign          *

Android Spyware Asin Targets Arabic-Speaking Users Through Fake News, PDF, and War Map Apps          *

Critical Claude Code Flaw Allows Complete GitHub Repository Takeover          *

KMW CCTV Authentication Bypass Vulnerability (CVE-2026-5386) Enables Unauthorized Access to Surveillance Feeds          *

Critical StrongDM Vulnerability Enables Authentication Token Theft and Session Reuse          *

Mustang Panda Uses Multi-Stage LNK and PowerShell Chain to Deliver PlugX RAT          *

Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm          *

Foreign Spyware Campaign Targets Phones of Senior Russian Officials          *

Operation XENOFISCAL: SideCopy Targets Afghan Government with Xeno RAT          *

Critical Oracle WebLogic Flaw Added to CISA KEV Catalog Amid Active Exploitation          *

Brute-Force Attack Targets Dashlane Users, Encrypted Vaults Accessed          *

Android Zero-Day Vulnerability Actively Exploited in the Wild          *

Severe Magento Cache Plugin Vulnerability Allows RCE Attacks          *

Analysis of the June 2026 npm Supply Chain Compromise          *

IBM WebSphere RCE Vulnerability Allows Code Execution Through Crafted Requests          *

Critical MCP Toolbox Flaw Exposes Enterprise Database Systems to Attack Risk          *

Spear-Phishing ZIP Files Serve as Initial Vector for Complex Rust-Based Malware Execution Chain          *

Spear-Phishing ZIP Files Serve as Initial Vector for Complex Rust-Based Malware Execution Chain          *

Magento Cache Plugin Vulnerability Enables Arbitrary File Read and Information Disclosure          *

Attackers Leverage Docker and Kubernetes Misconfigurations to Compromise Host Systems          *

Critical Plesk Vulnerability (CVE-2025-66430) Allows Root-Level Privilege Escalation          *

Malicious npm Package Targets OpenAI Codex Users by Stealing Authentication Tokens          *

Iranian Threat Actors Exploit AppDomainManager Hijacking to Bypass EDR Defenses          *

Windows 11 KB5089573 Released With Performance Enhancements and Critical Reliability Fixes          *

AI-Powered Cyber Threat: GREYVIBE Uses ChatGPT and Gemini to Fuel Cyberattacks          *

Microsoft Clarifies “Nightmare-Eclipse” Zero-Day Disclosure Controversy          *

PHP Developers Targeted in New Famous Chollima Malware Operation          *

Hackers Exploit WP Maps Pro Bug to Gain Full Admin Access on WordPress Sites          *

Iran-Linked Hackers Deploy Destructive Wiper Malware Against Critical Infrastructure          *

Security Vulnerability in Instagram Meta AI Reportedly Enables Account Password Resets          *

Critical Patch Alert Windows Netlogon RCE CVE-2026-41089 Actively Exploited in Wild          *

Critical Patch Alert Windows Netlogon RCE CVE-2026-41089 Actively Exploited in Wild          *

SideCopy Uses Fileless Malware Chain to Compromise Afghan Finance Officials          *

Palo Alto Networks Warns of Active Exploitation of CVE-2026-0257          *

JINX 0164 Leverages LinkedIn Based Social Engineering to Deliver macOS Infostealer and CICD Supply Chain Malware          *

New Russian-Linked GREYVIBE Targets Ukraine with AI-Powered Cyberattacks          *

Ransomware Abuses Scheduled System Tasks to Evade Detection and Encrypt Systems          *

Dutch Authorities Disrupt Massive Malware Botnet with 17 million infected devices          *

Malicious Sicoob NuGet Package Steals Banking Credentials from Developer Environments          *

Charter Communications Breach Leaks Data of 4.9 Million Customers in ShinyHunters Attack          *

Samba RCE Vulnerability Allows Remote Code Execution on Linux Servers          *

Seedworm Hackers Leverage Signed Security Binaries in DLL Sideloading Campaign          *

Zapocalypse Exploit Chain Risks Complete Zapier Account Compromise          *

Fortinet Researchers Uncover Evasive PureLogs Infostealer Targeting Browsers, Crypto Wallets, and VPN Credentials          *

World Cup Fans Targeted by GHOST STADIUM Through Fraudulent FIFA Ticketing Platforms          *

VaultJacking Attack Puts Google Users at Risk          *

VaultJacking Attack Puts Google Users at Risk          *

Carnival Corporation Detects Unauthorized Activity Leading to Mass Data Breach Disclosure          *

How SIEM Helps MSPs Reduce Alert Noise and Respond to Threats Faster          *

New Zero-Day Vulnerability in Gogs Allows Remote Code Execution          *

Romanian Hacker Sentenced for Breaching Oregon Government Network          *

VIP Keylogger Malware Campaign Targets Windows Users Through Phishing Attacks          *

ClearFake Campaign Abuses BSC Testnet Smart Contracts to Conceal Malware Infrastructure          *

Roundcube Webmail Security Update Fixes Critical Pre-Authentication SQL Injection Flaw          *

Veeam Backup & Replication Critical Vulnerabilities Allow Remote Code Execution          *

GitHub Releases Enterprise Server 3.20.3 to Patch Severe Flaws          *

Grandoreiro Banking Malware and BTMOB Android RAT Intensify Global Attacks          *

Iran-Linked MuddyWater Launches Global Cyber Espionage Campaign          *

Microsoft Patches Critical Windows Kernel Flaw CVE-2026-40369 Enabling SYSTEM Privilege Escalation          *

Gitea Vulnerability Exposes Private Repository Data Through Authorization Bypass          *

BTMOB Malware Targets Android Phones with Remote Access Capabilities          *

BadHost Vulnerability Exposes Sensitive AI Agent Server Infrastructure          *

AI Chatbot Suggestions Found Redirecting Users to Cryptojacking Malware Platforms          *

Stealer Backdoor Found in Malicious npm Packages Targeting Developer Systems          *

New Windows Security Flaws Expose Systems to SYSTEM-Level Access          *

Zero-Click Exploit Chain Hijacks WhatsApp Accounts on Vulnerable iOS 16 Devices          *

Glassworm Malware Campaign Targets Developers Through npm, PyPI, GitHub, and VS Code Extensions          *

Microsoft Defender for Endpoint Automatic Device Isolation (Preview) Strengthens Enterprise Threat Containment          *

Quasar Linux RAT Targets Developers With Stealthy Fileless Supply Chain Attacks          *

Security Weakness in Apache CXF May Lead to LDAP Injection          *

Silent Supply Chain Attack Through Malicious Go Module Typosquat          *

New Vulnerability in Microsoft SharePoint Server Exposes Systems to RCE Attacks          *

Memcached SASL Authentication Vulnerability (CVE-2025-46818) Enables Remote Code Execution          *

Hackers Use SEO Poisoning to Impersonate Gemini CLI and Deliver Malware          *

Critical Flaws in Angular Language Service Extension Could Enable Remote Code Execution          *

NightSpire Ransomware Exploits RDP Access to Target Global Organizations          *

Payload Ransomware Uses Advanced Encryption to Disrupt Enterprise Networks          *

Phishing-as-a-Service Campaigns Abuse RCS and iMessage for Real-Time MFA Bypass          *

Critical 7-Zip Memory Corruption Flaws Allow Remote Code Execution and Data Exposure          *

PuTTY 0.84 Security Update Fixes SSH Key Exchange Crash and Telnet Prompt Spoofing Issues          *

Cisco Fixes Critical CVSS 10.0 Secure Workload REST API Vulnerability Allowing Unauthorized Data Access          *

InvisibleFerret Malware Uses .pyd and .so Modules to Bypass Script-Based Detection Mechanisms          *

Supply Chain Attack Conceals Linux Malware Under Fake SSH Process          *

Telegram-Facilitated MaaS Ecosystems Power Cross-Border Money Mule Laundering Operations          *

Laravel Language Packages Hijacked to Deploy Credential-Stealing Malware          *

Dutch Authorities Seize 800 Hosting Servers Allegedly Used to Facilitate Cyberattacks          *

Iranian APT Uses SEO Poisoning and Fake VPN Installers to Deploy Malware          *

Local Persistence of WhatsApp Conversations in Unencrypted Storage on macOS and iOS          *

SonicWall Firewall Management Interface Scanning Surge Raises Exploitation Concerns          *

Threat Actors Impersonate Gemini CLI and Claude Code to Deliver Fileless PowerShell Infostealer          *

Ghost CMS SQL Injection Flaw Exploited in ClickFix Campaign          *

Iran-Linked MiniUpdate RAT Campaign Targets Critical Industries          *

Underminr Technique Abuses Shared CDNs to Bypass Security Defenses          *

Hackers Exploit Azure RBAC Misconfigurations to Escalate Privileges and Access Critical Cloud Resources          *

Stealthy npm Lifecycle Malware Targets PHP Composer Ecosystem          *

Packagist Supply Chain Attack Targets PHP Development Ecosystem          *

Hackers Target npm, PyPI, and Crates with 34 Compromised Packages          *

Cybercriminals Exploit F5 BIG IP Weaknesses to Target Enterprise Infrastructure Networks          *

Ubiquiti Releases Emergency Patches for Critical UniFi OS Vulnerabilities          *

Ubiquiti Releases Emergency Patches for Critical UniFi OS Vulnerabilities          *

Active Exploitation of CVE-2026-48172 Threatens Shared Hosting Servers          *

PyrsistenceSniper Detects 117 Malware Persistence Techniques Across Windows, Linux, and macOS          *

Apple App Store fraud prevention systems stop $11B in malicious transactions over six years          *

Trend Micro Apex One Zero-Day (CVE-2026-34926) Exploited in Active Attacks          *

Drupal Critical SQL Injection Vulnerability (CVE-2026-9082) Under Active Exploitation          *

Drupal Critical SQL Injection Vulnerability (CVE-2026-9082) Under Active Exploitation          *

Megalodon Attack Abuses CI-CD Pipelines Across 5,561 GitHub Repositories          *

Android Malware Campaign Exploits Carrier Billing to Enroll Users in Premium Services          *

KimWolf DDoS Botnet Operator Arrested Following Global Investigation          *

Kali365 Targets Microsoft 365 Users Through Advanced Phishing Campaign          *

Splunk Fixes Multiple Vulnerabilities Enabling DoS and Data Exposure          *

Splunk Fixes Multiple Vulnerabilities Enabling DoS and Data Exposure          *

New NGINX RCE Vulnerability “nginx-poolslip” Raises Global Security Concerns          *

Critical Apache OFBiz Vulnerabilities Allow Password-Change Bypass and Remote Code Execution Exploit          *

Thousands of GitHub Projects Targeted in Fast-Moving CI CD Backdoor Attack          *

AI-Assisted Phishing Campaign Targets U.S. Organizations Through Fake Event Invitations          *

AI-Assisted Phishing Campaign Targets U.S. Organizations Through Fake Event Invitations          *

Critical Chrome Vulnerabilities Enable Remote Code Execution          *

TamperedChef Campaign Uses Trojanized Productivity Apps for Malware Distribution          *

Linux Kernel Vulnerability Enables Container Escape and Privilege Escalation          *

Security Advisory | ShowBoAT Linux Malware Targets Middle Eastern Government and Critical Infrastructure Sectors          *

Telcos Targeted by Chinese Hackers Using New Linux and Windows Malware          *

Drupal Core Security Vulnerability Enables Denial-of-Service Attacks Through Comment Module          *

Microsoft Defender Flaws Under Active Zero-Day Exploitation          *

GitHub Internal Repositories Breached via Poisoned VS Code Extension          *

Fake Microsoft Teams Downloads Deliver ValleyRAT Malware          *

Cyber Attacks Force Nucor to Halt Steel Production          *

ExifTool CVE-2026-3102 Exposes macOS Systems to Command Injection Attacks          *

Dark Web Data Brokers Mislead Organizations Using Fabricated Corporate Breach Claims          *

WantToCry Ransomware Abuses SMB for Remote Encryption          *

TeamPCP Supply Chain Attack Compromises Microsoft DurableTask Python Client          *

Single-Character Go Package Typosquat Exploited to Deliver DNS-Based Backdoor Malware          *

Gremlin Stealer Uses Telegram Dead Drop Resolver to Conceal C2 Infrastructure          *

FreePBX Vulnerability Allows Unauthorized Access to User Portals          *

Webworm Malware Campaign Leveraging Discord and Microsoft Graph API for Covert C2 Operations          *

Trapdoor Malvertising Campaign Exploits 455 Android Apps for Massive Ad Fraud Operations          *

Microsoft Exchange Server Spoofing Vulnerability (CVE-2026-42897) Exploited via Crafted Emails          *

Critical NGINX Rift Vulnerability Exposes Servers to RCE and DoS Attacks          *

Pardus Linux Vulnerability Chain (CVE-2026-5140) Enables Full Root Privilege Escalation          *

The Gentlemen Ransomware Emerges as a Major Cross-Platform Cyber Threat          *

New macOS Malware Uses Fake Google Update Mechanism for Persistence          *

INTERPOL Dismantles Major Scam and Malware Networks          *

GitHub Investigates Claimed Source Code Theft by TeamPCP          *

GitHub Investigates Claimed Source Code Theft by TeamPCP          *

GitHub Investigates Claimed Source Code Theft by TeamPCP          *

UAC-0184 Uses BITSAdmin and Multi-Stage Loaders to Deliver Remcos RAT          *

Fake Google Update Campaign Delivers Malware Through Compromised Websites          *

Microsoft Edge Password Handling Flaw Exposes Stored Credentials in System Memory          *

Exploit Released for Newly Discovered DirtyDecrypt Linux Privilege Escalation Vulnerability          *

53 Malware and Phishing Servers Seized by INTERPOL’s Operation Ramz          *

PostgreSQL Security Updates Patch Multiple High-Severity Vulnerabilities Across Versions 14–18          *

Four-Faith Router Flaw Actively Exploited for Global Botnet Recruitment          *

Critical Entra ID Flaw Enabled Service Principal Hijacking          *

JavaScript Malware Campaign Drops Crypto Clipper via PowerShell          *

Critical Marimo Vulnerability Enables Remote Code Execution          *

Attackers Abuse VS Code Marketplace to Spread Backdoor via Nx Console Extension          *

Multiple Critical Vulnerabilities in n8n Lead to Full RCE Risk          *

FunnelKit Flaw Puts WooCommerce Stores at Risk          *

Mythos Introduces Automated PoC Exploit Creation for Vulnerability Research          *

OtterCookie Malware Steals Developer Secrets, SSH Keys, Cloud Credentials, and API Tokens          *

Hackers Exploit Cloudflare Storage Services to Steal Network Files          *

Paper Werewolf APT Campaign Uses Fake Adobe Installer to Deploy EchoGather RAT          *

New Gremlin Stealer Iteration Uses In-Memory Decryption of .NET Resource Payloads for Evasion          *

Gamaredon Deploying GammaDrop and GammaLoad Through Phishing Attacks          *

Four Malicious npm Packages Deliver Credential-Stealing Malware Across Developer Environments          *

Critical macOS M5 Vulnerability Chain Enables Full Root Access          *

WordPress Plugin Vulnerability Exposes Websites          *

PureLogs Infostealer Campaign Using PNG Steganography          *

Fast16 Malware Used for Nuclear Weapons Simulation Sabotage Prior to Stuxnet          *

Critical n8n Security Flaws Enable Remote Code Execution and Credential Exposure          *

Avada Builder Vulnerabilities (CVE-2026-4782 & CVE-2026-4798) Expose Over One Million WordPress Sites          *

Tycoon 2FA Exploits OAuth Device Code Flow          *

Apple M5 Security Breach Demonstrates AI’s Growing Role in Cyber Exploitation          *

VPN Bypass Issue in Android 16 Can Leak Users’ Actual IP Addresses          *

Malicious JPEG Files Exploit Critical PHP Memory Safety Vulnerabilities          *

Grafana Labs GitHub breach caused by CI and CD misconfiguration enabling token theft          *

JDownloader Website Breach Distributes Malicious Installers to Windows and Linux Users          *

OpenClaw Vulnerabilities Permit Sandbox Bypass and Credential Exfiltration          *

TanStack Supply Chain Attack Impacts OpenAI Employee Devices and Triggers macOS Certificate Rotation          *

Gunra Ransomware’s Double-Extortion Campaign Targets Global Enterprises          *

Developer Secrets Targeted by Stealer Backdoor in 3 Node-IPC Versions          *

High-Severity SQL Injection Vulnerabilities Affect Amazon Redshift Database Drivers          *

Pwn2Own Berlin 2026 Exposes Critical Zero-Day Flaws in Microsoft, NVIDIA, and AI Platforms          *

Multiple Security Flaws in cPanel Put Hosting Environments at Risk          *

Microsoft Exchange Server XSS Vulnerability Under Active Exploitation          *

NGINX Vulnerability Allows Remote Code Execution          *

TencShell Malware Exploits Screen Control and UAC Bypass in Advanced Cyberattack          *

Microsoft Enhances Vulnerability Detection with MDASH AI System          *

Critical Cisco SD-WAN Vulnerability Allows Remote Attackers Administrative Access, Threatens Network Security          *

WordPress Plugin Flaw Puts 200,000+ Sites at Risk          *

Malicious npm Package Versions Target AWS, Azure, GitHub, and SSH Secrets          *

Fragnesia CVE-2026-46300 Linux Kernel LPE Exploits Page Cache Corruption for Root Access          *

Sandworm Shifts from IT Breaches to Misconfigured Edge Devices in Critical Infrastructure Attacks          *

PraisonAI Authentication Bypass Vulnerability (CVE-2026-44338) Enables Unauthorized Access to AI Agent Platform          *

Critical Vulnerability in Windows DNS Client Enables Remote Code Execution          *

New Exim Security Flaw Risks Remote Code Execution on Email Servers          *

Chinese APT Exploits Microsoft Exchange Server Vulnerabilities for Large-Scale Cyber Espionage          *

Attackers Can Exploit MongoDB Vulnerability for Unauthorized Code Execution          *

Composer Vulnerability Leaks GitHub Actions Tokens Through CI Logs in PHP Projects          *

Fortinet and Cisco Edge Devices Under Active Exploitation          *

Android 17 AI-Powered Security Protects Smartphones Against Fraud, Malware, And Evolving Cyber Threats          *

Signal Rolls Out New Warnings Against Social Engineering Threats          *

Fortinet Releases Urgent Security Updates for Critical RCE Flaws          *

UK Slaps $1.3M Fine on Water Supplier Over Massive Data Breach          *

GemStuffer Campaign Abuses RubyGems Packages to Exfiltrate U.K. Council Portal Data          *

Android Intrusion Logging Feature Enhances Spyware Forensics on Android Devices          *

Foxconn North American Factory Cyberattack Linked to Nitrogen Ransomware Group          *

Repeated Exploitation of Microsoft Exchange Impacts Azerbaijani Energy Firm          *

Microsoft Patch Tuesday Security Advisory – May 2026          *

Infostealer Malware Increasingly Linked to Enterprise Credential Compromise          *

Global Enterprises Targeted in BYOVD-Based Ransomware Attacks          *

Microsoft Teams Spoofing Vulnerability Impacts Android Enterprise Communications          *

Cybercriminals Abuse Fake FinalShell and Xshell Downloads for Malware Delivery          *

Microsoft Windows 11 Cumulative Security Updates Address Multiple Vulnerabilities Across Supported Versions          *

Cushman & Wakefield Reports Data Breach Impacting Over 310,000 Accounts          *

Instructure Pays Ransom Following Threat of Massive Canvas Data Exposure          *

Critical Claude Chrome Extension Flaw Enables Silent Data Theft from Google Services          *

RubyGems Under Active Attack as Harmful Packages Flood Repository          *

Zoom Workplace and Zoom Rooms Vulnerabilities Enable Privilege Escalation Attacks          *

iOS 26.5 Introduces End-to-End Encrypted RCS Messaging for iPhone and Android          *

Attackers Abuse Vercel AI Platform for Mass Phishing Site Generation          *

SAP S4 HANA SQL Injection Vulnerability Enables Unauthorized Database Access          *

Mini Shai-Hulud Attack Targets CI/CD Pipelines Across Major Dev Ecosystem          *

Fake TronLink Chrome Extension Steals TRON Wallet Credentials Through Dynamic Phishing          *

Magecart Campaign Exploits Google Tag Manager for Stealth Credit Card Theft          *

Cline AI Agent Vulnerability Enables Remote Code Execution Attacks          *

OpenAI Daybreak Uses GPT-5.5 Cyber Models to Strengthen Enterprise Vulnerability Management          *

Nexcorium DDoS Malware Leveraging TBK DVR Flaw (CVE-2024-3721)          *

Fake JPEG Launches Fileless Intrusion Chain Using Trojanized ScreenConnect          *

PureRAT Conceals PE Payloads Inside PNG Files for Fileless Attacks          *

Critical RCE Flaw in Weaver E-cology Puts Enterprise Systems at Risk          *

NVIDIA Reports GeForce User Data Exposure Incident          *

Google Detects First AI-Generated Zero-Day Cyber Exploit          *

Windows SMB File Shares Vulnerable to Encryptionless GhostLock Attacks          *

Critical PHP SOAP Extension Vulnerability Enables Remote Code Execution          *

Microsoft 365 Copilot Vulnerabilities Could Expose Sensitive Organizational Data          *

GhostLock Attack Exploits Windows SMB Exclusive File Handles to Execute File-Locking DoS Disruption Without Encryption          *

Ollama Out-of-Bounds Read Vulnerability (CVE-2026-7482) Enables Remote Process Memory Leak          *

Sandboxie Escape Vulnerability Leads to SYSTEM-Level Privilege Escalation          *

ODINI Malware Uses CPU-Generated Magnetic Signals to Exfiltrate Data from Air-Gapped Systems          *

TrickMo Android Banking Malware Uses TON Blockchain for Stealthy Communications          *

Malicious Hugging Face Repository Distributes Rust-Based Info Stealer via Fake OpenAI Model          *

macOS Malware Campaign Uses Google Ads and Claude Shared Chats for Payload Delivery          *

ODINI Malware Uses Magnetic Fields to Steal Data from Isolated Systems          *

Cybercriminals Use AI to Intensify Attacks Across African Sectors          *

OpenClaw Malware Campaign Distributes Fake Installers and Infostealer Payloads          *

Stealthy Vidar Infostealer Infection Chain Targets Credentials Using Fake Activation Tools          *

Germany Shuts Down Rebooted Crimenetwork Dark Web Marketplace          *

Hackers Weaponize JDownloader Downloads With RAT Malware          *

TCLBANKER Malware Spreads via WhatsApp and Outlook Worms          *

Zara breach exposes support tickets and order metadata after BigQuery cloud compromise          *

Trellix Source Code Repository Breach Linked to RansomHouse Hackers          *

Fake Call History Apps Scam Campaign Targets Android Users Through Fraudulent Google Play Apps          *

React Server Components Next.js Vulnerabilities Expose Applications to RCE and DoS Attacks          *

Attackers Abuse Signed Logitech Installer to Deploy TCLBANKER Malware          *

Dirty Frag Linux Kernel Vulnerability Enables Root Privilege Escalation Across Major Distributions          *

Grok and Bankrbot Exploited Through AI Prompt Injection Leading to Crypto Theft          *

Rancher Fleet Vulnerability Exposes Kubernetes Clusters to Full Admin Takeover          *

New Banking Trojan TCLBanker Uses WhatsApp and Outlook for Automated Spread          *

ACSC Alerts Organizations to ClickFix Malware Campaign Delivering Vidar Stealer          *

Critical Spring Cloud vulnerabilities expose enterprise systems to severe cyberattack and data breaches          *

Day Zero Readiness: Closing the Gaps That Cripple Incident Response          *

VoIP Infrastructure Becomes Key Tool in Modern TOAD Scam Operations          *

Ollama Vulnerability Exposes Servers to Unauthorized Access and Model Abuse          *

Android Spyware Campaign Abuses Fake Call Log Apps to Harvest Payment Data from Millions          *

MuddyWater Chaos Campaign Exploits Microsoft Teams for Credential Theft and Data Exfiltration          *

Ivanti Endpoint Manager Mobile Zero-Day Vulnerability Exploited in Active Attacks          *

Multiple Critical vm2 Vulnerabilities Enable Remote Code Execution Attacks          *

Malicious Google Ads Used to Hijack GoDaddy ManageWP Credentials          *

Multiple Redis Flaws Raise Serious Remote Exploitation Concerns          *

Google Chrome 148 Security Update Fixes 127 Vulnerabilities Including Critical Memory Corruption Flaws          *

Malicious NuGet Packages Target .NET Cryptocurrency Developers          *

Cisco Network Flaw Exposes Devices to Denial-of-Service Attacks          *

Palo Alto Networks Warns of Actively Exploited PAN-OS Remote Code Execution Flaw          *

MuddyWater Chaos Campaign Exploits Microsoft Teams for Credential Theft and Data Exfiltration          *

China-Linked UAT-8302 Expands Global Cyber-Espionage Campaign Using Shared APT Toolsets          *

Google Expands Android Binary Transparency to Prevent Supply Chain Attacks          *

Chaos RaaS Emerges After BlackSuit Takedown, Continuing Double Extortion OperationsChaos ransomware has surfaced shortly after the takedown of the BlackSuit operation, indicating a rapid regrouping of threat actors. The new ransomware-as-a-service (R          *

Stealthy C2 Communications via QUIC and WebSockets in Salat Malware          *

Calendar Phishing Campaign Abuses Event Invites for Credential Theft          *

Critical Fanwei E-cology10 Flaw Enables Session Hijacking and Credential Theft          *

Argo CD Vulnerability (CVE-2026-42880) Exposes Kubernetes Secrets from etcd Clusters          *

Severe Zero-Auth Issue Allows Unauthorized Cross-Tenant Access at DoD Contractor          *

Ransomware Affiliate Convicted for Coordinating Double-Extortion Attacks          *

Email Data of 119K Users Exposed in Vimeo Third-Party Breach          *

OpenClaw Malicious Skills Campaign Targets Agentic AI Ecosystem          *

Salesforce Marketing Cloud Vulnerabilities Enable Cross-Tenant Email Data Exposure          *

Developers Targeted by QLNX Malware in Credential Theft Operations          *

Multi-Stage AiTM Phishing Attack Targets 35,000 Users with Code-of-Conduct Lures          *

Cerberus Anti-theft Identified as Stalkerware Leveraging Google Firebase for Remote Control          *

WhatsApp Vulnerability Allows Malicious URL Execution via Instagram Reels          *

Trojanized DAEMON Tools Updates Used to Deploy Advanced Multi-Stage Cyberespionage Malware          *

ScarCruft Campaign Delivers BirdCall Android Malware via Fake Game Platforms          *

CloudZ Malware Exploits Microsoft Phone Link to Intercept SMS and One-Time Passwords          *

Personal information of 119,000 users exposed in Vimeo data breach          *

Code-of-Conduct Phishing Campaign Uses AiTM to Bypass MFA and Compromise Accounts          *

Fake Notepad++ for macOS Campaign Exploits Brand Trust to Deliver Malware          *

Compromised Gaming Site Used to Distribute BirdCall Spyware on Android Devices          *

Zero-Click Android Vulnerability in adbd Grants Remote Command Execution          *

Apache HTTP Server Remote Code Execution Vulnerability          *

Severe Security Issues in Qualcomm Chipsets Enable Remote Code Execution          *

Authorities Shut Down 9 Crypto Fraud Hubs in Massive International Crackdown          *

Cisco Strengthens AI Supply Chain Security with Model Provenance Kit          *

Amazon SES Exploited by Phishing Campaigns to Bypass Detection Mechanisms          *

Mass Facebook Account Hijacking Campaign Uncovered          *

Mass Facebook Account Hijacking Campaign Uncovered          *

AI Hackers Now Discover 0-Days Faster Than Humans Can Respond          *

Critical RCE Vulnerability in Weaver E-cology Exploited Before Public Disclosure          *

Unauthorized Repository Access Leads to Source Code Exposure at Trellix          *

Silver Fox Leverages RustSL Loader to Deliver ValleyRAT and ABCDoor via Tax-Themed Phishing Campaigns          *

Canvas LMS Data Breach Confirmed Following ShinyHunters Claim          *

Bluekit Phishing Kit Streamlines End-to-End Attacks with Automation and MFA Bypass          *

Critical Vulnerabilities in Apache MINA Allow Remote Code Execution Attacks          *

Microsoft Defender Misidentifies DigiCert Certificates as Trojan:Win32/Cerdigent.A!dha          *

FreeBSD DHCP Client Vulnerability Enables Remote Code Execution          *

Email Bombing and Fake IT Support Phishing Attack Targets Enterprises Globally          *

Trellix Source Code Breach Raises Supply Chain Security Concerns          *

MOVEit Transfer and Cloud Vulnerability Allows Authentication Bypass Attacks          *

Hackers Inject Malware into SAP npm Packages to Exfiltrate Secrets          *

Artificial Intelligence Accelerates Zero-Day Discovery and Threat Execution          *

Telegram Mini Apps Exploited for Crypto Scams and Malware Delivery          *

ConsentFix v3 automated OAuth phishing attack targeting Microsoft Azure environments          *

Instructure Confirms Data Breach Following Claimed Attack by ShinyHunters          *

Windows 11 Update Gives Admins Full Control Over Default App Removal          *

Cybercriminals Can Now Rebrand and Resell Android Spyware with Ease          *

Enhancing Threat Intelligence Workflows with Criminal IP and Securonix Integration          *

Poisoned Ruby Gems and Go Modules Exploit CI Pipelines to Steal Credentials          *

Multiple Vulnerabilities in Exim mail server Enable Crashes Through Malicious DNS Data          *

PyTorch Lightning Supply Chain Attack via PyPI Package Compromise          *

China-Linked Cyber Espionage Campaign Targets Asian Governments and NATO Entity          *

ShadowPad Malware Campaign via WSUS Exploit          *

DeepDoor RAT Exploits Windows Systems to Steal Credentials and Maintain Persistent Access          *

Wireshark Vulnerabilities Causing Denial-of-Service Risks          *

AI-Powered Ransomware Surge Hits 7,831 Victims Worldwide          *

SMS Pumping Scam Hidden Behind Fake CAPTCHA Tricks Users          *

Wireshark Update Fixes Critical Code Execution and DoS Vulnerabilities          *

The First 24 Hours of Exposure How Attackers Find and Exploit New Assets          *

Stealth Python Backdoor Abuses Tunneling Service to Steal Browser and Cloud Credentials          *

Critical zero-day vulnerability in cPanel & WHM actively exploited, PoC released          *

Python-Based Fileless Backdoor Uses Public Tunneling Service for Stealthy Credential Exfiltration and Remote Access          *

Phoenix PhaaS Platform Enables Large-Scale Smishing Campaigns          *

Critical “Copy Fail” Vulnerability in Linux Enables Full Root Access on Widely Used Systems          *

ProFTPD SQL Injection Vulnerability (CVE-2026-42167)          *

Multiple SonicOS Vulnerabilities Threaten Firewall Integrity and Availability          *

ASUSTOR ADM Vulnerability (CVE-2026-6644) Enables Root Command Execution via PPTP VPN Feature          *

Compromised WordPress Plugin Delivers Silent Payloads Through Update Checker          *

Jenkins Patches Multiple Vulnerabilities Allowing Denial-of-Service and Information Disclosure Attacks          *

Attackers Abuse Qinglong Task Scheduler RCE Vulnerabilities for Cryptomining          *

Lazarus Group Targets macOS with Mach O Man Malware          *

Supply-Chain Attack Targets SAP npm Ecosystem to Exfiltrate Secrets          *

Arbitrary Code Execution via AI Agent Interaction with Malicious Git Repositories in Cursor IDE          *

Lazarus macOS Malware Campaign (“Mach-O Man”) Targets High-Value Users          *

CISA Alerts on Active Exploitation of ConnectWise ScreenConnect Vulnerability          *

NVIDIA FLARE SDK Critical Vulnerability Enables Authentication Bypass and Potential Full System Compromise          *

Spring AI Vector Stores Impacted by Injection Vulnerabilities (CVE-2026-40967 & CVE-2026-40978)          *

Cursor AI Vulnerability (CVE-2026-26268) Enables Silent Remote Code Execution via Malicious Repositories          *

BlueNoroff Fileless PowerShell Campaign Targets Organizations with Stealthy Malware Execution          *

SlotAgent Malware Campaign Hides API Calls to Evade Detection and Steal Credentials          *

Emerging BlobPhish Threat Uses Blob URLs to Deliver Fileless Phishing Pages          *

Chrome Update Fixes Critical Vulnerabilities Leading to RCE Exploitation          *

Urgent cPanel Update Addresses Critical Access Control Flaw          *

Vimeo Confirms User Data Exposure Following Anodot Security Breach          *

LofyGang Returns with Minecraft ‘Slinky’ Hack to Spread LofyStealer Malware          *

Critical GitHub Flaw (CVE-2026-3854) Enables Remote Code Execution via Single Git Push          *

Checkmarx Verifies GitHub Data Breach Linked to LAPSUS$ Hackers          *

Zero-Window Reality: Building Resilience After Mythos          *

Teen Hacker Linked to Scattered Spider Arrested in Global Cybercrime Case          *

Silver Fox Malware Campaign Targets Users via Trojanized Installers and Phishing Lures          *

Windows Shell Vulnerability (CVE-2026-32202) Actively Exploited in the Wild          *

Critical Flaw in Hugging Face LeRobot Exposes Systems to Remote Code Execution          *

Multiple RCE Vulnerabilities in Apache Camel Threaten Critical Integration Systems          *

VECT 2.0 Ransomware Acts as a Data Wiper, Causing Irreversible File Destruction          *

Hackers Exploit SS7 and Diameter Flaws to Track Mobile Users Globally          *

Critical Flaw in Notepad++ Find Feature Can Crash Application, Leak Memory Data          *

Fake Banking KYC Android Malware Campaign Exploits WhatsApp to Hijack Accounts          *

PyPI Package Compromise Distributes Malware to Steal Environment Variables and Credentials          *

Sandworm Campaign Leverages SSH-over-Tor for Covert Persistent Access          *

Windows RDP Bitmap Cache Exposes Sensitive Session Data to Attackers          *

Serious LiteLLM Bug Enables Unauthorized Database Access via SQL Injection          *

Security Experts Reveal Early ‘fast16’ Malware Attacks on Engineering Software          *

Chinese Hacker Extradited to U.S. for Silk Typhoon Cyberespionage Attacks          *

European Commission Proposes New Rules to Make Google Share Search Data With Competitors Under Digital Markets Act          *

Microsoft Gives Enterprises Power to Disable Copilot in Windows 11          *

Surge in Social Media Scams Drives Billions in Losses, FTC Warns          *

Medtronic Confirms Data Breach Following Hackers’ Claim of 9 Million Records Stolen          *

Linux ELF Malware Generator Evades Machine Learning Detection Using Semantic-Preserving Transformations          *

Multi-Stage Malware Campaign Uses Obfuscation and Trusted Services for Evasion          *

Bitwarden CLI Compromise Incident Raises Supply Chain Security Concerns          *

Malware Spread Through Fake Income Tax Notices          *

PhantomCore Exploits TrueConf Vulnerabilities to Breach Russian Networks          *

73 Malicious VS Code Extensions Discovered Spreading GlassWorm v2 Malware          *

ClickFix Variant Uses Native Windows Tools for Stealth Malware Execution          *

Vidar Malware Hides Second-Stage Payloads in JPEG and TXT Files to Avoid Detection          *

Microsoft Store App Under Fire for Silent Data Exfiltration Activities          *

Nessus Agent Vulnerability on Windows Enables Privilege Escalation          *

Malware-Laced Excel Attacks Target Pharma Sector          *

Cybersecurity Alert Vibing Malware Like Behavior in Productivity App          *

Carlson VASCO-B GNSS Vulnerability (CVE-2026-3893) Allows Unauthorized Remote Control of Critical Functions          *

Microsoft Confirms Outlook.com Disruption Impacting Email Services          *

Attackers Exploit Multiple Bugs to Compromise CODESYS Applications          *

Pentest AI Agents Toolkit Enhances Offensive Security Workflows          *

Metabase Enterprise RCE Vulnerability Exploited with Publicly Available Proof-of-Concept          *

Critical Privilege Escalation Flaw in Microsoft Entra ID Agent Identity Platform          *

Critical Privilege Escalation Flaw in Microsoft Entra ID Agent Identity Platform          *

CISA Flags Four Actively Exploited Vulnerabilities, Orders Federal Action by May 2026          *

Itron Inc. Reveals Cyber Intrusion Affecting Internal IT Network          *

Deceptive CAPTCHA Scheme Exploits Users for Premium SMS Fraud          *

Attackers Exploit File Upload Vulnerability in Breeze Cache WordPress Plugin          *

UNC6692 IT Helpdesk Impersonation via Microsoft Teams Enables Enterprise Malware Deployment          *

FIRESTARTER Backdoor Breaches Cisco Firepower, Persists Beyond Security Patches          *

UK reports Chinese cyber groups using distributed proxy networks to avoid detection          *

NGate Android Malware Variant Exploits NFC via Trojanized Payment App          *

Claude Mythos Uncovers 271 Zero-Day Vulnerabilities in Firefox          *

Void Dokkaebi Campaign Uses Fraudulent Job Interviews for Malware Delivery          *

Python Asyncio Vulnerability (CVE-2026-3298) Enables Out-of-Bounds Write on Windows          *

Social Engineering Campaign Exploits Microsoft Teams to Deploy SNOW Malware          *

Rituals Confirms Data Breach Impacting Customer Information          *

Trigona Ransomware Campaign Leveraging Custom Exfiltration Tool for Data Theft          *

GopherWhisper APT Campaign Using SaaS Platforms for Covert C2          *

Microsoft Confirms Microsoft Edge Update Bug Blocking Microsoft Teams Meeting Access          *

Bitwarden CLI NPM Package Compromised to Steal Developer Credentials          *

Kyber Ransomware Targets Windows and ESXi Systems          *

Mirai Operators Abuse D-Link Router Flaw for Botnet Infections          *

Caller as a Service Fraud Expands Organized Scam Operations          *

New Compromises Surface in Vercel Systems Linked to Context.ai Breach          *

GopherWhisper Cyber Espionage Campaign Targets Mongolian Government Systems          *

Rituals Reports Data Breach Impacting Customer Information          *

Fake TradingView AI Agent Portal is Delivering Needle Stealer Malware through Malicious TradingClaw Site          *

Npm Supply Chain Attack Turns Hugging Face into Malware Delivery and Data Exfiltration Hub          *

Severe Vulnerability in Pack2TheRoot Leads to Full System Compromise          *

Malicious Xinference PyPI Packages Deliver Infostealer Targeting Developer Credentials          *

Checkmarx KICS Docker Repository Compromised in Supply Chain Attack          *

LMDeploy SSRF Vulnerability (CVE-2026-33626) Actively Exploited to Access Internal Services          *

Mozilla Firefox 150 Fixes Critical Use-After-Free Vulnerabilities Enabling RCE          *

SmartLoader and StealC Malware Distributed Through 109 Fraudulent GitHub Repositories          *

Inside the Rise of Fintech Based Money Mule Operations in France          *

Critical Spring Authorization Server Vulnerability (CVE-2026-22752)          *

SIM Farm-as-a-Service Operation Spanning 87 Panels Across 17 Countries Exposed          *

Severe Bamboo Security Bug Enables Unauthorized Command Execution          *

Amazon–Anthropic AI Compute Expansion          *

Auraboros RAT: Open C2 Panel Exposes Powerful Spy Toolkit          *

Malicious Google Ads Campaign Targets Crypto Users with Wallet Drainers          *

CrowdStrike LogScale Vulnerability Exposes Servers to Arbitrary File Read Attacks          *

Emergency .NET 10.0.7 Patch Issued by Microsoft for Critical Elevation of Privilege Vulnerability          *

Harvester Uses Microsoft Graph API to Deploy GoGra Backdoor on Linux Systems in South Asia          *

Namastex Supply Chain Breach Enables CanisterWorm Propagation Across npm and PyPI          *

BlueHammer Windows Zero-Day Vulnerability Enables SYSTEM Privilege          *

Cyberattack on ANTS Raises Concerns Over Citizen Data Exposure          *

CISA Warns of Active Threats Exploiting Cisco Catalyst SD-WAN Manager Vulnerabilities          *

Lotus Data Wiper Attack on Venezuelan Energy Sector          *

Apache Syncope RCE Vulnerability Enables Unauthorized Remote Code Execution          *

Ofcom Investigates Telegram and Other Platforms Over Online Safety Violations          *

BlackCat Ransomware Insider Incident          *

Microsoft Detects Sapphire Sleet Targeting macOS Through AppleScript and Social Engineering Attacks          *

Attackers Exploit GitHub Issue Notifications for OAuth Phishing Targeting Developers          *

Reducing Fraud at Every Customer Touchpoint Without Disruption          *

Prompt Injection via GitHub Comments Affects Claude Code Security Review, Google Gemini CLI Action, and GitHub Copilot Agent          *

JanaWare Ransomware Targets Turkish Users Using Customized Adwind RAT          *

Windows Snipping Tool Vulnerability Exposes NTLM Hashes via Malicious URI Exploitation          *

OAuth Phishing Campaign Exploits Legitimate Authentication Flows to Hijack Accounts          *

Gh0st RAT and CloverPlus Deployed in Coordinated Dual-Malware Attack Campaign          *

SGLang Remote Code Execution Vulnerability (CVE-2026-5760) via Malicious GGUF Models          *

iTerm2 Bug Turns Simple File Viewing into Code Execution Risk          *

North Korea-Linked UNC1069 Targets Crypto Professionals via Fake Meetings          *

Intel Utility Hijacked via AppDomain to Deploy Stealth Malware          *

Android Banking Malware Campaign Targeting Financial Data          *

Coordinated Cyber Operations by Iran’s MOIS Hidden Behind Multiple Personas          *

Abuse of Microsoft Teams and Quick Assist Enables Enterprise Compromise          *

Iranian State Actor Operates Coordinated Cyber Campaign Leveraging Rebranded Threat Clusters          *

British Cybercriminal Admits Role in SIM Swap Crypto Theft Attacks          *

Reported API Vulnerability in Lovable AI App Builder Exposes Thousands of Projects          *

Malware Using Microsoft-Signed Binaries Achieves Persistence and Command-and-Control          *

Hackers Using FUD Crypter to Evade Detection and Deploy Malware          *

MiningDropper Malware Targets Android Devices with Multi-Stage Payload Delivery          *

Claude Opus-Assisted Chrome Exploit Chain Demonstration (CVE-2026-5873)          *

Critical Vulnerability in Protobuf Library Allows Arbitrary JavaScript Code Execution          *

New Nexcorium Botnet Targets TBK DVR Vulnerability for IoT Attacks          *

Trusted Security Organizations Worldwide Gain Access to GPT-5.4-Cyber          *

NIST Prioritizes High-Risk Vulnerabilities in Major NVD Policy Shift          *

Vercel Security Breach Linked to Third-Party AI Tool and Data Sale Claims          *

TP-Link Routers Targeted by Mirai Malware Exploiting CVE-2023-33538          *

Apple Account Alert Abuse Used for Phishing Attacks          *

Google Expands Gemini AI to Combat Malicious Ads at Scale          *

AI SOC Limitations Highlight Need for Deeper Security Automation          *

Email-Borne Worm Threat Wave Targets Industrial Systems via Phishing Campaigns          *

Phishing-Delivered Backdoor Worms Drive Elevated ICS Infection Rates Globally          *

FortiSandbox Security Flaw Allows Arbitrary Command Execution Following PoC Release          *

Obsidian Plugin Abuse Delivers PHANTOMPULSE RAT in Targeted Attacks          *

Attackers Exploit SEO Poisoning to Install RMM Tool via Trusted Microsoft Executable          *

CISA Warns of Active Exploitation of Apache ActiveMQ Vulnerability          *

Cisco Webex Flaw Enables User Impersonation Attacks          *

JanelaRAT Banking Trojan Targets Latin American Users with Advanced Session Hijacking Techniques          *

Malicious Zoom SDK Update Powers Sapphire Sleet Advanced macOS Intrusion Chain          *

Critical Flowise Vulnerability Allows Remote Command Execution via MCP Adapters          *

Critical Vulnerabilities Exposed in EU Age Verification App          *

Cyber-Enabled Cargo Theft Targeting Trucking Industry          *

UAC-0247 Attackers Target Hospitals and Governments for Credential and WhatsApp Data Harvesting          *

Censys Warns of 6 Million Public-Facing FTP Servers Exposed to Security Risks          *

Two U.S. Nationals Sentenced in $5 Million DPRK IT Worker Fraud Scheme          *

Banking Malware JanelaRAT Intensifies Attacks Across Latin America          *

New ZionSiphon Malware Aims to Disrupt Water Infrastructure Operations          *

Operation PowerOFF Uncovers 75K DDoS Users and Dismantles 53 Malicious Domains          *

Critical wolfSSL Vulnerability Enables Forged Certificate Acceptance via Weak Signature Validation          *

FBI Takedown of W3LL Phishing Network          *

AgingFly Malware Targets Ukraine Critical Sectors          *

Deterministic Agentic AI Architecture Enhances Reliability and Control          *

Malicious Chrome Extensions Target User Accounts and Data          *

PHP Composer Perforce VCS Driver Command Injection Vulnerabilities Enable Arbitrary Code Execution          *

Rockstar Games Analytics Data Leaked Following Third-Party Security Incident          *

Microsoft Patch Tuesday Security Advisory – April 2026          *

PlugX USB Worm Activity Spreads Globally Through DLL Sideloading and USB Propagation          *

PowMix Botnet Targets Czech Employees with Stealthy Randomized C2 Communication          *

Critical nginx-ui Vulnerability (CVE-2026-33032) Allows Complete Nginx Server Compromise          *

Critical Cisco ISE Vulnerabilities Enable Remote Code Execution          *

Hackers Exploit n8n Workflow Automation Platform via Malicious npm Package          *

Microsoft Defender Vulnerability Exploited via Newly Published PoC Code          *

Google Cloud Storage Abuse for Malware Delivery          *

Critical Splunk RCE Vulnerability (CVE-2026-20204) Exposes Enterprise and Cloud Systems          *

MuddyWater-Style Reconnaissance Campaign Targets 12,000+ Systems Across Middle East          *

Block the Prompt, Not the Work: The End of “Doctor No”          *

Transportation Security in the Age of Connected Vehicles          *

AI-Powered Pushpaganda Campaign Abuses Google Discover for Scareware and Ad Fraud          *

n8n Webhook Abuse Campaign Enables Malware Delivery via Phishing Emails          *

Command Injection Vulnerabilities in Composer (PHP Package Manager)          *

Basic-Fit Hit by Massive Data Breach Impacting Users Worldwide          *

Major WordPress Supply Chain Attack: Trusted Plugins Used to Deploy Hidden Backdoors          *

RokRAT Malware Delivered Through Facebook Social Engineering by APT37          *

BitLocker Security Flaws (CVE-2025-55333, CVE-2025-55338) Allow Unauthorized Access to Encrypted Drives          *

Okta Under Attack: Credential-Based Intrusions Target Identity Infrastructure          *

Agentic AI Browsers Introduce Critical Security Risks Enabling Prompt Injection Attacks          *

Mirax Android RAT Abuses Meta Ads to Deploy Proxy Enabled Malware at Scale          *

Extortion Attempt Follows Confirmed Data Breach at McGraw-Hill          *

Chrome Introduces DBSC to Prevent Session Hijacking          *

Strengthening Identity Security Through a Practical Zero Trust Approach          *

Critical Security Flaws Addressed in New Nginx 1.29.8 and FreeNginx Releases          *

ShinyHunters Leak Rockstar Games Data Following Cyberattack          *

Critical wolfSSL Vulnerability Enables Forged Certificate Acceptance via Weak Signature Validation          *

Advanced Storm Infostealer Steals Sessions Without Local Detection          *

Booking.com Data Breach Exposes User Reservation Details, Triggers Security Alerts          *

Phishing Campaigns Leverage GitHub and Jira Notification Systems to Evade Detection          *

Analyzing the Trade-off Between Processing Power and Memory Availability          *

EncryptInterceptor Bypass Vulnerability Impacts Apache Tomcat Systems          *

Social Engineering Campaign by APT37 Distributes RokRAT via Fake Profiles          *

EDR Killers Become Core Tool in Modern Ransomware Attacks          *

Hackers Abuse MSBuild LOLBin to Bypass Detection in Fileless Windows Attacks          *

Axios Flaw Exposes Applications to RCE and Cloud Credential Theft          *

Iranian APT Campaign Targets Critical Infrastructure and Government Entities          *

Marimo Pre-Auth RCE Vulnerability (CVE-2026-39987) Under Active Exploitation          *

Claude and ChatGPT Exploited Through Prompt Injection to Leak Sensitive Data          *

Fraudulent BTS Tour Ticket Scams Target Fans Globally          *

Adobe Acrobat Reader Zero-Day Vulnerability (CVE-2026-34621)          *

Global Crypto Fraud Crackdown: Operation Atlantic          *

Attackers Use CPUID Breach to Deliver STX RAT via Altered Downloads          *

Storm-2755 AiTM Campaign Hijacks Microsoft 365 Sessions to Redirect Payroll Funds          *

Chrome Device-Bound Sessions to Prevent Cookie Theft          *

Diagnosing High CPU and Memory Utilization in Google Chrome Using Built-in Task Manager          *

GlassWorm Campaign Uses Malicious VS Code Extension to Infect Developer IDEs          *

Critical EngageSDK Vulnerability Impacts Millions of Crypto Wallets          *

Hack-for-Hire Campaign Linked to Bitter Targets Journalists in MENA          *

ChainShell Attack: MuddyWater Leverages Russian MaaS Tools          *

MuddyWater Adopts Russian MaaS Tools for Advanced Cyber Espionage Campaigns          *

HPE Aruba Private 5G Security Vulnerability Exposes Systems to Credential Theft          *

Critical Flaws in TP-Link Archer AX53 Router Allow Full System Takeover          *

Critical GitLab Vulnerabilities Enable DoS and Unauthorized Server-Side Actions          *

STX RAT Evades Detection with Hidden Remote Access and Data Theft Capabilities          *

Stolen Credentials Turn MFA into Another Target for Attackers          *

Stolen Credentials Turn MFA into Another Target for Attackers          *

Massive Data Breach at Tianjin Supercomputing Center Exposes Sensitive Information          *

EngageLab SDK Vulnerability Exposes 50M+ Android Users to Data Access Risk          *

UAT-10362 Targets Taiwanese NGOs with Spear-Phishing and Malware Campaign          *

Automated Pentesting Tools Facing Modern Security Limitations          *

Cybercriminals Use VENOM Toolkit to Bypass MFA and Capture Microsoft Logins          *

ChipSoft Ransomware Attack Disrupts Dutch Healthcare Systems          *

Hackers Use Pixel-Large SVG Trick to Hide Credit Card Stealer in Websites          *

Critical GitLab Vulnerabilities Enable DoS and Unauthorized Server-Side Actions          *

Magento Under Attack as SVG-Based Skimmer Steals Payment Data          *

Cross-Platform Phishing Campaign Targets High-Profile Journalists and Government Critics          *

Hackers Exploit Smart Slider 3 Pro Update Mechanism to Push Malicious WordPress and Joomla Versions          *

LucidRook Malware Spread Through Spear-Phishing Attacks on Taiwanese NGOs          *

Eurail Data Breach Impacts 300,000 Individuals, Exposes Sensitive Traveler Data          *

Chrome WebML Flaws Expose Systems to Arbitrary Code Execution Attacks          *

Hackers Impersonate Linux Foundation Leaders to Target Open-Source Developers via Slack          *

CISA Flags Actively Exploited Ivanti EPMM Vulnerabilities as High Risk to Enterprises          *

GitLab Vulnerabilities Allow Cross-Site Scripting and Denial-of-Service Attacks (Multiple CVEs)          *

SonicWall Vulnerabilities Allow SQL Injection and Privilege Escalation Attacks          *

Undetected ActiveMQ Flaw Allows Hackers to Execute Commands Remotely          *

Hackers Target Adobe Reader Zero-Day Vulnerability Enabling Data Theft and RCE          *

Windows 11 Update Causes BitLocker Recovery Issue          *

All-in-One AI Platform Emerges as a Cost-Saving Alternative to Multiple Subscriptions for $100          *

Cyber Attacks by Iran-Backed Hackers Hit U.S. Critical Systems          *

Multiple Critical Security Vulnerabilities Found in IBM Verify Access and Identity Systems          *

EvilTokens Phishing Campaign Exploiting Microsoft 365 OAuth Tokens          *

New Chaos Malware Variant Expands to Cloud Attacks with SOCKS Proxy Capability          *

APT28 PRISMEX Malware Campaign Targets Ukraine and NATO Allies          *

Snowflake Customers Impacted by Data Theft Following SaaS Integrator Breach          *

Anthropic Introduces Claude Mythos Preview for AI-Powered Zero-Day Vulnerability Detection          *

Masjesu Botnet Exploits IoT Devices to Launch High Volume DDoS Attacks          *

Docker Registry Authorization Bypass Vulnerability (CVE-2025-4095) Allows Unauthorized Image Access on macOS          *

OpenSSL Releases Patches for Multiple Cryptographic and Parsing Flaws          *

BPFDoor Malware Evolves with Stealthy Stateless C2 and ICMP Relay Techniques          *

Russian State-Linked Hackers Exploit Routers for Global Espionage and AiTM Attacks          *

Critical CUPS Vulnerabilities Enable Remote Code Execution and Root Privilege Escalation          *

Critical CUPS Vulnerabilities Enable Remote Code Execution and Root Privilege Escalation          *

Windmill Vulnerabilities Expose Systems to Remote Code Execution Attacks          *

Attackers Use Fake Gemini Package to Extract AI Tokens          *

Recurring Credential Incidents and Their Hidden Impact          *

GPUBreach GPU Attack Leads to Full System Compromise          *

Mass Exploitation of ComfyUI Instances Fuels Cryptomining Botnet Campaign          *

Phishing Campaigns Leverage LogMeIn Resolve and ScreenConnect for Remote Access Exploitation          *

Fake TradingView Premium Malware Campaign Targets Crypto Users          *

Windows Targeted by Tor-Enabled ClickFix Attack Delivering Node.js RAT          *

Critical Android Zero-Click DoS and Hardware Security Flaws Impact Framework and StrongBox Components Worldwide          *

Storm-1175 Targeting Cloud Identity Systems          *

Serious ShareFile Security Flaws Risk Unauthorized Server Access          *

Critical Flowise Vulnerability (CVE-2025-59528) Enables Remote Code Execution and Active Exploitation          *

Windows Defender Zero-Day Exploit Enables Security Bypass          *

GroupOffice Vulnerability CVE-2026-34838 Allows Arbitrary Code Execution          *

WordPress Plugin Vulnerability Allows Arbitrary File Upload and Server Takeover          *

Malicious PyPI Package Abuses AI Proxy Layer to Capture Claude Prompts and Leak Telemetry          *

South Korea Targeted by LNK Malware Campaign Using GitHub Infrastructure          *

Critical Dgraph Database Authentication Bypass Vulnerability          *

North Korea Uses Modular Malware to Frustrate Attribution and Takedowns          *

Fake ChatGPT Ad Blocker Extension Found Harvesting Private Chats          *

Hackers Compromise ILSpy WordPress Site to Spread Malware          *

Critical Flaws in Apache Traffic Server Could Disrupt Enterprise Networks          *

CISA Lists TrueConf Vulnerability in KEV Due to Active Exploitation          *

Trojanized Strapi Plugins on npm Enable Silent Data Theft and Persistent Access          *

Claude Access Limited as Anthropic Disables Third-Party Integrations Including OpenClaw          *

Hidden LinkedIn Code Allegedly Detects Installed Software on User Systems          *

Hims & Hers Data Breach Linked to Zendesk Support Ticket System Exposure          *

Top Privileged Access Management (PAM) Solutions and Security Strategies for 2026          *

Top IAM Companies Driving Identity Security in 2026          *

New QR Code Phishing Scam Targets Drivers with Fake Court Notices          *

Emergency Update Released for Actively Attacked FortiClient EMS Flaw          *

New SparkCat Malware Variant Targets iOS and Android Apps, Steals Crypto Wallet Recovery Phrase Images          *

TeamPCP Attack on European Commission Cloud Results in Cross Entity Data Leak          *

Microsoft Initiates Forced Upgrade Cycle for Windows 11 24H2 Systems to Windows 11 25H2 for Unmanaged Devices          *

NoVoice Malware Campaign on Google Play          *

RFQ Themed Multi Stage Malware Campaign Delivers Fileless Cobalt Strike Payload          *

Apple iOS 18.7.7 Update Fixes Critical DarkSword Web Exploit and Multiple Security Flaws          *

Handala Hackers Allege Compromise of Israeli Defense Firm          *

Akira-Style Ransomware Campaign Targets Windows Users Across South America          *

RFQ-Themed Malware Campaign Uses HTML Attachments to Steal Credentials          *

Critical Progress ShareFile Vulnerabilities Chained for Pre-Authentication Remote Code Execution Attacks          *

FBI Issues Alert on Potential Data Exposure via Chinese Mobile Apps          *

Critical F5 BIG-IP Flaw Leaves Thousands of APM Instances at Risk          *

Critical Vulnerability in Cisco Smart Software Manager On-Prem Enables Unauthenticated Root Command Execution          *

Cybercriminals Use Vacant Homes to Intercept Mail in Hybrid Attacks          *

Critical PX4 Autopilot Vulnerability Enables Full Drone Takeover via MAVLink Exploitation          *

Reservation Hijack Scam Exploiting Hotel Booking Systems for Payment Fraud          *

Public Exploit Code Targets nginx-ui Backup Restore Flaw          *

Casbaneiro Banking Trojan Spread Through Sophisticated Phishing Operations          *

Suspected Data Breach at Cisco Linked to ShinyHunters Threat Group          *

Vim Modeline Vulnerability Enables Arbitrary OS Command Execution          *

Ethereum Powered EtherRAT Malware Uses EtherHiding for Stealthy Blockchain Based C2          *

Microsoft Teams EXIF Data Removal Feature Enhances Privacy          *

CERT-UA Impersonation Campaign Delivers AGEWHEEZE Malware to One Million Emails          *

Critical nginx-ui Backup Vulnerability Demonstrated Through PoC Code          *

WhatsApp-Based Malware Attack Uses UAC Bypass to Compromise Windows Devices          *

Privilege Escalation Flaw in Google Vertex AI Exposes Critical Cloud Resources          *

Critical CrewAI Vulnerabilities Enable Prompt Injection, RCE, and Sandbox Escape Risks          *

Critical Unauthenticated RCE in Oracle WebLogic Server Actively Exploited in the Wild Alongside Legacy Vulnerabilities          *

Attackers Use Telegram-Based ResokerRAT for Stealthy Access and Data Capture          *

Vertex AI Data Exposure Vulnerability          *

Attackers Abuse Windows Utilities to Bypass AV and Launch Ransomware          *

XLoader Malware Enhances Obfuscation Techniques and Conceals C2 Communications Using Decoy Servers          *

Apple Introduces macOS Terminal Alert to Prevent ClickFix Attacks          *

Operation TrueChaos: TrueConf Zero-Day Exploited in Targeted Government Attacks          *

Critical Vulnerability in Vertex AI Risks Exposure of Google Cloud Data and Artifacts          *

PNG File Vulnerabilities Enable Sensitive Data Leakage via Embedded Data Channels          *

Tax Filing Scams Used to Deliver Malware in 2026 Campaigns          *

New EvilTokens Phishing Kit Exploits Microsoft Authentication Mechanisms          *

Axios npm Supply Chain Attack Delivers RAT via Malicious Dependency Injection          *

ClickFix Variant Using Rundll32 and WebDAV for Defense Evasion          *

India Enforces Ban on Chinese CCTV Devices to Strengthen Cybersecurity and Data Sovereignty          *

North Korean Actor Exploits Stolen Identity and AI Tools in Employment Scam          *

Notepad++ v8.9.3 Released with Security Fixes and Stability Improvements          *

Grafana Vulnerabilities Expose Systems to Remote Code Execution Attacks          *

Exposure of TheGentlemen Ransomware Toolkit Reveals Active Attack Infrastructure and Stolen Credentials          *

Security Flaws in ChatGPT and Codex Fixed by OpenAI          *

CareCloud Data Breach Exposes Patient Information          *

CrySome RAT Upgrade Advanced .NET Malware with AV Evasion and Hidden VNC Functionality          *

WordPress Plugin Flaw Exposes Sensitive Files          *

Personal Emails of FBI Director Compromised in Iran?Linked Cyberattack          *

Russian CTRL Toolkit Spread Through Malicious LNK Files Hijacks RDP via FRP Tunnels          *

New Homoglyph Techniques Enable Advanced Domain Spoofing Attacks          *

Telnyx Python SDK Supply Chain Attack Delivers Malware via WAV Steganography          *

Critical Stored XSS Flaw Found in Jira Work Management          *

DeepLoad Malware Leveraging ClickFix for Stealthy Credential Theft          *

Citrix NetScaler Vulnerability (CVE-2026-3055) Targeted by Active Reconnaissance Campaigns          *

VoidLink Demonstrates Real-World Impact of AI-Assisted Malware Creation          *

TA446 Spear-Phishing Campaign Leverages One-Click DarkSword iOS Exploit for Covert Device Compromise          *

BlankGrabber Malware Targets Windows Systems to Steal Sensitive Data          *

Unauthorized Access Detected in European Commission Cloud Services          *

Malicious Browser Extensions Enable “Prompt Poaching” Attacks on AI Users          *

BIND 9 Security Flaws Allow Attackers to Bypass Security Controls and Crash Servers          *

Personal Email of FBI Director Kash Patel Compromised in Hack          *

New Infinity Stealer Malware Exploits ClickFix Lures to Steal Data from macOS Systems          *

Smart Slider Plugin File Read Vulnerability          *

Financial Institutions Targeted by PXA Stealer Through Malicious ZIP Files          *

Trivy Supply Chain Compromise (CVE-2026-33634) Enables CI/CD Secret Exfiltration          *

Threat Actors Deploy BRUSHWORM and BRUSHLOGGER Against Financial Firm in South Asia          *

TeamPCP Targets Telnyx Python Library to Expand Supply Chain Intrusions          *

Silver Fox Spear-Phishing Campaign Delivers ValleyRAT via Tax-Themed HR and Finance Lures in Japan          *

Threatsday Bulletin Highlights PQC Transition and Rising AI Security Vulnerabilities          *

Red Hat Alerts Users to Malware Hidden in Widely Used Linux Tool, Enabling Unauthorized Access          *

VoidLink Rootkit: A New Hidden Threat in Linux Systems          *

Leak Bazaar Platform Enables Sale of Stolen Data from Global Breaches          *

Stealthy Telecom Espionage Campaign Exploiting Exposed VPN and Edge Devices          *

Ajax football club Data Breach Exposes Fan Information and Enables Ticket Hijacking          *

Claude Extension Zero-Click XSS Prompt Injection Vulnerability          *

Coruna iOS Kit Revives Operation Triangulation Exploits, Expands into Widespread Threat Campaigns          *

Critical Privilege Escalation Vulnerability Discovered in IDrive Windows Client          *

GoHarbor Addresses Critical Harbor Flaw Allowing Full Registry Compromise          *

High-Severity Ivanti EPMM Vulnerabilities Exploited for Rapid Database Extraction          *

Critical NVIDIA Flaws Enable Remote Code Execution and DoS Attacks          *

New Synology DSM Vulnerability Enables Remote File Access Without Authentication          *

GhostClaw Malware Campaign Targets macOS via Malicious GitHub Repositories          *

New Attack Campaign Leveraging Kiss Loader with Early Bird APC Injection          *

Fake Screenshot Lures Drive New Wave of Social Engineering Attacks          *

Malicious npm Packages Abuse Post-Install Scripts to Deliver RAT Using Deceptive Install Output          *

Bubble AI App Builder Abused to Steal Microsoft Account Credentials via Phishing Campaign          *

Users Advised Patching Critical TP-Link Router Vulnerability          *

Paid AI Accounts Targeted in Underground Markets          *

GitHub Expands Security Coverage by Introducing AI-Driven Bug Detection          *

PolyShell Attacks Target 56% of Vulnerable Magento Stores with Malicious Implants          *

Citrix Patches Critical NetScaler Flaws Resembling CitrixBleed Attacks          *

New Torg Grabber Infostealer Exploits ClickFix to Target Crypto Wallet Users          *

FCC Ban on Foreign-Made Routers Over Cybersecurity and Supply Chain Risks          *

AI-Driven GitHub Campaign Uses Trojanized OpenClaw Repositories to Deliver Infostealer Malware          *

Malvertising Campaign Abuses ScreenConnect and Huawei Driver for EDR Evasion          *

Tycoon2FA Attackers Restart Cloud Account Phishing Operations After Infrastructure Recovery          *

Supply Chain Attack Hits LiteLLM PyPI Package, Stealing Sensitive Credentials          *

ICE Cloud Malware Campaign Targeting Exposed MS-SQL Servers by Larva-26002          *

CanisterWorm Kubernetes Wiper Targets Iran-Based Infrastructure          *

PTC Windchill and FlexPLM Vulnerability Poses Imminent Cyber Threat          *

Multiple Vulnerabilities in TP-Link Devices Enable Arbitrary Command Execution          *

Critical Security Flaws Found in Dell Wyse Management Suite          *

Citrix NetScaler Security Flaws Enable Data Disclosure and Session Hijacking Risks          *

Critical Vulnerabilities in TP-Link Archer Routers Enable Full Device Compromise          *

Critical NetScaler Vulnerabilities Allow Unauthorized Access & Memory Leak          *

Crunchyroll Data Breach Exposes Alleged 100 GB of User Data          *

CISA Alerts on Active Exploitation of Craft CMS Code Injection Vulnerability          *

Eight Attack Vectors in AWS Bedrock AI Platform Enable Data Exfiltration and Agent Hijacking Risks          *

Over 500,000 End-of-Life Microsoft IIS Servers Exposed Online, Creating Critical Global Security Risk          *

CanisterWorm Turns Trusted npm Packages into Malware Distribution Channels          *

CISA Warns of Actively Exploited Apple Vulnerabilities          *

LAPSUS$ Alleged AstraZeneca Data Breach and Private Sale of Sensitive Data          *

MioLab Infostealer Targets macOS With ClickFix Tactics and Wallet Stealing Capabilities          *

Google Ads Abuse Delivers Tax Scam Malware Using BYOVD Technique for Defense Evasion          *

Fake Download Sites Push AsyncRAT Through SEO Poisoning Tactics          *

Prolonged Spy Campaign Targets Libya’s Critical Sectors Using AsyncRAT          *

Oblivion RAT Masquerading Campaign Targets Android Devices with Fake App Updates          *

Bamboo Data Center and Server Flaw Allows Remote Code Execution          *

Critical Oracle RCE Vulnerability Impacts Identity Manager and Web Services Manager          *

Quest KACE SMA Vulnerabilities Exploited to Compromise Systems          *

CISA Warns of Actively Exploited Apple Flaws Enabling Full Device Compromise          *

Critical QNAP QVR Pro Vulnerability Allows Remote Attackers to Gain System Access          *

Critical UNISOC Modem Flaw Enables Remote Code Execution via Cellular Calls          *

Critical Langflow Vulnerability CVE-2026-33017 Enables Unauthenticated Remote Code Execution          *

Android Sideloading Security Update and Rising Malware Threats          *

FBI Alerts on Large-Scale Phishing Campaign by Russian Hackers Targeting Signal and WhatsApp          *

Magento PolyShell Vulnerability          *

Trivy Vulnerability Scanner Compromise Raises Supply Chain Security Concerns          *

Sophisticated PureLog Infostealer Spread via Phishing and Google Ads Malvertising          *

CISA Alerts Active Exploitation of Cisco Secure Firewall Management Center Zero-Day in Ransomware Attacks          *

Allure Security Funding Boost Strengthens AI-Based Online Brand Protection          *

Navia Data Breach Exposes Personal and Health Data of Millions via Vulnerable API Access          *

Iranian Open Server Exposure Uncovers 15-Node Botnet and Relay Network          *

Browser Permission Phishing Campaign Targets Biometric Data          *

Claude AI Vulnerabilities Enable Data Exfiltration via Prompt Injection Attacks          *

Pyronut Malicious Python Package Attack Overview          *

Cyber Espionage Campaign Exploits Judicial Trust to Deliver Rust Malware          *

Horabot Resurfaces in Mexico with Phishing and Email Worm Campaigns          *

IoT Botnet Behind 30 Tbps DDoS Attacks Disrupted by Authorities          *

Cisco Firewall Vulnerability Enables Unauthenticated RCE and Ransomware Deployment          *

LeakNet Enhances Ransomware Attacks Using ClickFix Lures and Stealthy Deno Loader          *

Backdoored Open VSX Extension Campaign Targets Developers via GitHub Downloader          *

Warlock Ransomware Exploits Vulnerable Drivers to Evade Security Defenses          *

WaterPlum Targets VSCode with New ‘StoatWaffle’ Supply Chain Malware          *

Major Data Breach at Aura Impacts 900,000 Contacts          *

Critical ScreenConnect Vulnerability Requires Immediate Upgrade and Security Hardening          *

Critical ScreenConnect Vulnerability Requires Immediate Upgrade and Security Hardening          *

UIDAI Launches Bug Bounty Program to Strengthen Aadhaar Ecosystem Security          *

Fancy Bear Server Leak Exposes Operational Data and Malware Infrastructure          *

CISA Mandates Urgent Patching of Actively Exploited Zimbra XSS Vulnerability          *

FortiClient EMS SQL Injection Vulnerability (CVE-2026-21643)          *

Rust-Based RAT Deployment via Multi-Stage LNK and PowerShell Attack Chain Targeting Judicial Environments          *

A Critical Telnetd Vulnerability Enables Pre-Authentication Remote Code Execution with Root Privileges          *

Ubuntu Desktop Flaw Allows Local Users to Escalate Privileges to Root Access          *

Critical Flaw in Kubernetes NFS CSI Driver Puts Storage Directories at Risk          *

Microsoft Exchange Online Mailbox Outage Disrupts Email Access for Users          *

Windows Security Alert: RegPwn Enables Full SYSTEM Access via Registry Abuse          *

Payload Ransomware Threat Targets Windows and ESXi Systems with Babuk-Style Encryption          *

Authlib Security Flaws Open Door to Padding Oracle and Token Forgery Attacks          *

File Browser Vulnerability Exposes Systems to Privilege Escalation and RCE          *

Angular XSS Flaw Puts Thousands of Web Applications at Risk          *

UK Companies House Security Bug Allows Unauthorized Access to Business Records          *

CISA Warns of Active Exploitation Targeting Wing FTP Server Vulnerability          *

FBI Investigation into Malware-Infected Steam Games Targeting Cryptocurrency Theft          *

Shadow AI Usage Exposes Organizations to Data Leakage Risks          *

GlassWorm Exploits Stolen GitHub Tokens to Inject Force-Push Malware into Python Repositories          *

ClickFix-Based Command Paste Attacks Facilitate MacSync Infostealer Deployment on macOS          *

Android 17 Advanced Protection Mode Blocks Misuse of Accessibility Services          *

Coordinated Wiper Attacks Target Organizations to Destroy Critical Data          *

DRILLAPP Backdoor Targets Ukraine Using Microsoft Edge Debugging for Stealth Espionage          *

IBM X-Force Discovers Slopoly Malware Used in Hive0163 Ransomware Attacks          *

Google Looker Studio Vulnerabilities LeakyLooker Expose Sensitive Cloud Data          *

Critical RCE Vulnerability Prompts Microsoft to Block Automated Installation in Windows 11 and Server 2025          *

Fake FileZilla Downloads Used to Distribute Credential-Stealing Malware          *

RondoDox Botnet Growth Fueled by Exploitation of 174 Vulnerabilities via Residential IPs          *

KakaoTalk Account Takeover Campaign Targets Users Through Credential Harvesting          *

FortiGate Firewalls Hacked by Automated Scripts to Steal Network Configurations          *

OpenClaw AI Agents Exposed to Indirect Prompt Injection Attacks          *

BetterLeaks Empowers Dev Teams to Prevent Credential Exposure Globally          *

Critical LangSmith Vulnerability Enables Account Takeover and Token Theft          *

Poland’s National Centre for Nuclear Research Targeted by Cyberattack          *

Microsoft Releases KB5084597 Hotpatch Fixing RRAS Remote Code Execution Vulnerabilities in Windows 11 Enterprise          *

Global Authorities Disable 45,000 Malicious IPs Linked to Cybercrime Campaigns          *

The Claude Code Trap: Bitdefender Unmasks Fake Google Ads Hijacking Developer Terminals          *

New Critical AdGuard Home Vulnerability Lets Attackers Bypass Authentication          *

Perplexity Computer Token Exposure Raises Security and Billing Concerns          *

Fileless Remcos RAT Campaign Uses JavaScript and PowerShell for Stealth Attacks          *

Law Enforcement Dismantles SocksEscort ResidentialProx y Botnet Exploiting Compromised Routers          *

Poland’s Nuclear Research Centre Targeted by Cyberattack          *

Hackers Breach Loblaw IT Network, Access Customer Data          *

SEO Poisoning Campaign Delivers Trojan VPN Software to Steal Credentials          *

Veeam Backup & Replication Security Update Fixes Critical Vulnerabilities          *

Two Chrome Zero-Day Vulnerabilities (CVE-2026-3909 & CVE-2026-3910) Actively Exploited to Execute Malicious Code          *

1 Click ZITADEL XSS Vulnerability Enables Full Account Takeover          *

Critical MediaTek Flaw Allows Android Lock Screen PIN Extraction in Under 45 Seconds          *

CrackArmor Exploit Threatens Root Access on Millions of Linux Systems          *

OpenSSH GSSAPI Key Exchange Vulnerability Causes Remote SSH Process Termination          *

Starbucks Data Breach Exposes Personal Data of Customers          *

Starbucks Data Breach Exposes Personal Data of Customers          *

Critical CVE-2025-0113 Found in Cortex XDR’s Broker VM Architecture          *

TaxiSpy Android Banking Trojan Enables Remote Access and Credential Theft          *

SocksEscort Residential Proxy Network Leveraged AVRecon Malware to Exploit Global Router Infrastructure          *

TELUS Digital Hit by Data Breach After Hacker Group Claims Massive Theft          *

High-Severity SQL Injection Flaw in Elementor Ally Plugin Exposes 250K+ WordPress Sites          *

Apple Releases Security Patch for Coruna Exploit on Older iOS Devices          *

Ericsson U.S. Discloses Data Breach Following Third-Party Service Provider Hack          *

Six Android Malware Families Target Pix Payment System to Steal Banking Credentials          *

Email and Teams Summaries in Microsoft 365 Copilot Vulnerable to Cross-Prompt Injection          *

Hardware Flaw in MediaTek Chip Exposes Android Devices to PIN and Data Theft          *

Veeam Backup & Replication Critical RCE and Privilege Escalation Flaws Expose Backup Servers          *

Hive0163 Deploys AI-Assisted Slopoly Malware to Maintain Persistent Access in Ransomware Attacks          *

Mutable Tag Vulnerability in Xygeni GitHub Action Puts CI/CD Pipelines at Risk (CVSS 9.4)          *

macOS Users Targeted by ClickFix Campaign Deploying MacSync Infostealer          *

CISA Warns of Critical Remote Code Execution Vulnerability in n8n          *

Chrome Security Update Fixes 29 Vulnerabilities          *

CastleRAT Campaign Abuses Deno Runtime for Fileless Malware Attacks          *

Palo Alto Cortex XDR Broker Vulnerability Enables Privilege Escalation and Unauthorized Access          *

Stryker Global Network Disruption Following Cyberattack by Iran-Linked Handala Hacktivist Group          *

Critical Command Injection Flaw Discovered in Splunk Enterprise and Cloud Platforms          *

Malicious npm Package “pino-sdk-v2” Harvests Developer Secrets via Discord Exfiltration          *

CVE-2025-20154 Security Flaw in Cisco Network OS Can Crash Devices Remotely          *

Zombie ZIP Method Helps Malware Evade Antivirus and Security Scanners          *

Android Malware BeatBanker Poses as Starlink App to Steal Data and Control Devices          *

BlackSanta Attack Delivers ISO Payloads Enabling DLL Sideloading and PowerShell Based Execution          *

HPE Issues Warning on Critical AOS-CX Flaw Impacting Enterprise Network Devices          *

Global Infrastructure Disruption Triggers Service Degradation on Instagram Platform          *

UNC6426 Gains AWS Administrative Access Through Compromised NPM Package          *

Microsoft Patch Tuesday Security Advisory – March 2026          *

Microsoft Active Directory Elevation of Privilege Vulnerability Enables Domain Takeover          *

APT-C-23 Uses Fake Red Alert App for Mobile Espionage          *

Fortinet FortiManager fgtupdates Flaw Allows Remote Attackers to Execute Arbitrary Commands          *

Cloudflare Pingora Flaws Enable HTTP Request Smuggling and Cache Poisoning Attacks          *

LeakyLooker Flaws in Google Looker Studio Expose Risk of Cross-Tenant SQL Queries          *

Fake Claude Code Installation Pages Used to Spread Amatera Infostealer Malware          *

Threat Actors Leverage Malformed ZIP Archives to Evade Detection by Antivirus and EDR Platforms          *

KadNap malware hijacks routers enabling anonymous proxy infrastructure for cybercriminal operations          *

KadNap malware hijacks routers enabling anonymous proxy infrastructure for cybercriminal operations          *

Critical Security Flaw in Gogs Allows Silent Overwrite of Git LFS Objects          *

Critical SAP Security Flaws Allowing RCE Patched in Latest Update          *

CISA Warns of Actively Exploited Ivanti Endpoint Manager Authentication Bypass Vulnerability          *

Iran-Linked Seedworm Hackers Target U.S. Critical Infrastructure with New Dindoor Backdoor          *

Chinese APT Campaign Targets Qatar Using PlugX Malware          *

Cyber Espionage Campaign CL-UNK-1068 Targets Asian Critical Infrastructure          *

Malicious AI Browser Extensions Steal Data from Nearly 900,000 Users          *

Hikvision Improper Authentication Flaw Allows Privilege Escalation in Multiple Devices          *

Apache ZooKeeper Vulnerability Exposes Sensitive Data to Attackers          *

macOS Infostealer SHub Delivered via Fake CleanMyMac Site Using ClickFix Terminal Trick          *

Chinese Hackers Exploit Web Servers to Steal Data from Asian Critical Infrastructure          *

Chrome Extension Takeover Leads to Code Injection and Data Theft          *

UNC4899 Breaches Crypto Firm by AirDropping Trojanized File to Developer’s Work Device          *

Abuse of .arpa DNS and IPv6 Tunnels Enables Phishing Campaigns to Evade Defenses          *

ClipXDaemon Malware Hijacks Cryptocurrency Clipboard Data on Linux Systems          *

Critical Authorization Flaws Discovered in Vaultwarden Password Manager          *

Malicious imToken Chrome Extension Steals Crypto Wallet Seed Phrases and Private Keys          *

Hackers Reportedly Selling Exploit for Windows Remote Desktop Services Zero-Day Vulnerability          *

Nginx-UI Vulnerabilities Enable Remote Command Execution and Data Exposure          *

Critical Command Injection Vulnerability Discovered in AVideo Platform          *

Critical ExifTool Flaw Lets Malicious Images Execute Code on macOS          *

Claude Opus 4.6 AI Identifies 22 Security Vulnerabilities in Mozilla Firefox          *

Microsoft Detects Large Scale Data Theft via Fake AI Assistant Browser Extensions          *

Termite Ransomware Intrusions Linked to ClickFix Social Engineering and CastleRAT Malware          *

Stealth Linux Rootkits Exploit Kernel Features for Evasion and Persistence          *

Transparent Tribe Leverages AI to Mass-Generate Malware Implants in Cyber Campaign Targeting India          *

Cisco Catalyst SD-WAN Manager Vulnerabilities (CVE-2026-20128, CVE-2026-20122) Under Active Exploitation          *

MacCMS Websites Compromised in Global RingH23 Malware Campaign          *

China-Nexus Malware Campaign Targeting Telecommunications Providers          *

Global Hacktivist Campaign Triggers 149 DDoS Attacks Amid Middle East Tensions          *

Coruna iOS Exploit Kit Targets iOS 13–17.2.1 with 23 Exploits Across Five Chains          *

Dust Specter APT Targets Iraqi Officials with AI-Assisted Malware Campaign          *

AkzoNobel Confirms Cyberattack on U.S. Facility          *

Google Patches Android Zero-Day Vulnerability (CVE-2026-21385) Actively Exploited in Targeted Attacks          *

UK Warns of Potential Iranian Cyberattack Risks Amid Middle East Conflict          *

Fake Google Security Page PWA Phishing Campaign          *

Cloud Imperium Games Reports Cyberattack Exposing Player Account Data          *

Cyberattack on UH Cancer Center Exposes Personal Data of 1.2 Million          *

LexisNexis Confirms Cyberattack After Hackers Publish Stolen Data          *

OpenStack Vitrage Remote Code Execution Vulnerability          *

Authorities Warn: Sloppy Lemming APT Targets Government Networks          *

Hackers Exploit .arpa Domain Space to Bypass Email Security Filters          *

D-Shortiez Malvertising Exploits WebKit Back-Button for Forced Redirects          *

India-Linked SloppyLemming Uses Rust Malware and ClickOnce Lures Against Government and Telecom Networks          *

Starkiller Phishing Framework Leverages Live Login Proxies to Evade MFA Protections          *

Google Services Abuse Enables Credential Harvesting via Firebase Hosting and Translate Proxy Phishing Infrastructure          *

Critical UXSS Flaw in DuckDuckGo Android Autoconsent JS Bridge Allows Cross-Origin Code Execution          *

OneUptime Authenticated Command Injection Flaw Could Lead to Server Compromise          *

Persistent Session Tokens and Infinite Password Reset Window Vulnerabilities Discovered in Vikunja          *

CVSS 10 Flaw in OneUptime Probe Allows Full System Takeover          *

Angular Server-Side Rendering Flaw Lets Attackers Trigger Unauthorized Requests from Applications          *

Unencrypted Direct TPMS Broadcasts Enable Persistent Vehicle Tracking Across Major Brands          *

Browser Extension Attack Bypasses Security Headers for Stealth Script Execution          *

ClawJacked Vulnerability Allows Malicious Websites to Hijack Local OpenClaw AI Agents via WebSocket          *

Anthropic Confirms Claude AI Service Down in Worldwide Outage          *

Malicious npm Packages Leveraging Pastebin Steganography and Vercel C2 to Target Developers          *

Fake Zoom and Google Meet Phishing Campaigns Deploy Teramind Surveillance Software          *

Ivanti Connect Secure Zero-Day Exploited by RESURGE Malware          *

Phishing Campaign Abuses Windows WebDAV to Deploy RAT Malware          *

Pixel Perfect Extension Exploited to Inject Malicious Scripts and Strip Security Headers          *

OCRFix Botnet Combines ClickFix Phishing and EtherHiding to Obfuscate Blockchain C2 Infrastructure          *

Mysterium VPN Warns of Massive Credential Exposure via Misconfigured .env Files Worldwide          *

Interview Trap: Malicious Next.js Repos Turn Coding Tests into Developer Hacking Tools          *

ManoMano Data Breach Allegedly Impacts 38 Million Users          *

Critical Remote Compromise Risks Identified in Gardyn Smart Garden Systems          *

Dohdoor Malware Expands Operations Against Critical U.S. Institutions          *

Zyxel Multiple Command Injection Vulnerabilities Enable Remote Code Execution          *

North Korean APT37 Deploys Advanced Malware to Compromise Air-Gapped Systems          *

Microsoft Defender Identifies Trojanized Gaming Utility Malware Campaign          *

Malicious Go Crypto Module Steals Passwords, Deploys Rekoobe Backdoor in Developer Environments          *

Critical RCE Vulnerability in Juniper Networks PTX Routers Allows Full Device Compromise          *

OpenClaw and the Enterprise Security Risks of Autonomous AI Agents          *

Aeternum C2 Malware Exploits Polygon Blockchain for Decentralized Command Infrastructure          *

Trojanized Gaming Utilities Deliver Java-Based Remote Access Trojan          *

Marquis Seeks Damages from SonicWall Over Alleged Cloud Security Failure          *

DoH-Based Backdoor Campaign Uses DLL Sideloading and Process Hollowing Against Education and Healthcare Networks          *

Malicious NuGet Package Impersonates Stripe Library to Steal API Keys          *

ResidentBat Android Malware Grants Persistent Mobile Access to Belarusian KGB          *

ServiceNow Patches Critical AI Platform Vulnerability Enabling Unauthenticated RCE          *

Wireshark 4.6.4 Update Fixes Multiple Security Flaws          *

27-Year-Old Telnet Vulnerability Actively Exploited in Modern Attacks          *

Advanced Persistent Threat Utilizing Cloud-Based Command Channels          *

New FreeBSD Vulnerabilities Allow Jail Escapes and Kernel Panics          *

Windows CLFS Driver Vulnerability (CVE-2026-2636) Can Trigger System Crash          *

Critical Zero-Day in Cisco SD-WAN Actively Exploited Since 2023 for Root-Level Access          *

SURXRAT Android RAT Enables Full Device Surveillance and Data Exfiltration          *

New Steaelite RAT Enables Unified Data Theft and Ransomware Operations          *

CISA Confirms Active Exploitation of FileZen Vulnerability (CVE-2026-25108)          *

Chinese AI Distillation Campaign Targeting Anthropic Claude Model          *

Conduent Suffers Massive Data Breach, 8TB Stolen, 25+ Million Americans Impacted          *

Threat Actors Leverage WMI for Stealthy Persistence on Compromised Windows Systems          *

Stealthy NuGet Malware Exploits ASP.NET Identity to Exfiltrate Login Data          *

Critical VMware Aria Operations Vulnerabilities Allow Unauthenticated Remote Code Execution          *

Automated AI Exploits Enable Rapid Active Directory Domination          *

ShinyHunters Extortion Group Claims Data Breach at Odido Impacting Millions          *

CarGurus Data Breach Exposes 12.4 Million User Accounts          *

UnsolicitedBooker Cyber Espionage Campaign Targets Central Asian Telecom Sector With LuciDoor and MarsSnake Backdoors          *

Medusa Ransomware Used by Lazarus Group in Healthcare Attacks Across Middle East and U.S.          *

Ukrainian Government and Finance Networks Hit by Malware Intrusions and Unauthorized Access Operations          *

Wynn Resorts Employee Data Breach Confirmed After Extortion Threat          *

GitHub Codespaces Copilot Exploited in RoguePilot Attack to Extract Sensitive Access Tokens          *

Phishing and Stealer Malware Fuel Record Ransomware Activity in Financial Networks          *

Threat Actors Leverage AI Tools to Achieve Full Domain Compromise in Just 30 Minutes          *

ASP.NET Developers Targeted by Credential-Stealing NuGet Packages          *

AI-Driven Attacks Target FortiGate Devices Using DeepSeek and Claude          *

Malicious OpenClaw Tactics Enable AMOS Infection via Social Engineering          *

ZeroDayRAT Targets Android and iOS Devices for Surveillance and Financial Data Theft          *

Starkiller Phishing Framework Leverages Live Reverse Proxy to Bypass MFA Controls          *

Critical Vulnerability in HPE Telco Service Activator Enables Access Restriction Bypass          *

Critical jsPDF PDF Object Injection Flaw in addJS Enables Malicious Actions Across Enterprise Applications          *

Malware Campaign Exploits Iran Protest Narrative to Deploy RAT Spyware          *

Fraudulent IPTV Apps Distribute Widespread Android Malware Targeting Mobile Banking Users          *

GrayCharlie Hackers Exploit WordPress Sites to Inject Malicious Code          *

AI Platforms Emerging as Covert Communication Paths for Malware          *

Silver Fox APT Deploys DLL Sideloading and BYOVD in Advanced Malware Campaign          *

High-Risk Vulnerability in jsPDF Allows Malicious PDF Object Injection          *

Threat Actors Abuse Multiple AI Services to Compromise 600+ FortiGate Firewall Devices          *

SANDWORMMODE Supply Chain Worm Infects Over 19 Npm Packages to Steal Developer and CICD Secrets          *

SvelteKit Adapter Vulnerability (CVE-2026-27118) Enables Public Caching of Private Data          *

MuddyWater Targets MENA Organizations with Multi-Stage Malware Campaign          *

Credential Theft Exposes 1.2 Million Accounts After Registry Breach at Ministry of Economy and Finance France          *

128 Million Users Exposed by Critical Flaws in Popular VS Code Extensions          *

Operational Breakdown of the Arkanix MaaS Campaign          *

Google Play AI Systems Stop Malicious Apps and Protect User Privacy          *

PayPal Data Breach Exposes Customer Information Following Credential-Based Attack          *

Predictable Password Generation in Large Language Models Exposes Systems to Credential Compromise          *

Severe Security Issues in VS Code Extensions Impact Global Developers          *

Critical Jenkins Flaw Leaves Build Environments Vulnerable to Cross-Site Scripting (XSS) Attacks          *

Apache Tomcat Discloses HTTP Security Constraint Bypass Vulnerability          *

FBI Warns of Ploutus Malware Enabling Cardless ATM Cash-Out Attacks Across the U.S          *

Stealthy Monero Mining Malware Spreads via Cracked Software and USB Drives          *

Hackers Exploit Critical BeyondTrust Vulnerability (CVE-2026-1731) to Deploy VShell & SparkRAT          *

Massiv Android Banking Malware Disguised as IPTV Application          *

Microsoft Patches Critical Notepad RCE Vulnerability (CVE-2026-20841) After PoC Disclosure          *

Microsoft Fixes CVE-2026-26119 Privilege Escalation Flaw in Windows Admin Center          *

Critical DoS Vulnerability Affects 46 Million Users of ‘fast-xml-parser          *

Nearly 1 Million Accounts Exposed in Figure Technology Solutions Security Incident          *

Apache Camel Releases Patches for Critical Keycloak and LevelDB Vulnerabilities          *

SmarterMail Vulnerabilities Rapidly Weaponized via Telegram Channels          *

WebView Enabled Implants Leverage AI Service Domains Abused for Covert C2 Relays Demand Zero Trust Monitoring and Controls          *

Critical Access Control Weakness in Pterodactyl Game Server Panel          *

Microsoft Defender Introduces Centralized Script Library for Security Automation          *

Sophisticated Phishing Operation Abuses Fake Google Forms Infrastructure to Capture Google Account Credentials          *

Unauthorized Mobile Data Extraction Identified on Activist’s Samsung Device Using Digital Forensic Tool          *

PromptSpy: First-Ever Android AI Malware Leveraging Google Gemini for Autonomous Decision-Making          *

Hackers Exploit nslookup to Bypass Detection in ClickFix Intrusions          *

Multiple DoS Vulnerabilities Disclosed in Sante PACS Server          *

Fake Google Forms Used in Global Account Takeover Phishing Scheme          *

The Vibe Coding Disaster: Moltbook AI Social Network Data Exposure          *

Booking I Paid Twice Phishing Campaign Targets Hospitality Sector 2026          *

Threat Actors Exploit Jira Notification System to Evade Enterprise Spam Defenses          *

Chrome Styles Extensions Exploited to Hijack 500,000 VK User Accounts          *

ClickFix Campaign Abuses Nslookup for DNS-Based Malware Delivery          *

Emoji-Based Malware Obfuscation (Unicode Smuggling) Enables Stealthy Attack Payloads          *

CISA Says Windows Video ActiveX RCE Vulnerability Under Active Exploitation in KEV Catalog          *

Social Engineering Attack Impersonates MetaMask Security Alerts          *

CRESCENTHARVEST RAT and Credential Stealer Campaign Using LNK Execution and DLL Sideloading Targets Iranian Protest Supporters          *

Grandstream GXP1600 Series Hit by Critical RCE Vulnerability Allowing Full Device Compromise          *

Keenadu Firmware Backdoor Compromises Android Tablets via Signed OTA Updates          *

Critical Vulnerabilities in Popular VS Code Extensions Expose Developers to Remote Code Execution and Data Theft          *

Microsoft 365 Copilot Security Issue Undermines Email Sensitivity Controls          *

Exchange Online Protection URL Filtering Triggers False Positive Phish Detections          *

PostgreSQL Security Update Addresses Multiple Vulnerabilities Including Critical Code Execution Risks          *

Dell RecoverPoint Zero-Day (CVE-2026-22769) Exploited by UNC6201          *

NVIDIA Megatron Bridge Code Injection Vulnerabilities (CVE-2025-33239 / CVE-2025-33240) Expose AI Training Environments          *

Critical CVE-2026-1670 Flaw in Honeywell CCTV Cameras Enables Remote Device Takeover          *

OpenClaw Gateway Vulnerability Exposes AI Agents to Remote Log Poisoning Attacks          *

Critical Admin API Vulnerability Hits India’s Largest Private Pharmacy Platform          *

MCP Supply Chain Attack Delivers StealC Infostealer Through Trojanized Developer Tooling and Registry Poisoning          *

Cybercriminals Abuse Atlassian Cloud to Distribute Investment Scam Spam Campaigns          *

Japanese Hotel Chain Washington Hotel Reports Server Breach Following Ransomware Attack          *

Alleged 0APT Victim Count Reaches 200 Amid Lack of Data Leaks          *

Malicious “CL Suite” Chrome Extension Targets Meta Business Accounts          *

The “Styles” Trap: 500,000 VK Accounts Hijacked by Chrome Extensions          *

25 Vulnerabilities Identified in Cloud Password Managers          *

Severe Vulnerability Exposes FileZen to Attackers          *

LangChain Community SSRF Bypass Vulnerability (CVE-2026-26019) Exposes Internal Services          *

Multi-Stage Loader Exploit Temporary Directories via Phishing and Malvertising for Stealthy Malware Execution          *

Critical CVE-2026-1490 in CleanTalk Plugin Exposes 200K WordPress Sites to Remote Code Execution          *

Apache NiFi Vulnerability Permits Users to Bypass Restrictions          *

ClickFix Social Engineering Exploit Hijacks Crypto Transactions via Browser JavaScript          *

ZeroDayRAT Targeting Android and iOS Devices in Cross-Platform Spy Campaign          *

Joomla Tassos Framework Exposes Systems to SQL Injection Attacks          *

CTM360 Reports Lumma Stealer and Ninja Browser Malware Campaign Exploiting Google Groups          *

AI Recommendation Poisoning Threat Exploits Memory Features in AI Assistants          *

Fake Crypto Recruitment Campaign Linked to Lazarus Group Spreads Malicious npm and PyPI Packages          *

Employee Phishing Incident Leads to Data Breach at Fintech Firm Figure          *

Airleader Master Critical Vulnerability (CVE-2026-1358) Enables Remote Code Execution          *

Matryoshka Malware Uses Fake Browser Prompts to Steal macOS Credentials          *

SmarterMail Breach by Storm-2603 Leads to Warlock Ransomware Attacks          *

Chrome Zero-Day Vulnerability Being Actively Exploited          *

OpenSea Zero-Day Exploit Chain Targets Seaport Protocol and NFT Assets          *

Incransom Ransomware Attack Targets Gulf Business Machines          *

Criminal IP API Integration Enables Context-Rich Threat Analysis in IBM QRadar          *

OysterLoader Campaign Raises Concerns Over Advanced Malware Evasion          *

Luxury Brands Louis Vuitton, Dior, and Tiffany Hit with $25 Million in Data Breach Fines          *

Phishing Campaign Abuses Fake Video Meeting Invites to Deploy Remote Access Tools          *

Fake CAPTCHA Attacks Used to Deliver LummaStealer Malware          *

Next Mdx Remote RCE Vulnerability Impacts Server Side Rendering in Next.js Applications          *

Cybercriminals Exploit AI-Themed Chrome Add-Ons for Browser Surveillance          *

XWorm RAT Distributed Through Phishing Emails Using CVE-2018-0802 Excel Flaw          *

New ClickFix Attack Wave Delivers StealC Stealer via Fake CAPTCHA Pages          *

CISA Warns of Actively Exploited Notepad Vulnerability (CVE-2026-15556) Impacting Windows Systems          *

Multi Stage SSH Worm Leveraging Credential Stuffing Observed in Active Campaign          *

Over 1,000 Feiniu Storage Devices Compromised After Backdoor Exploitation and Kernel-Level Persistence in Netdragon Botnet Campaign          *

Rogue VM in VMware vSphere Reveals Muddled Libra s Full Attack Playbook          *

Hardware-Embedded “EvilMouse” Grants Full System Control on USB Connection          *

287 Harmful Chrome Extensions Found Stealing Data from 37.4 Million Users          *

Malicious ‘duer-js’ NPM Package Distributes ‘Bada Stealer’ Malware Targeting Windows and Discord Users          *

Adblock Filter Lists Can Be Abused to Expose Users’ Real IP Addresses          *

Lazarus Campaign Exploits npm and PyPI Dependencies to Deploy RATs and Exfiltrate Data          *

Google Warns of State-Sponsored Hackers Leveraging Gemini AI for Reconnaissance and Attack Operations          *

IoT Botnets and SOHO Routers Fuel ORB Network Attack Operations          *

DragonForce Ransomware Group Expands Cartel Operations Since 2023          *

Palo Alto Networks PAN-OS Vulnerability (CVE-2026-0229) Can Force Firewall Reboot Loops          *

Mass Exploitation Attempts Target Ivanti EPMM Critical Vulnerabilities          *

Prometei Botnet Targeting Windows Server to Gain Remote Control and Deploy Malware          *

Apple Zero-Day (CVE-2026-20700) Actively Exploited in Sophisticated Attacks          *

Threat Actors Weaponize Grok, ChatGPT, and Google Ads to Distribute AMOS on macOS          *

SandboxJS Critical Vulnerability Could Lead to Remote System Compromise          *

Compromise of Government File Automation Systems Exposes Sensitive Citizen and Immigration Records in Ransomware Attack          *

Windows WER Privilege Escalation Vulnerability (CVE-2026-20817) Exploited via Public PoC          *

Singapore’s Telcos Targeted by China-Linked APT in Operation CYBER GUARDIAN          *

Singapore s Telcos Targeted by China Linked APT in Operation CYBER GUARDIAN          *

Third-Party IT Breach at Conduent Impacts Volvo Group North America Customer Data          *

Russian APT Hijacks GitHub and Trusted Sites in Major Supply Chain Attack          *

Microsoft Patch Tuesday Security Advisory – February 2026          *

Null Byte Nightmare: WPvivid Backup Flaw (CVE-2026-1357) Enables Unauthenticated File Upload & Site Takeover          *

New Windows Notepad RCE Vulnerability Poses Enterprise Security Risk          *

Microsoft Patches 6 Actively Exploited Zero-Days in February 2026 Update          *

LinkedIn Identity Hijacking Enables North Korean Employment Fraud Operations          *

APT36 Expands Operations with Linux Malware Targeting Government Infrastructure          *

Multi-Cloud Linux LLM-Assisted Malware VoidLink Enables Credential Harvesting and Evasive Kernel-Level Control          *

ZeroDayRAT Malware Gives Attackers Complete Control Over Android and iOS Devices          *

Hackers Exploit Apple and PayPal Emails in DKIM Replay Phishing Campaign          *

Attackers Use Bing Advertising Platform for Azure Tech Support Scams          *

Libpng Heap Overflow Vulnerability (CVE-2026-25646) Affects Millions of Apps          *

Critical JinJava Vulnerability (CVE-2026-25526) Allows Remote Code Execution          *

Critical SAP S Code Injection Vulnerability          *

Black Basta Ransomware Uses BYOVD Technique to Disable Antivirus Protections          *

Critical Vulnerability in Payload CMS SQL Injection with CVSS 9.8 Exposes Admin Credentials          *

Microsoft Patches Severe Arbitrary File Write via SessionsPythonPlugin in Semantic Kernel .NET SDK          *

Critical Keylime Authentication Bypass (CVE-2026-1709) Undermines mTLS Trust Model          *

Trust Boundary Flaw in Claude Desktop Extensions Enables Zero-Click RCE via Google Calendar          *

Emerging Node.js–Based LTX Stealer Malware Exfiltrates User Credentials          *

Hackers Use SmarterTools Software Bug to Launch Ransomware Attack          *

Microsoft Exchange Online Flags Legitimate Emails as Malicious, Causing Delivery Disruptions          *

Roundcube Webmail Flaw Enables Attackers to Track Email Open Activity          *

Vortex Werewolf Malware (aka SkyCloak) – Tor-Enabled Persistent Backdoor          *

Critical BeyondTrust Zero-Day Enables Unauthenticated Remote Code Execution          *

Detecting Ransomware Using Windows Minifilters to Intercept File Change Events          *

Apple Pay Phishing Campaign Exploits Fake Fraud Alerts to Steal 2FA Codes and Payment Data (2026)          *

Cloud Infrastructure Exploited by TeamPCP Worm for Large-Scale Cybercrime          *

Telegram Phishing Scam Targets User Accounts via Fake Login Authorization          *

OpenClaw Marketplace Compromised in Supply Chain Attack Campaign          *

Multiple SandboxJS Zero-Click Sandbox Escape Flaws Enable Arbitrary Code Execution          *

CVE-2026-25526 Critical Jinjava Flaw Permits Remote Code Execution          *

Mac Malware Exploits User Trust to Circumvent TCC Protections          *

Improper Input Sanitization in EMS Server Leads to SQLi Allowing Attackers to Execute Arbitrary Commands          *

Critical Moxa Switch Vulnerability Enables Bypass of Authentication Controls          *

Hikvision Wireless AP Vulnerability Enables Remote Command Execution          *

DKnife Framework Enables Router-Level TLS Interception and Malicious Payload Injection          *

China-Nexus Hackers Target Global Organizations Using Advanced Cyber Espionage Techniques          *

Transparent Tribe Hacker Group Targets India’s Startup Ecosystem in Cyber Attack          *

Bulletproof Hosting Providers Exploit Legitimate ISPs to Power Cybercrime Servers          *

Cyber Espionage Group Linked to Asia Targets Public Infrastructure Worldwide          *

Hackers Leveraging Windows Screensaver Files to Deploy RMM Tools for Persistent Remote Access          *

Odyssey Stealer Launches New Active Campaign Targeting macOS Users          *

F5 Urges Immediate Patching for High-Risk BIG-IP and NGINX Vulnerabilities          *

Spam Campaign Distributing Fake PDFs Installs Remote Monitoring Tools for Persistent Access          *

Improper Packet Handling in CAKE Qdisc Triggers Use-After-Free and System Compromise Through Kernel Memory Corruption          *

APT-Q-27 Stealth Attack on Corporate Networks          *

Malicious Traffic Ticket Payment Websites Target Drivers for Credit Card Fraud          *

DDoS Attacks Hit Milano-Cortina 2026 Olympics Websites Amid Pro-Russian Hacktivist Campaign          *

170+ SolarWinds Web Help Desk Servers Exposed to Actively Exploited RCE Flaw          *

Substack Confirms Data Breach After Hacker Claims Theft of 700,000 User Records          *

Betterment Discloses Data Exposure Affecting Approximately 1.4 Million Customers          *

Injection and Denial-of-Service Threat in JavaScript PDF Generation          *

Cyberattackers Use Fake RTO Challan Alerts to Spread Android Malware          *

Cyberattack Forces Italy’s La Sapienza University to Shut Down Systems          *

AISURU/Kimwolf Botnet Orchestrates 31.4 Tbps Hyper-Volumetric DDoS Attack on Global Infrastructure          *

Ransomware Attack Disrupts Corporate IT and Website of Romania’s National Oil Pipeline Operator Conpet          *

DragonForce Ransomware Attacks Critical Businesses Worldwide          *

Critical n8n Vulnerability CVE-2026-25049 Allows Arbitrary Command Execution          *

Malicious NGINX Configurations Used in Large-Scale Web Traffic Hijacking Attacks          *

DesckVB RAT New Modular Remote Access Trojan Emerging in 2026          *

Cybercriminals Exploit Search Results to Redirect Victims to Counterfeit Traffic Portals in Phishing and Data Theft Campaign          *

Hackers Abuse SonicWall SSLVPN Access to Deploy EDR Killer and Disable Endpoint Security          *

WatchGuard Firebox LDAP Injection and VPN Privilege Escalation Pose Elevated Security Threats          *

Cisco Collaboration Vulnerabilities Pose Serious Security Threats          *

CVE-2026-24735 Apache Answer Data Exposure Flaw Reveals Deleted and Private Content          *

Amaranth-Dragon Exploits WinRAR Flaw to Spy on Southeast Asia          *

Critical Vulnerability in Cisco Meeting Management Allowing Remote Attackers to Upload Arbitrary Files          *

Critical SolarWinds Web Help Desk RCE Flaw Added to CISA KEV List          *

Critical Arbitrary File Write Vulnerability in ASUSTOR ADM CGI Hits ADM NAS Devices to Complete Takeover          *

Chrome Security Flaws Enable Arbitrary Code Execution          *

Google Chrome 144 Vulnerabilities in V8 and Libvpx Could Enable Remote Exploitation (CVE-2026-1862, CVE-2026-1861)          *

Critical Metro4Shell Flaw in React Native Actively Exploited to Compromise Developer Systems          *

Multiple OS Command Injection Vulnerabilities Fixed in TP-Link Archer BE230 Wi-Fi 7 Router          *

Django Patches Multiple Vulnerabilities Impacting Application Security          *

Critical Apache Syncope Console Admin-Level XXE Bug Enables XML Entity Injection and Data Exposure          *

DynoWiper Malware Targets Polish Energy Sector in State-Sponsored Destructive Cyberattack          *

APT28 Exploits Microsoft Office Zero-Day in Targeted Espionage Campaigns          *

eScan Antivirus Update Servers Compromised in Malware Supply Chain Attack          *

Panera Bread Confirms Data Breach Affecting 5.1 Million Unique Accounts          *

NationStates Data Breach Enables Remote Code Execution and User Data Exposure          *

OpenClaw Vulnerability Exposes Systems to Link-Based RCE Attacks          *

Russian Legion Deploys Botnet-Driven DDoS Campaign Against Danish Critical Infrastructure          *

Global Surge in HYIP Investment Scam Platforms Exploiting Social Media and Messaging Apps          *

Punishing Owl Hacker Group Emerges, Targets Russian Government Networks          *

Microsoft Launches Three-Phase Plan to Replace NTLM With Kerberos in Windows          *

Electrum-Linked OT Attack Targets Poland’s Distributed Energy Sites          *

Apple Privacy Strategy 2026: Ten System-Level Controls for Data Security          *

Microsoft 365 OWA Add-Ins Bypass Audit Logs Allowing Persistent Silent Data Theft          *

Notepad++ Users Targeted After State-Backed Attackers Hijack Update Servers          *

Silent Intruder: EncystPHP Web Shell Burrows into FreePBX Systems          *

CVE-2025-26385: Critical Remote SQL Injection Vulnerability in Johnson Controls Metasys          *

CVE-2025-26385: Critical Remote SQL Injection Vulnerability in Johnson Controls Metasys          *

Google Play Store Introduces Warnings for Power-Hungry Apps          *

New Undetected macOS Malware Bypasses Gatekeeper to Steal Sensitive Data          *

New ShadowHS Fileless Malware Actively Spreads Across Linux Systems          *

Login Credentials at Risk TAMECAT PowerShell Backdoor Targets Edge and Chrome          *

Hackers Abuse IIS Servers in Targeted BadIIS Malware Campaign          *

Microsoft Windows 11 Update Introduces Reliability Improvements and Secure Boot Changes          *

Active Exploitation of Critical Ivanti EPMM Remote Code Execution Vulnerabilities          *

NVIDIA Patches High Severity vGPU and Driver Bugs Enabling Host Compromise          *

Open VSX Supply Chain Attack Deploys Encrypted Stealer Malware via Solana Etherhiding Targets Over 5,000 Developers          *

Kyverno Privilege Escalation Vulnerability Grants Full Cluster Control to Namespaced Users          *

Gemini MCP Tool Zero-Day Vulnerability Enables Remote Code Execution          *

Critical Remote SQL Injection Vulnerability in Johnson Controls Metasys          *

Critical SessionReaper Vulnerability Actively Exploited Against Magento Platforms Worldwide          *

PHPUnit Unsafe Deserialization Allows RCE in CI CD Pipelines          *

Critical Appsmith Flaw Enables Unauthenticated Execution of Unpublished Application Logic          *

Google Disrupts the IPIDEA Residential Proxy Network Used to Abuse Millions of Compromised Devices Worldwide          *

Critical Sandbox Escape Vulnerability in Grist-Core Enables Remote Code Execution (CVE-2026-24002)          *

Cloudflare IPv6 BGP Route Leak Caused by Network Policy Misconfiguration in Miami Data Center          *

Fake CAPTCHA Campaign Abuses Microsoft App-V to Deliver Amatera Infostealer          *

TP-Link Omada Controller Hit by High-Severity IDOR Leading to Full Network Control          *

PyTorch Safe Mode Bypass Vulnerability Enables Critical Remote Code Execution          *

TP-Link Archer Vulnerability Allows Attackers to Take Full Control of Routers          *

GitHub-Backed Cyber-Espionage Targeting Indian Government Networks          *

MITRE’s ESTM Enables Proactive Defense for Embedded Systems Powering Critical Infrastructure          *

SolarWinds Web Help Desk Vulnerabilities Expose Systems to RCE and Auth Bypass          *

Severe n8n Vulnerability (CVSS 9.9) Enables Authenticated Users to Execute Remote Code          *

OpenSSL Stack Buffer Overflow Vulnerability Enables Pre-Auth Remote Code Execution          *

HPE Aruba Releases Patches for High-Severity RCE and OpenSSL Vulnerabilities          *

Active Exploitation of Critical Fortinet FortiCloud SSO Vulnerability          *

High-Severity Chrome Background Fetch Bug Patched in Latest Stable Release          *

Localhost Authentication Bypass in Clawdbot Agents Exposes Thousands of Instances          *

CVE-2025-67968: Critical Arbitrary File Upload in RealHomes CRM Threatens 30,000+ WordPress Sites          *

Rufus Local Privilege Escalation Vulnerability Allows Administrator-Level Code Execution (CVE-2026-23988)          *

High-Severity Flaw in Western Digital Installer Opens Door to Code Execution          *

Active Threat Campaigns Abuse React2Shell for Remote Code Execution          *

Google Protocol Buffers Affected by High-Severity DoS Vulnerability          *

Microsoft Fixes Actively Exploited Office Zero-Day Vulnerability (CVE-2026-21509)          *

Fake Notepad++ Installers Infect Systems with Proxyware Malware          *

React Issues Urgent Advisory After Incomplete DoS Fix in Server Components          *

Severe vm2 Vulnerability (CVSS 9.8) Exposes Millions of Apps to Sandbox Escape          *

Snap Store Domain Hijacking Attack Enables Malicious Linux Software Distribution          *

Oracle January 2026 CPU: Critical Vulnerabilities, Exposure Risks, and Patch Prioritization          *

Nike Investigating Alleged Cyberattack After WorldLeaks Data Leak Threat          *

Backdoor Vulnerability Places Over 20,000 WordPress Sites at Risk of Unauthorized Admin Access          *

Raaga Discloses Data Breach Affecting 10.2 Million Accounts          *

Fake Notepad++ Installers Deliver Proxyjacking Malware via DLL Side-Loading          *

TrustAsia Fixes Critical LiteSSL ACME Misconfiguration After Mass Certificate Revocation          *

Threat Actors Abuse Legitimate Driver Variants to Disable Endpoint Security Before Ransomware Attacks          *

Hackers Weaponize Security Tools to Undermine Defenses Before Ransomware Attacks          *

Critical RCE Vulnerability in Vivotek IoT Camera Firmware          *

New AI-Based Android Malware Exploits WebView Components for Automated Ad Fraud          *

NVIDIA CUDA Toolkit Vulnerabilities Enable High-Severity Code Execution Attacks          *

Critical Chainlit AI Flaws Allow Attackers to Take Over Cloud Environments          *

Malicious Code Injection Risk Found in binary-parser for Node.js          *

Critical Academy LMS Flaw (CVE-2025-15521, CVSS 9.8) Leads to Complete Admin Compromise          *

Global FortiGate Firewall Threat: Key Actions to Safeguard Networks Against Unauthorized Access          *

CVE-2026-20045: Critical Cisco Unified CM RCE Under Active Exploitation          *

BIND DNS Remote Crash Vulnerability CVE-2025-13878          *

Evelyn Stealer Malware Abuses VS Code Extensions          *

OPNsense 25.7.11 Introduces Host Discovery Service to Enhance Network Visibility          *

WPair Scanner Released to Detect WhisperPair Flaw in Google’s Fast Pair Protocol          *

Apache Solr Flaws Allow Data Exposure & Authentication Bypass          *

Hackers Exploit LinkedIn Messages to Deliver Malware via Fake Business Files          *

Prompt Injection to RCE: Three Flaws Expose Anthropic’s MCP Git Server          *

NVIDIA Nsight Graphics for Linux Vulnerability Enables Arbitrary Code Execution          *

GitLab Fixes High-Severity Vulnerabilities Impacting Authentication and Availability          *

Zoom Hit by Critical RCE Vulnerability Exploitable via Command Injection          *

AVEVA Software Hit by Critical Flaws Allowing SYSTEM-Privilege Remote Code Execution          *

TP-Link Router Vulnerability Allows Authentication Bypass via Password Recovery Feature          *

McDonald’s India Allegedly Hit by Everest Ransomware Data Exfiltration Attack          *

100,000+ WordPress Sites Exposed by Critical Plugin Vulnerability          *

Critical Bluetooth Flaws in Xiaomi Redmi Buds Enable Call Data Exposure and Device Crashes          *

Coordinated Malicious Chrome Extensions Target Enterprise HR and ERP Platforms via Session Hijacking          *

Remcos RAT Campaign Uses Trojanized VeraCrypt Installers to Target South Korean Users          *

ServiceNow BodySnatcher Vulnerability Enables Unauthenticated User Impersonation          *

UK Government Issues Alert on Sustained Pro-Russian Hacktivist DDoS Campaigns          *

Threat Actors Impersonate Malwarebytes to Deploy Infostealers          *

AI Guardrails Under Fire Prompt Injection and Agent Exploits Expose New Enterprise Security Risks          *

StackWarp Hardware Vulnerability in AMD Zen Processors          *

PDFSider Backdoor Leveraged in Attack Against Fortune 100 Financial Enterprise          *

CrashFix Campaign Uses Malicious Chrome Extension to Deliver ModeloRAT Malware          *

Iran State TV Hijacked to Broadcast Anti-Regime Messages and Protest Appeal          *

Critical Vertex AI Misconfiguration Enables Privilege Escalation via Service Agents          *

Cisco Addresses Actively Exploited AsyncOS Zero-Day Vulnerability          *

Livewire File Manager Flaw Leaves Web Applications Vulnerable to Remote Code Execution          *

Cloudflare Zero-Day Allows Attackers to Bypass WAF and Access Protected Origin Servers          *

Ingram Micro Confirms Ransomware Incident Impacting 42,000 Individuals          *

Critical WhisperPair Vulnerability Enables Tracking and Eavesdropping via Bluetooth Audio Devices          *

Bluetooth “Heartbleed” and DoS Flaws in Xiaomi Redmi Buds          *

Crypto Wallet Theft Campaign Using Impersonated Malware Branding          *

ABB Ability OPTIMAX Authentication Bypass Vulnerability Enables Full System Takeover          *

Critical Deno Flaws Expose Cryptographic Secrets and Windows Command Execution Risks          *

GootLoader Malware Abuses Malformed ZIP Archives to Evade Endpoint and Network Defenses          *

GhostPoster Campaign Spreads Malicious Browser Extensions to 840,000 Users          *

Major CIRO Security Incident Compromises Data of 750,000 Investors in Canada          *

Critical XSS Vulnerabilities in Meta Conversions API Gateway Enable Silent, Large-Scale Facebook Account Takeovers          *

Researchers Breach StealC Malware Infrastructure via Control Panel Flaw          *

Promptware Kill Chain Five-Step Model for AI-Driven Cyberattacks          *

Chinese Infrastructure Used for Large-Scale C2 Operations          *

HPE Aruba Networking Flaws Expose VLAN and Internal Network Data          *

Palo Alto PAN-OS GlobalProtect Denial-of-Service Vulnerability          *

Kyowon Group Ransomware Incident Disrupts Operations, Millions of Accounts Potentially Affected          *

Critical Cal.com Authentication Bypass Vulnerability Allows Account Takeover          *

Microsoft Legal Action Disrupts RedVDS Cybercrime Infrastructure          *

AWS Fixes CodeBuild Misconfiguration Preventing CI Pipeline Supply Chain Repository Takeovers          *

Critical CVE-2026-23550 Bug Lets Hackers Gain Full WordPress Admin Access          *

Reprompt Attack Exposes Risk of Silent Data Theft in Microsoft Copilot          *

Major Data Breach at Central Maine Healthcare Affects 145,000+ Patients          *

Windows Remote Assistance Security Feature Bypass Enables Circumvention of MoTW Safeguards          *

Cloud Infrastructure Abuse for Enterprise Phishing Campaigns          *

Elastic Releases Security Fixes for Vulnerabilities Enabling File Theft and DoS          *

Improper Input Handling in Copilot URL Parameters Leads to Silent Data Disclosure          *

Spring CLI Vulnerability Allows Arbitrary Command Execution on User Systems          *

VoidLink Emerges as Cloud-Native Linux Malware Framework Targeting Containers and Cloud Infrastructure          *

Apex Legends Character Hijacking Incident Enables Remote Player Control in Live Matches          *

Critical OpenCode Flaws Allow Malicious Websites to Execute Code on Developer Systems          *

Critical FortiSIEM Vulnerability Risks Enterprise Visibility and Security Operations          *

Critical SAP Vulnerabilities in S-4HANA and Wily Introscope Put Financial Systems at Risk          *

Chrome 144 Security Update Patches Critical V8 Engine Vulnerabilities          *

Critical OpenSSH Remote Code Execution Risk in Moxa Industrial Switches          *

Betterment Reports Security Incident Involving Compromised Email Distribution Infrastructure          *

Microsoft Patch Tuesday Security Advisory – January 2026          *

Critical Hikvision Bugs Expose Cameras to Network-Based Disruption Attacks          *

FortiSandbox SSRF Flaw Allows Attackers to Proxy Internal Traffic Using Crafted HTTP Requests          *

Node.js Issues Security Update Patching Seven Vulnerabilities Across All Release Lines          *

Target Dev Server Offline After Hackers Claim to Steal Source Code          *

State-Sponsored Insider Threat Campaign via Fraudulent Remote Hiring Practices          *

Apex Legends Live Match Incident Involved Remote Character Control by Unknown Actor          *

New Multi-Stage Malware Campaign Delivers Remcos RAT (SHADOW#REACTOR)          *

YARA-X 1.11.0 Adds Hash Function Warnings to Improve Rule Accuracy          *

ServiceNow Security Flaw CVE-2025-12420 Allows Unauthenticated User Impersonation          *

Browser-in-the-Browser Phishing Campaign Targets Facebook Users for Credential Theft          *

CISA Issues Urgent Alert on Active Exploitation of Gogs Vulnerability CVE-2025-8110          *

Angular Template Compiler Bug Allows Malicious SVG Script Injection And Session Hijacking          *

University of Hawaii Cancer Center Ransomware Attack Exposes Research Data and SSNs          *

Endesa Reports Customer Data Breach Following Security Incident          *

Texas Gas Station Operator Reports Data Breach Affecting 377,000 Customers          *

Cisco Snort 3 Vulnerabilities Impacting Sensitive Data Security          *

GitLab Releases Patch for High-Severity XSS and AI Vulnerabilities Exposing User Data          *

700,000 Personal Records Compromised in Illinois DHS Cyber Incident          *

Illicit Cryptocurrency Transactions Surge in 2025 as Cybercrime Ecosystems Expand          *

ValleyRAT_S2: Stealth Intrusions Aimed at Financial Data Exfiltration          *

Instagram Confirms No Breach After Reports of 17M Account Data Exposure          *

MuddyWater Deploys RustyWater RAT in Targeted Spear-Phishing Campaign          *

BreachForums User Database Exposure Leaks 324000 Account Records          *

Critical InputPlumber Bug Permits UI Input Manipulation and Denial-of-Service          *

Solonik Leak Exposes 17.5 Million Instagram User Profiles          *

Critical Vulnerabilities in EOL Vivotek IP7137 Cameras Enable Unauthorized Access          *

Apache Struts XXE Flaw CVE-2025-68493 Puts Enterprise Data at Risk          *

Critical Apache Uniffle Vulnerability Exposes Distributed Systems to MITM Attacks          *

Critical React Router Vulnerabilities Enable File Access, XSS, and Session Manipulation Attacks          *

Critical zlib Vulnerability (CVE-2026-22184, CVSS 9.3) Enables Global Buffer Overflow          *

Critical Linux TLP Vulnerability Exposes Systems to Unauthorized Power Control          *

Critical OWASP CRS Vulnerability Allows Charset Validation Bypass          *

Critical Trendnet Vulnerability (CVE-2025-15471) Enables Complete Device Takeover          *

SmarterMail Flaw Enables Remote Code Execution, Proof-of-Concept Released          *

Major Security Flaw in H3C Wi-Fi Systems Exposes Networks to Takeover          *

Possible State-Sponsored Cyber Activity Disrupts Power Infrastructure in Caracas          *

Critical Vulnerabilities Enabling Full Server Compromise          *

OpenAI Launches ChatGPT Health with Isolated, Encrypted Health Data Controls          *

Malicious npm Packages Distributing NodeCordRAT via Supply Chain Attack          *

DocuSign Impersonation Campaign Distributes Vidar Malware Through Phishing Emails          *

Trend Micro Apex Central Hit by Critical Unauthenticated RCE Vulnerability          *

Critical Foomuuri D-Bus Vulnerabilities Expose Linux Systems to Unauthorized Local Network Configuration Changes          *

Critical Undertow Vulnerability (CVE-2025-12543) Exposes Java Servers to Host Header Attacks          *

GoBruteforcer Botnet Targets Crypto Servers Using Weak AI-Generated Configurations          *

Critical Apache NimBLE Bluetooth Vulnerabilities Allow Spoofing and Eavesdropping Attacks          *

New “Maestro” Exploit Reveals Critical Weaknesses in ESXi VM Isolation          *

Critical jsPDF Vulnerability (CVE-2025-68428) Allows Sensitive Data Exfiltration via PDF Generation          *

China-Linked Salt Typhoon Breaches U.S. Congressional Email Systems          *

BlueDelta Cyber Espionage Operations Target Enterprise Authentication Services for Credential Theft          *

CVE-2026-21858: CVSS 10.0 Flaw in n8n Allows Unauthenticated RCE and Server Takeover          *

Malicious Office Assistant Update Infects Windows Systems With Mltab Malware          *

Venezuela BGP Leak Explained: Misconfiguration, Not Cyber Espionage          *

CISA Adds Critical HPE OneView RCE and Legacy PowerPoint Vulnerability to KEV Catalog          *

Critical RCE Vulnerability Actively Exploited in End-of-Life D-Link Routers (CVE-2026-0625)          *

GoBruteforcer Attack Wave Targets Crypto and Blockchain Projects          *

Veeam Patches Critical Remote Code Execution Flaws in Backup & Replication Software          *

High-Severity WebView Vulnerability Patched in Google Chrome 143          *

Dify Addresses Backend Masking Failure Leading to API Key Exposure          *

Forcepoint DLP Vulnerability (CVE-2025-14026) Enables Bypass of Restricted Python Controls          *

Critical Remote Command Injection in D-Link Legacy DSL Routers (CVE-2026-0625)          *

Microsoft Alerts on Email Routing Misconfigurations Driving Internal Domain Spoofing          *

Critical n8n Vulnerability CVE-2026-21877 Enables Full System Compromise          *

Fake Notepad++ Websites Used by BlackCat Group to Distribute Credential-Stealing Malware          *

China-Linked Cyberattacks on Taiwan Energy Sector Increase Tenfold          *

PHALT BLYX Campaign Exploits Fake Booking.com Alerts to Deploy DCRat Malware          *

macOS Vulnerability Enables TCC Bypass, Putting Sensitive User Data at Risk          *

Two Malicious Chrome Extensions Exfiltrating ChatGPT and DeepSeek Conversations          *

Unpatched Firmware Vulnerability Allows Full Remote Takeover of TOTOLINK EX200 Devices          *

Critical Dolby Vulnerability Patched in Android          *

Crimson Collective Allegedly Breaches Brightspeed, Claims Theft of Over 1M Customer Records          *

Sophisticated Google Support-Style Phishing Campaign Steals Credentials          *

n8n Vulnerability (CVE-2025-68668) — Authenticated System Command Execution (CVSS 9.9)          *

ClickFix BSOD Phishing Campaign Delivering DCRAT Malware          *

Kimwolf Android Botnet Infects Over 2 Million Devices via Exposed ADB and Proxy Networks          *

ProfileHound Tool Exposes Dormant User Profiles in Active Directory Environments          *

PyArmor Obfuscation Used for Evasion of Static and Signature-Based Analysis          *

Russia-Linked Hackers Weaponize Viber Messaging to Deploy RATs in Ukrainian Government Networks          *

Apache SIS Vulnerability Allows Local File Disclosure via Malicious XML Metadata Targeting GIS Applications          *

Critical jsPDF Vulnerability Enables Unauthorized Server File Access in Node.js          *

GravityRAT Expands Remote Access Attacks Across Multiple Platforms          *

High-Severity DoS and Request Smuggling Flaws Patched in Aiohttp Security Update          *

High-Severity Apache Kyuubi Vulnerability Enables Arbitrary File Access          *

Cybersecurity Incident Leads to Full Closure of Higham Lane School          *

Covenant Health Confirms Large-Scale Unauthorized Access to Healthcare IT Systems          *

Ledger Users Affected by Data Breach at Third-Party Vendor Global-e          *

PS5 BootROM Key Leak Reveals Unfixable Hardware-Level Security Flaw          *

VVS Stealer Malware Targets Discord Accounts          *

Hackers Claim Resecurity Breach, Firm Says Incident Was a Honeypot Operation          *

Alleged NordVPN Internal Systems Breach Highlights Risks in Exposed Development Environments          *

GHOSTCREW Open-Source Toolkit Introduces AI-Driven Penetration Testing          *

Healthcare Provider Revises Breach Scope to Impact 478000 Patients          *

Critical Hardcoded Authentication Token Vulnerability in RustFS Enables Full Cluster Compromise          *

Sedgwick reports data breach linked to TridentLocker ransomware attack          *

QNAP Fixes High Severity SQL Injection and Path Traversal Vulnerabilities          *

FortiWeb Exploitation Campaign Uncovered via Exposed Logs          *

Telegram Breach Sparks Concerns Over Political Cybersecurity          *

CVE-2025-66848: Critical JD Cloud Router Flaw Allows Remote Root Access          *

AdonisJS Bodyparser Bug Allows Path Traversal Leading to File Overwrite and RCE          *

Critical Eaton UPS Companion Vulnerabilities Enable Local Code Execution on Windows Systems          *

Critical Authentication Bypass in IBM API Connect CVE-2025-13915          *

Phishing Campaign Abuses Google Cloud Email Feature          *

Careto Hacker Group Resurfaces After 10 Years          *

DarkSpectre Browser Malware Operation Infected 8.8 Million Chrome, Edge, and Firefox Users          *

Fake Eternl Desktop Wallet Used in Cardano Phishing Campaign          *

CVE-2025-14346 Allows Unauthorized Bluetooth Control of WHILL Power Chairs          *

GlassWorm Malware Targets macOS Developers via Malicious VSCode Extensions          *

High-Risk Flaws in GNU Wget2 Allow Path Traversal and Memory Corruption Attacks          *

Apache NuttX RTOS Updates Fix Use-After-Free and DoS Flaws          *

Magecart Attack Chain Uses 50+ Malicious Scripts to Steal Online Payment Data          *

Critical SmarterMail RCE Vulnerability (CVE-2025-52691) Alert by Singapore CSA          *

VOID KILLER Emerges as Serious Threat to Enterprise Endpoint Security          *

Apache StreamPipes Privilege Escalation Vulnerability CVE-2025-47411 Enables Unauthorized Administrative Access          *

ErrTraffic ClickFix Campaign Automation Service          *

Spear-Phishing Threat Aimed at Security Individuals in the Israel Region          *

European Space Agency Confirms Cybersecurity Breach on External Servers          *

CISA Directs Federal Agencies to Patch Exploited MongoBleed Vulnerability          *

Coupang to Split $1.17 Billion Among 33.7 Million Data Breach Victims          *

Chinese State-Linked Rootkit Hides ToneShell Malware Deployment          *

New Bluetooth Headphone Vulnerabilities Allow Hackers to Hijack Connected Smartphones          *

Coordinated Cyberattack Floods Adobe ColdFusion Infrastructure with Millions of Exploit Attempts          *

Critical SmarterMail Vulnerability Enables Full Server Takeover Without Authentication          *

Silver Fox Phishing Campaign Targets Indian Organizations Using Tax-Themed Malware          *

Windows Local Privilege Escalation Flaws in Kernel Drivers and Named Pipes Enable Elevated Access          *

Ransomware Attack Shuts Down Key IT Systems at Romania’s Oltenia Energy Complex          *

Security Incident at Korean Air Leads to Employee Data Exposure          *

OpenAI Hardens ChatGPT Atlas Against Prompt Injection Attacks          *

WIRED Subscriber Data Breach Claim Exposes 2.3 Million Records          *

27 npm Packages Weaponized as Phishing Infrastructure for Login Credential Theft          *

Trust Wallet Chrome Extension Supply-Chain Attack Leads to Multi-Million Dollar Crypto Theft          *

Large-Scale Automated Exploitation Campaign Targeting Multiple Internet-Facing Technologies          *

Hacktivist Proxies and the Normalization of Cyber Pressure Campaigns          *

EmEditor Supply Chain Attack Prompts Urgent Security Warnings for Enterprises          *

AI-Led Discovery Triggers Alarm Over CVSS 10 Zero-Day in Xspeeder Firmware          *

Jackson Typosquatting Attack on Maven Central          *

Ubisoft Rainbow Six Siege Services Disrupted Following Suspected MongoBleed Exploitation          *

New WebKit Integer Overflow Vulnerability Found in iOS 26.2 with Public PoC          *

China-Linked Evasive Panda Conducted DNS Poisoning Attacks to Distribute MgBot Malware          *

French Postal Operator Suffers Major Network Outage Linked to Cyberattack          *

Malicious Analytics Logic in Trust Wallet Browser Extension Leads to Multi-Chain Wallet Drain          *

“Purchase Order” Deception Leveraging a Sophisticated Malware Loader Across Italy, Finland, and Saudi Arabia          *

DriverFixer0428 Credential Stealer in Contagious Interview Campaign (macOS)          *

Israeli Organizations Targeted by AV Themed Malicious Word and PDF Files          *

LastPass 2022 Data Breach Enables Years-Long Exploitation of Encrypted Vaults Leading to Cryptocurrency Theft          *

Critical LangChain Flaw Allows Malicious Actors to Steal Secrets from AI-Driven Systems          *

Typosquatted MAS Domain Tricks Users into Running Malicious Activation Script          *

Threat Actors Exploit Unpatched FortiGate 2FA Bypass Vulnerability          *

Koi Security Uncovers Persistent Backdoor with lotusbail npm Package Targeting WhatsApp npm Library Stealing Credentials and Messages          *

Critical LangChain Vulnerability Lets Attackers Steal Secrets via Prompts          *

High-Severity Zimbra Vulnerability Exposes Internal Files Without Authentication          *

Critical TeamViewer DEX Vulnerabilities Enable Takeover of Nomad Services          *

Net-SNMP Vulnerability Triggers Buffer Overflow, Crashing the Daemon          *

Somalia E-Visa Platform Exposes Sensitive Traveler Information          *

Shinhan Card Confirms Data Breach Impacting 192,000 Merchants in South Korea          *

MacSync Stealer Dropper Bypasses macOS Gatekeeper Using Notarized Signed App          *

Ransomware Attack on Romanian Waters Authority Disrupts IT Systems Nationwide          *

WebRAT Malware Targeting Developers Through Malicious GitHub Exploit Repositories          *

Operation PCPcat Weaponizes Next.js and React Bugs, Compromising 59,000+ Servers          *

Inside APT37’s Artemis Malware Campaign: From Casting Lures to System Compromise          *

High-Risk NVIDIA Isaac Launchable Security Issues Lead to Complete System Takeover          *

Spotify Investigates Alleged 300TB Music Archive Leak Linked to Anna’s Archive          *

Critical MongoDB Vulnerability Allows Unauthenticated Memory Disclosure via zlib Compression          *

M-Files Alert on Insider Session Hijacking and Vault Metadata Leakage Risks          *

Linksys Router Authentication Bypass Zero-Day Vulnerability          *

Nissan Confirms Data Breach After Unauthorized Access to Red Hat Servers          *

Critical Vulnerabilities in Exim Mail Server Could Lead to Remote Compromise          *

University of Phoenix Data Breach Affects Nearly 3.5 Million Individuals          *

Microsoft Fixes Privilege Escalation Flaw in Windows Brokering File System Driver          *

Sleeping Bouncer: A Deep Dive into the Pre-Boot DMA Vulnerability in Modern Firmware          *

Darknet-Driven Insider Threat Campaigns Target High-Value Enterprise Networks          *

Malicious Free VPN Extensions Compromise AI Chat Privacy of 8 Million Users          *

Microsoft Teams Global Outage Causes Widespread Messaging Delays          *

U.S. DOJ Files Charges Against 54 in Coordinated ATM Jackpotting Attacks Using Ploutus Malware          *

Critical n8n Security Flaw Grants Attackers Full Control of Affected Servers          *

Cellik RAT Exploits Google Play Apps, Expanding the Reach of Mobile Cybercrime          *

Dify Vulnerability Exposes System Configurations to Anonymous Users          *

RansomHouse Elevates Ransomware Threat With Advanced Multi-Layered Mario Encryptor          *

Critical Apache NiFi Vulnerability in GetAsanaObject Processor Enables Unsafe Java Deserialization Attacks          *

Cloud Atlas Hacker Group Exploits Microsoft Office Vulnerabilities to Execute Malicious Code          *

Roundcube Vulnerabilities Enable Malicious Script Execution          *

Headlamp Vulnerability Enables Unauthorized Helm Release Management in Kubernetes Clusters          *

Linux Kernel Records First Rust-Based Vulnerability With CVE-2025-68260          *

WatchGuard 0-day Vulnerability Exploited to Hijack Firewalls          *

China-Linked LongNosedGoblin APT Exploits Windows Group Policy to Target Government Networks in Asia          *

Udados Botnet Targets Web Infrastructure with Stealth DDoS Attacks          *

UEFI IOMMU Initialization Flaw Exposes Major Motherboard Vendors to Early Boot DMA Attacks          *

University of Sydney Data Breach (December 2025) Exposes Personal Information of Staff and Students          *

High-Severity Kibana Vulnerability Enables XSS Attacks Through Vega Charts          *

Log4j TLS Hostname Verification Vulnerability Enables Log Interception          *

OpenAI GPT-5.2-Codex Accelerates Software Vulnerability Discovery and Defensive Cybersecurity          *

Ink Dragon Hackers Breach European Governments, Extending Attacks to Asia and South America          *

Severe systeminformation Flaw Allows Arbitrary Command Execution on Windows Systems          *

Virginia Mental Health Authority Reports Data Breach Impacting 113,000 Individuals          *

Critical Flaw in Apache Commons Text Enables Remote Code Execution Attacks          *

Kimwolf Botnet Compromises 1.8 Million Android TV Devices to Conduct Large-Scale DDoS Attacks          *

SonicWall Privilege Escalation Vulnerability (CVE-2025-40602) Actively Exploited - Patch Released          *

Suspected Malware on GNV Ferry Fantastic Sparks Remote Hijack Fears          *

Cisco AsyncOS Zero-Day Vulnerability Actively Exploited          *

CVE-2025-20393 Under Active Attack as UAT-9686 Targets Cisco Email Gateways          *

CISA Warns of Active Exploitation of Critical Cisco Zero-Day and SonicWall Vulnerabilities          *

Critical HPE OneView Security Bug Exposes Data Center Control Planes Worldwide          *

Remote Code Execution in Automotive Infotainment via Modem Firmware          *

Russian Hackers Target Network Edge Devices Across Western Critical Infrastructure          *

Microsoft Confirms Critical Desktop Window Manager Privilege Escalation Vulnerability          *

China-Linked Ink Dragon Espionage Campaign Uses ShadowPad and FINALDRAFT Malware Against Government Networks          *

APT C 35 Leverages Distinct Apache HTTP Response Patterns for Covert Infrastructure Operations          *

BlindEagle Attackers Leverage Trusted Channels to Bypass Enterprise Email Protections          *

Chrome Stable Channel Update Fixes High-Severity WebGPU and V8 Vulnerabilities          *

NVIDIA Patches Critical Vulnerabilities Across Isaac Sim, NeMo Framework, and Linux Resiliency Tools          *

Cellik Android Malware Turns Trusted Google Play Apps into Stealthy Trojanized Threats          *

GhostPoster Campaign Hides Malicious JavaScript Inside Firefox Add-on Logos          *

Security Flaws in Windows Remote Access Connection Manager Enable Privilege Escalation          *

Microsoft Windows Admin Center Bug Exposes Systems to Privilege Escalation Attacks          *

Cyber Threat Alert: NoName057(16) Launches DDoSia Attacks Against NATO-Linked Organizations          *

Critical Privilege Escalation Vulnerability Identified in JumpCloud Remote Assist          *

700,000 Records Exposed Following Askul Ransomware Incident          *

GhostPairing WhatsApp Account Takeover Attack          *

Fake mParivahan and e-Challan Apps Used to Distribute Android Malware          *

PCPcat Malware Campaign Exploiting React2Shell and Next.js RCE Vulnerabilities          *

Critical React2Shell Vulnerability Exploited in the Wild to Establish Persistent Backdoors          *

SantaStealer Malware Campaign Exploits Browser Storage to Steal Crypto and User Credentials          *

FrogBlight Android Malware Disguises Government Websites to Collect SMS and Device Information          *

Shannon AI Pentesting Platform Automates Discovery and Exploitation of Web Application Flaws          *

Five-Year NuGet Supply Chain Attack Targeting .NET Developers via Homoglyphs and Typosquatting          *

OpenShift GitOps Privilege Escalation Vulnerability (CVE-2025-13888)          *

SoundCloud Hit by Data Breach as User Information Stolen and VPN Access Blocked          *

Persistent macOS Installer Bug Allows Attackers to Hijack Privileged Processes          *

Critical ScreenConnect Server Vulnerability Enables Privileged Abuse Through Malicious Extension Installation          *

Jaguar Land Rover Confirms Enterprise IT and OT Systems Breached, Employee Data Compromised          *

FreePBX Releases Security Updates for High-Risk RCE Vulnerabilities          *

French Interior Ministry Confirms Cyberattack Affecting Email Servers          *

Frogblight Malware Targets Android Users by Spoofing Government Portals          *

700Credit Data Breach Exposes Information of 5.8 Million Auto Dealership Customers          *

Critical RasMan Flaw in Windows Enables Local Crash and SYSTEM-Level Privilege Escalation          *

Windows Remote Access Connection Manager Vulnerability Enables Arbitrary Code Execution          *

Active Phishing Campaign Targets Russian Organizations With ISO-Based Malware and Credential Theft          *

PayPal Subscriptions Abused to Send Fake Purchase Emails          *

Gentlemen Ransomware Emerges as a Threat to Corporate Networks          *

Storm-0249: Sideloading Malicious Code into EDR Processes to Avoid Detection          *

CyberVolk VolkLocker Ransomware Undermined by Critical Cryptographic Implementation Flaw          *

Critical Security Flaws in Apache StreamPark Expose Data to Decryption and Token Forgery          *

ImageMagick Flaw Allows Arbitrary Memory Disclosure via PSX TIM Integer Overflow on 32-bit Systems          *

Critical Plesk Vulnerability Enables Root-Level Server Takeover          *

NVIDIA Merlin Deserialization Flaws in NVTabular & Transformers4Rec Risk AI Pipeline RCE          *

Apple Releases Emergency iOS 26 Update to Patch Actively Exploited WebKit Zero-Day Vulnerabilities          *

Critical pgAdmin Vulnerability Enables Server Takeover Through Database Restore via Malicious SQL Dump Files          *

IBM Mitigates High-Risk Vulnerabilities Across Enterprise Software Stack          *

Fieldtex Data Breach Affects Approximately 238,000 Individuals          *

Pierce County Library Data Breach Exposes Information of 340,000 Individuals          *

Adobe Delivers Critical Updates After Discovering 140 Vulnerabilities          *

Global Developer Frustration as GitHub Faces Intermittent Server Failures          *

Soledad WordPress Theme Vulnerability that Enables Full Site Takeover          *

Critical Vulnerabilities Discovered in Apache Fineract Core Banking Platform          *

Critical New Bugs in React Server Components Allow Server Downtime and Code Leak Exploits          *

Spiderman Kit Fuels Advanced Phishing Campaigns Against Banks and Crypto Services          *

MKVCinemas Streaming Piracy Platform Dismantled After 142M Visits          *

Persistent Middle East Espionage: WIRTE Uses AshenLoader to Deploy AshTag Backdoor          *

Critical Cryptographic Flaw in Gladinet CentreStack Enables Remote Code Execution Attacks          *

Researchers Discover NANOREMOTE Malware Targeting Windows Systems Worldwide          *

Notepad++ Fixes Flaw That Allowed Malicious Update Files          *

Windows PowerShell CVE-2025-54100 Fixed: Improper Neutralization Enables Local Code Execution          *

CISA Issues Warning on Actively Exploited GeoServer XXE Vulnerability in Updated KEV Catalog          *

GitLab Releases Security Update Addressing Severe XSS and Denial-of-Service Flaws          *

Critical Flaw in India-Based CCTV Cameras Exposes Video Feeds and User Credentials          *

Active Exploitation of Gogs 0-Day Allows Remote Code Execution via API Endpoint Vulnerability          *

SOAPwn Flaw Exposes .NET Apps to Remote Code Execution          *

Critical Chrome Zero Day Flaw Patched in Urgent Security Update          *

DroidLock Android Ransomware Locks Devices and Extorts Victims          *

React2Shell Security Flaw Used in Coordinated Campaigns to Deploy Crypto Miners and Complex Malware Toolkits Across Businesses          *

Security Alert: Zoom Rooms Vulnerabilities Put Conference Systems at Risk          *

Critical Jenkins Vulnerabilities Expose Unauthenticated DoS via HTTP CLI and XSS via Coverage Reports          *

Apache Struts 2 DoS Vulnerability (CVE-2025-66675) File Leak in Multipart Request Processing          *

Fortinet Warns of Critical FortiSandbox Vulnerability Allowing OS Command Injection          *

Windows Defender Firewall Bug Exposes Sensitive Data to Attackers          *

PCIe Security Flaws Impact Intel and AMD Processors          *

Akira ransomware group Targets Hyper-V and VMware ESXi with Ransomware Exploiting Vulnerabilities          *

Microsoft Outlook Flaw Allows Remote Execution of Malicious Code          *

New Vishing Threat Exploits Teams Calls and Quick Assist Sessions to Inject .NET Malware          *

Makop Ransomware Targets RDP Vulnerabilities and Uses AV Evasion Tactics for Deployment          *

Critical Zero-Click Flaw in Google Gemini Enables Complete Workspace Data Theft          *

Critical n8n Git Node Flaw (CVE-2025-65964) Exposes Servers to Remote Code Execution          *

Critical Rockwell Flaws Threaten Industrial Systems with SQL Injection Data Tampering and Safety Device DoS Needing Manual Fix          *

High-Severity ZITADEL V2 Login UI Flaws Lead to SSRF Exploitation and XSS-Based Account Takeover          *

Critical Fortinet Flaw Enables Unauthenticated Admin Bypass via FortiCloud SSO SAML Forgery          *

Microsoft Patch Tuesday Security Advisory – December 2025          *

Critical Step CA Exploit Lets Threat Actors Mint Trusted Certificates Unchecked          *

Vitas Healthcare Data Breach Exposes Sensitive Information of Over 300,000 Individuals          *

Ivanti Issues Security Update to Fix Code Execution Vulnerabilities in Endpoint Manager          *

Critical Vulnerability in Emby Server Enables Full Admin Access          *

Anatsa (TeaBot) Banking Trojan Delivered via Fake Document-Reader App on Google Play          *

React Ecosystem Exposed to High-Impact RCE via React2Shell Vulnerabilities          *

Malicious Ads Used by Hackers to Spread Triada Malware to Android User Base          *

JS SMUGGLER Malware Exploits Legitimate Websites to Deliver NetSupport RAT          *

Malicious VSCode Extensions Drop Infostealers Through Microsoft Marketplace Supply-Chain Attack          *

Cybercriminals Adopt Shanya Packer to Disable EDR and Launch Stealthy Ransomware          *

AI Discovers GhostPenguin Undetectable Linux Backdoor Using RC5-Encrypted UDP for Covert Command and Control          *

Critical Authentication Bypass Flaws in Ruby SAML Library          *

SAP Rolls Out Final 2025 Security Notes Covering 14 Vulnerabilities Across Core Enterprise Components          *

Major French Retail Chain Leroy Merlin Hit by Data Breach          *

Barts Health Confirms Massive Data Breach Tied to Oracle E-Business Zero-Day          *

India May Require Apple, Google, and Samsung to Enable Always-On GPS          *

ASUS Acknowledges Vendor Exposure as Everest Releases Data and Reference ArcSoft, Qualcomm          *

Factory Satellite Security Glitch Leaves Hundreds of Porsches Undrivable in Russia          *

Critical Vulnerabilities Found in GitHub Copilot, Gemini CLI, Claude & Other AI Developer Tools          *

Stealthy Proxmox Hypervisor Abuse Exposed Through New LOLPROX Techniques          *

TP-Link TL-WR940N V6 Affected by High-Severity UPnP DoS Vulnerability          *

Inotiv Reports Ransomware Breach Impacting Pharmaceutical Research Systems          *

Arena® Simulation Affected by DOE File Parsing Weakness That Enables Dangerous Stack-Based Buffer Overflow Attacks          *

Critical Firebox Flaws Force Urgent Fireware OS Updates from WatchGuard          *

High-Severity Duc Disk Tool Vulnerability (CVE-2025-13654) Allowing DoS and Information Leakage          *

Critical lz4-java Vulnerability (CVE-2025-66566) Exposes Uninitialized Memory During Decompression          *

Intellexa Spyware Vendor Targets iOS and Chrome with 15 Zero-Day Exploits, Deploying Predator Malware          *

Critical Authentication Breakdown in Scheduling Platform (CVE-2025-66489)          *

Apache Tika Core Vulnerability Enables System Exploitation via Malicious PDF Uploads          *

Avast Sandbox Flaws Enable Attackers to Gain Elevated Privileges          *

Subtle Privilege Escalation in AWS EC2 and SageMaker Through Execution Roles          *

SeedSnatcher Android Malware is Critical Threat to Crypto Wallet Users          *

BRICKSTORM Malware Alert Campaign by PRC-linked Actors          *

Splunk Windows Bug Enables Local Privilege Escalation Through Misconfigured File Permissions          *

SVG Clickjacking Technique Enables Highly Interactive UI-Redressing Attacks          *

High-Severity Splunk Vulnerability Exposes Windows Systems to Privilege Escalation          *

GoldFactory Strikes Southeast Asia Using Trojanized Banking Apps Driving 11,000+ Infections          *

ArrayOS AG Remote Command Injection Enables Unauthorized Webshell Deployment          *

Apache HTTP Server 2.4.66 SSRF NTLM Hash Exposure and Suexec Bypass Fixes          *

CVE-2025-66399: Cacti Bug Exposes Servers to Remote Code Execution          *

NVIDIA Issues Emergency Patch for Input-Validation and Oversized-Payload Flaws Causing Triton DoS Risks          *

PickleScan Bypass Lets Malicious PyTorch Models Execute Code Silently          *

Freedom Mobile Data Breach Exposes Sensitive Customer Information          *

New Windows LNK Zero-Day Under Active Exploitation by Hackers          *

India’s New SIM-Binding Mandate for Social Media and Messaging Platforms          *

New Report Warns of 68 percent of Phishing Kits Protected by Cloudflare          *

AISURU Botnet Launches Unprecedented 29.7 Tbps DDoS Assault          *

DuperRunner Malware Delivered via LNK Files Targets Corporate Staff in Operation DupeHike          *

Synology BeeStation Hit by Triple Vulnerability Chain Allowing Full System Takeover          *

Marquis Data Breach Exposes Information Across Over 74 U.S. Banks and Credit Unions          *

Critical Windows Vim Vulnerability (CVE-2025-66476) Enables Arbitrary Code Execution via Malicious Folders          *

Severe RCE Vulnerability Discovered in React Server Components and Next.js          *

React Server Components Critical RCE Flaw Enables Unauthenticated Attacks (CVE-2025-55182)          *

Angular Security Advisory: Immediate Patch Required for CVE-2025-66412          *

Critical Elementor Plugin Flaw Allows Full Admin Takeover of WordPress Sites          *

Critical CVE-2025-13486 Flaw in ACF Extended Enables Unauthenticated RCE on 100,000 WordPress Sites          *

Cybercriminals Market Latest K.G.B RAT Toolkit Within Dark-Web Communities          *

Stealthy Supply-Chain Attack Found in Malicious Rust Crate ‘evm-units’ Targeting Crypto Developers          *

Google Pushes Emergency Security Update as Chrome 143 Fixes 13 New Vulnerabilities          *

Critical Django Flaw Exposes PostgreSQL Databases to SQL Injection (CVE-2025-13372)          *

Longwatch Critical RCE Vulnerability Enables Unauthenticated SYSTEM-Level Takeover (CVE-2025-13658)          *

Threat-Hunting Alerts Impacted by Microsoft Defender Portal Outage          *

Russia’s Aerospace and Defense Sectors Hit by Ukrainian Cyberattack          *

OpenAI Codex CLI Exploit Lets Attackers Run Unauthorized Commands          *

India Orders Messaging Apps to Work Only with Active SIM Cards          *

Living Off the Land (LOTL) Tactics Enable Stealthy EDR Evasion Across Windows Environments          *

Malicious VS Code Extension as Icon Theme — Hidden Backdoor Targets Windows and macOS Developers          *

GlassWorm Campaign Expands With New Malicious VS Code and OpenVSX Extensions          *

India Mandates Pre-Installation of Sanchar Saathi on All Smartphones          *

ShadyPanda Weaponizes 4.3 Million-Download Extensions Into a Spyware Network          *

KimJongRAT Strikes Windows Users via Malicious HTA Files          *

OpenVPN Releases Patch for Critical Heap Over-Read and HMAC Bypass Vulnerabilities          *

New Struts Flaw (CVE-2025-64775) Exposes Servers to Disk-Filling DoS Attacks          *

Arkanix Stealer Uses Chrome Process Injection to Evade Modern Protections          *

Android Critical DoS and Two Actively Exploited Zero-Days          *

Coupang Confirms Data Breach Impacting Nearly 34 Million Customers          *

Microsoft Azure API Management Vulnerability Lets Attackers Create Accounts Across Tenants          *

Government Confirms Cyberattack Using GPS Spoofing Targeted Indian Airports          *

Qualcomm Warns of Critical Vulnerabilities Undermining Secure Boot Integrity          *

Microsoft Outlook MonikerLink Vulnerability Enables Remote Code Execution          *

Legacy Python Bootstrap Scripts Pose Domain-Takeover Threat Across Multiple PyPI Packages          *

APT36 Deploys Python-Based ELF Malware in Targeted Attacks on Indian Government Agencies          *

New Wave of Albiriox Malware Attacks Targets Android Users and Provides Criminals with Full Interactive Device Control          *

Mercedes-Benz USA Breach Claim Involving Legal and Customer Data Surfaces Online          *

Critical SQL Injection in Devolutions Server Lets Authenticated Users Extract All Stored Credentials          *

GeoServer XXE Vulnerability CVE-2025-58360 Unauthenticated File Theft and SSRF via WMS GetMap          *

New Malware Packer Discovered Masking EDR-Killers in Global Ransomware Attacks          *

PoC Released for Critical Outlook Zero-Click RCE Vulnerability          *

Critical Apache bRPC Vulnerability CVE-2025-59789 Puts High-Performance Systems at Risk of Server Crashes          *

Apache Kvrocks Fixes Serious RESET and MONITOR Abuse Causing Privilege Escalation and Credential Leakage Risks          *

Data Breach Reported by French Football Federation After Cyberattack          *

Data Breach Hits Canadian Scientific Consultancy, Attackers Demand $1.2M Ransom          *

Active Attacks Exploit WordPress RCE Bug Rated CVSS 9.8          *

Vivotek Legacy Firmware Permits Zero-Auth Arbitrary Command Execution via CGI Endpoint          *

Public GitLab Repos Leak More Than 17,000 Sensitive Secrets          *

Black Friday Scammers Are Impersonating Major Brands to Steal Your Money          *

KawaiiGPT A Free Malicious AI Clone Leveraging DeepSeek, Gemini, and Kimi-K2 Models          *

Microsoft Announces CSP Enforcement to Enhance Entra ID Sign-In Security          *

Fake Battlefield 6 Cracks & Trainers Spread Infostealers and Backdoors          *

Malicious Chrome Extension Crypto Copilot Steals Funds Through Hidden Solana Transactions          *

Cyberattacks Target Telecommunications & Media Industry to Deploy Malicious Payloads          *

Bloody Wolf Expands Spear-Phishing Campaign to Deliver NetSupport RAT Using JAR Loaders Targeting Central Asia          *

Dead Man’s Switch Massive npm Supply-Chain Malware Attack          *

Calendar-Based Cyberattacks: The Rise of Promptware Exploiting iOS and macOS Users          *

OpenAI Alerts Users After Mixpanel Data Breach: Security Recommendations Issued          *

ShadowV2 Botnet Leveraged AWS Outage to Test Large-Scale IoT Attack Capabilities          *

GitLab Fixes Multiple Vulnerabilities Allowing Authentication Bypass and DoS Attacks          *

London Councils Shut Down Key Systems Amid Ongoing Cyberattack          *

Angular Security Failure Lets Hackers Steal XSRF Tokens via Protocol-Relative URLs          *

Shai-Hulud v2 Campaign Spreads From npm to Maven, Exposing Thousands of Secrets          *

Global Data Exposure: ByteToBreach Sells Compromised Airline, Finance, and State Records Online          *

Water Gamayun Exploits New Windows Zero-Day in Global Espionage Campaign          *

Browser-Based RCE in Ray (CVE-2025-62593) Puts AI & Python Developers at High Risk          *

Chrome Extension Malware Adds Hidden SOL Fees          *

Critical Stored XSS Flaw Discovered in Apache SkyWalking (CVE-2025-54057)          *

Tor Introduces Galois Onion Encryption to Bolster Protection Against Cyber Attacks          *

Delta Dental of Virginia Reports Intrusion into Data Environment Resulting in Exposure of Sensitive Customer Information          *

Latest Cobalt Strike Update Introduces Advanced Malleable C2 and Stealth Upgrades          *

VSCode Marketplace Targeted by Malicious Prettier Clone Deploying Anivia Stealer          *

Zenitel TCIV 3 Plus Intercoms Exposed to Multiple Critical CVSS 9.8 Vulnerabilities          *

RomCom Uses SocGholish Fake-Update Attacks to Deliver Mythic Agent Malware          *

Nationwide Emergency Alerts Impacted After Major CodeRED Platform Cyberattack          *

Critical Node-Forge Vulnerability Prompts Immediate Update and Security Checks          *

High Severity NVIDIA DGX Spark Flaw Could Expose Sensitive AI Data and Allow System Takeover          *

ASUS Routers Critical Authentication Bypass Vulnerability (CVE-2025-59366)          *

Critical Fluent Bit Flaws Allow Remote Attacks on Cloud Environments          *

Critical Remote Code Execution Vulnerability in Microsoft Update Health Tools          *

Dartmouth College Hit by Clop in Targeted Data-Theft Attack          *

Harvard University Announces Data Breach Impacting Alumni and Donors          *

Malicious Blender Model Files Used to Deploy StealC Infostealing Malware          *

Kimsuky APT Deploys Dual KimJongRAT Payloads, Switching Between PE PowerShell Based on Windows Defender Status          *

Canon Allegedly Hit by Clop Ransomware Following Oracle E-Business Suite 0-Day Abuse          *

HashiCorp Vault Authentication Bypass Vulnerability (CVE-2025-13357)          *

ClickFix Social Engineering Campaign Delivers Stealthy Infostealer Malware          *

CISA Warns of Active Spyware Campaigns Hijacking High-Value Signal and WhatsApp Users          *

Brazil Hit by Water-Saci Campaign with WhatsApp Web Hijacking and Memory-Resident Banking Trojan          *

ToddyCat APT Gains Microsoft 365 Emails by Dumping OAuth Tokens from Memory & Copying Locked OST Files          *

Linux Kernel 6.18-rc7 Released with Key Driver and Security Fixes as Final Version Approaches          *

Apache Syncope Vulnerability (CVE-2025-65998) Allows Decryption of User Passwords via Hard-Coded AES Key          *

Second Sha1-Hulud Malware Wave Hits 25,000+ npm Repositories, Stealing Developer Credentials          *

Delta Dental of Virginia Data Breach Impacts 146,000 Individuals          *

Client Information Compromised in SitusAMC Data Breach          *

Zapier’s NPM Account Hacked, Multiple Packages Infected with Malware          *

Fluent Bit Security Flaws Put Cloud Environments at Risk of RCE and Hidden Breaches          *

Iberia Airlines Hit by Data Breach Exposing Customer Personal Details          *

Wireshark Flaws Allow Crashes Through Crafted Packet Injection          *

Threat Actors Inject Python Malware into Legitimate Windows Executable          *

Malicious PyPI Package Used by Hackers to Steal Users’ Crypto Information          *

Critical RCE Flaw Discovered in W3 Total Cache Plugin (CVE-2025-9501)          *

Threat Actors Use Typo-Trick ‘rn’ for ‘m’ in Microsoft URL to Conduct Credential Theft          *

Emergency Patch Issued for Azure Bastion After Discovery of Critical Login Bypass Vulnerability          *

BadAudio Malware Used by China-Linked APT24 in Long-Running Espionage Campaign          *

Emergency Patch Issued for Grafana SCIM User Impersonation Flaw (CVE-2025-41115)          *

Global Enterprises Hit by Widespread Supply Chain Breaches, BlueVoyant Report Finds          *

Threat Actor Alleges Massive 2.3TB Data Breach at Almaviva          *

Critical Twonky Server Vulnerabilities Allow Attackers to Bypass Authentication          *

Oracle Identity Manager Hit by Potential Zero-Day Exploit          *

Salesforce Warns of Unauthorized Data Access Through Compromised Gainsight OAuth Tokens          *

ShadowRay 2.0 Leverages Ray Authentication Gap to Create Expanding GPU Botnet          *

UNC2891 Money-Mule Network Reveals Full Scope of ATM Fraud Operation          *

Critical Weakness in Legacy Train Signaling Systems Allows Signal Spoofing          *

Aruba Networking 100 Series Cellular Bridge Impacted by Critical Firmware Weaknesses          *

Advanced Sturnus Banking Trojan Hijacks Android Devices and Steals Encrypted Messaging Data          *

SonicWall Discloses High-Severity SonicOS Vulnerability Affecting Firewalls          *

Critical Weaknesses in N-central Permit Attackers to Read Sensitive Configs via Legacy APIs          *

Severe Windows Graphics Bug Lets Attackers Gain Control with Just One Image          *

TamperedChef Campaign Delivers Stealthy Backdoor Through Digitally Signed Fake Installers          *

Chinese Hackers Hijack Legitimate Software Updates Using EdgeStepper Tool to Redirect to Malicious Servers          *

“The Gentlemen” Ransomware Crew Targets Enterprises With Encryption-Based Attacks and Data Exfiltration          *

Ollama Vulnerabilities Permit Arbitrary Code Execution via Malicious Model File Parsing          *

The Gentlemen Ransomware Campaign Targets Global Networks with Automation, Propagation, and Dual-Extortion          *

JOSERFC Oversized JWT Token Vulnerability (CVE-2025-65015) Enables Uncontrolled Resource Consumption          *

Sneaky2FA PhaaS Adopts Browser-in-the-Browser Technique for Advanced Phishing Attacks          *

Critical DLL Hijacking Vulnerability (CVE-2025-13051) Found in ASUSTOR Backup and Sync Utilities          *

Apache Causeway Releases Fix for Critical Java Deserialization RCE (CVE-2025-64408)          *

Cloudflare Reveals Root Cause Behind Global Outage That Disrupted the Internet          *

WhatsApp Flaw Exposes Phone Numbers of 3.5 Billion Users          *

WrtHug Attack Wave Hijacks 50,000 Vulnerable ASUS Routers          *

Multiple Critical Flaws in METZ CONNECT Controllers Expose Industrial Networks to Unauthenticated RCE          *

Critical SolarWinds Serv-U Vulnerabilities (CVSS 9.1) Enable Admin RCE and Path Traversal Bypass          *

Sneaky 2FA Phishing Kit Adds BitB Pop-ups Designed to Mimic the Browser Address Bar          *

Trojanized ‘Free’ VPN Extension with 9 Million Installs Hijacks Sessions and Tracks User Online Behavior          *

AI-Generated ShadowRay 2.0 Botnet Targets 230,000 Exposed Ray AI Clusters          *

Stealthy Chrome Malicious VPN Extensions Used for Traffic Redirection and Data Exfiltration          *

Critical FortiWeb Vulnerability Under Attack: CISA Adds CVE-2025-58034 to KEV Catalog          *

Four Severe Vulnerabilities Discovered in D-Link DIR-878 No Patches Due to EOS-EOL Status          *

Eurofiber France Infrastructure Exposed After GLPI ITSM Platform Exploit          *

Google Issues Emergency Chrome Update to Fix Actively Exploited Zero-Day          *

Critical Flaw in Imunify AI-Bolit Component Allows Remote Code Execution          *

Data Breach at Princeton University Compromises Student, Alumni, and Employee Records          *

French Government-Linked Pajemploi Targeted in Breach Impacting 1.2M          *

Threat Actors Leverage Remcos RAT C2 Network for Stealthy Remote Control          *

Nine-Day Lynx Ransomware Attack Exposes Critical Security Gaps          *

UNC1549 Exposed Tactics, Tools, and Malware Threatening Aerospace and Defense          *

W3 Total Cache Plugin Vulnerabilities Endanger One Million Website Owners Worldwide          *

Under Armour Data Breach: Everest Ransomware Group Boasts 343 GB Stolen Files          *

Cloudflare Outage Disrupts X, OpenAI, and Popular Multiplayer Games          *

EVALUSION ClickFix Campaign Deploys Amatera Stealer and NetSupport RAT in New Malware Wave          *

DigitStealer Malware Hits M2+ Macs, Hijacks Ledger Live via JXA and DNS C2          *

DragonBreath APT Targets Chinese Users with Stealthy Multi-Stage RoningLoader Campaign          *

Severe RCE Vulnerabilities Discovered in AI Inference Frameworks from Meta, Nvidia, and Microsoft          *

Microsoft Azure Suffers Massive 15 Tbps DDoS Attack from Half a Million IPs          *

Logitech Discloses Intrusion After Clop Publishes Stolen Data Claims          *

Customized Social Engineering Tactics Used by Iranian SpearSpecter to Target High-Profile Officials          *

Researchers Unveil New Techniques to Detect Outlook NotDoor Backdoor Malware          *

LG Data Exposure Alleged After Hacker Publishes Source Code Samples          *

TaskHound Exposes High Risk Windows Scheduled Tasks with Privileged Execution Paths          *

Fortinet FortiWeb Authentication Bypass & Path Traversal (CVE-2025-64446)          *

Critical MCP Server Injection Vulnerability Exposes Cursor IDE to Code Execution Remote          *

Unremovable Israeli Spyware on Samsung Phones (AppCloud)          *

IBM AIX Faces CVSS 10.0 RCE & NIM Private Key Exposure in Newly Disclosed Flaws          *

ClickFix Attack Chain Uses Finger Protocol to Deploy Python Payloads, NetSupport RAT and Infostealers          *

Critical pgAdmin Flaws Enable RCE Through Malicious PostgreSQL Dump Files          *

CISA Issues Warning on Severe Lynx+ Gateway Flaw Enabling Unauthenticated Remote Reset With No Vendor Action          *

High-Severity Memos Flaw (CVE-2024-21635) Allows Persistent Unauthorized Access          *

Malicious npm Package With 206K Downloads Steals GitHub Tokens From Developer Repositories          *

Cisco Catalyst Center CVE-2025-20341 Enables Authenticated Privilege Escalation on ESXi Deployments          *

Lite XL Vulnerability Exposes Users to Code Execution Attacks          *

Kraken Cross-Platform Ransomware Expands Attacks to Windows, Linux, and VMware ESXi Environments          *

Malicious Ethereum Wallet Extension on Chrome Web Store Grants Full Wallet Control          *

Phishing Campaign Targets Customers of Leading Italian Web Hosting Provider          *

Android Photo-Frame App Distributes Malicious Payloads          *

Imunify360 Zero-Day-Like RCE Threat Endangers Millions of Linux Web Servers          *

Checkout.com Breach Linked to Exposed Legacy Cloud Storage System          *

DoorDash Confirms October 2025 Data Breach Exposing User Contact Information          *

High-Risk NVIDIA NeMo Vulnerabilities Impact AI Pipelines Before Version 2.5.0          *

Zero-day Attack Warning: Fortinet FortiWeb Exploit Grants Unauthenticated Admin Access          *

Critical ASUS DSL Router Authentication Bypass Vulnerability (CVE-2025-59367)          *

Zero-Day Campaign Targets Cisco ISE and Citrix, Compromising Critical Identity Systems Globally          *

Severe Zoho Analytics Plus Vulnerability (CVE-2025-8324, CVSS 9.8) Enables Unauthenticated SQL Injection and Potential Data Compromise          *

How Malicious Actors Turn Vector Images (SVG) Into Live Phishing Lures that Bypass Email Defenses          *

OpenAI Sora 2 Security Bug Exposes System Prompts Using Audio Transcripts          *

Dell Issues Emergency Patch After Critical Data Lakehouse Privilege-Escalation Bug          *

Microsoft SQL Server Flaw Allows Attackers to Gain Elevated Privileges          *

Massive npm Supply Chain Spam Campaign Publishes Over Fake Packages          *

DanaBot Malware Resurfaces After 6-Month Hiatus to Target Windows Systems          *

Security Update: Kibana SSRF and XSS Vulnerabilities Patched          *

PAN-OS Firewall Vulnerability (CVE-2025-4619) Enables Unauthenticated Device Reboot          *

GitLab XSS Flaw (CVE-2025-11224) Threatens Kubernetes Proxy Sessions          *

Hackers Exploit SSRF Vulnerability in Custom GPTs, Exposing ChatGPT’s Cloud Secrets          *

Tor Browser 15.0.1 Update Patches Multiple Vulnerabilities Across Platforms          *

Citrix NetScaler ADC and Gateway Flaw Allows Cross-Site Scripting Exploitation          *

Apple Device Recovery Phishing Scam Targets Lost iPhone Owners with Fake “Found Device” Alerts          *

New Android RAT “KomeX” (advertised on hacker forums)          *

Microsoft Patches Critical Flaws in GitHub Copilot and Visual Studio Code Allowing Security Feature Bypass          *

Rhadamanthys Infostealer Disrupted as Cybercriminals Lose Server Access          *

New Phishing Wave Exploits Meta Business Suite Features for Credential Theft          *

Critical Milvus Proxy Vulnerability (CVE-2025-64513, CVSS 9.3) Enables Authentication Bypass          *

Apache OpenOffice Addresses Memory Corruption and Remote Content Loading Flaws          *

Chrome Emergency Fix: High-Severity V8 Flaw (CVE-2025-13042) Risks Remote Code Execution          *

Critical GE Vernova Smallworld SWMFS Improper Authentication (CVE-2025-3222)          *

Ivanti Endpoint Manager Vulnerabilities Could Allow Arbitrary File Writes to System Disk          *

GlobalLogic Suffers Data Breach via Oracle E-Business Suite Zero-Day Exploit (CVE-2025-61882)          *

Microsoft Patch Tuesday Security Advisory – November 2025          *

Vulnerability in Zoom Enables Bypass of Access Controls, Exposes Session Data          *

Mozilla Patches Critical Firefox Flaws Enabling Remote Code Execution          *

Security Alert-Themed Phishing Campaign Exploits Domain Trust to Steal Email Credentials          *

Synology BeeStation Zero-Day Vulnerability (CVE-2025-12686) Allows Remote Code Execution          *

KONNI APT Exploits Google Find Hub to Wipe Android Devices After Credential Theft          *

Maverick and Coyote Banking Trojans Target Brazilian Users via WhatsApp          *

SAP Issues November 2025 Patch Day Updates to Mitigate High-Severity Remote Code Execution and Injection Weaknesses in Key Business Applications          *

Critical WatchGuard Firebox Vulnerability (CVE-2025-59396, CVSS 9.8) Enables Remote Admin Access via Default SSH Credentials          *

Authenticated SQLi in SuiteCRM Exposes Customer Data Upgrade to 8.9.1 Now          *

Quantum Route Redirect Phishing Service Targets Microsoft 365 Users          *

JokerJanus-style Campaign Abuses Triofox Configuration to Deploy Remote Access Tools (CVE-2025-12480)          *

Critical Devolutions Server Vulnerability (CVE-2025-12485, CVSS 9.4) Enables User Impersonation Through Pre-MFA Session Cookie Hijacking          *

Kimsuky and APT37 Uses Google Find Hub Abuse Google Accounts for Remote Android Data Wipe Attacks          *

Android Users Hit by Malware Disguised as Relaxation Programs          *

Critical NPM Library Flaw in expr-eval Puts AI and NLP Applications at Risk of Remote Code Execution          *

Data Breach at Chinese Security Giant Reveals Cyber Weapons and Global Espionage Campaigns          *

Hospitality Sector Targeted by ClickFix Phishing and PureRAT Malware Campaign          *

APT Groups Target Construction Industry Networks to Steal RDP, SSH, and Citrix Credentials          *

Paragon “Graphite” Spyware Targets iOS Devices Through Zero-Click Exploits in Global Surveillance Campaigns          *

China-Linked Espionage Campaign Targets U.S. Policy Non-Profit via DLL Side-Loading          *

MAD-CAT Enables Real-World Data Corruption Simulation          *

QNAP Fixes Multiple Zero Days Demonstrated at Pwn2Own 2025          *

Ex Intel Engineer Accused of Stealing 18000 Confidential Files Marked Top Secret          *

Vidar Infostealer Launches First-Ever npm Attack Chain Through 17 Typosquatted Packages and Postinstall Payloads          *

Hackers Compromise Sites to Insert SEO-Boosting Malicious Links          *

Whisper Leak: Novel Side-Channel Attack on Remote Language Models          *

LangGraph RCE Vulnerability CVE-2025-64439 in JsonPlusSerializer Enables Arbitrary Python Code Execution          *

Threat Actors Exploiting Monsta FTP Remote Code Execution Vulnerability          *

CVE-2025-37735: Elastic Defend Permission Bug Enables Local Privilege Escalation          *

LeakyInjector and LeakyStealer Campaign Targets Crypto Wallets and Browser Data          *

Landfall Android Spyware Exploits Samsung Zero-Day to Target Galaxy Phones Worldwide          *

Advanced Persistent Threat Group Breaches U.S. Congressional Budget Office          *

Keras Deep Learning Tool Impacted by Data Exposure Vulnerability          *

Critical Flaw in NVIDIA NVApp for Windows Enables Remote Code Execution          *

FreeBSD-based OPNsense Firewall Released for Security Issues and Improvements          *

Phishing Campaign Targeting Travelers via Compromised Booking Accounts          *

Cavalry Werewolf APT Campaign (FoalShell / StallionRAT)          *

Elastic EDR Vulnerability Exposed: Call Gadgets Used to Bypass Detection          *

DragonForce Ransomware Hits Manufacturing Firm, Using Brute-Force Attacks and SSH Data Exfiltration to Russian Server          *

Trojanized npm Packages Deliver Vidar to Windows Hosts          *

From Cyberspace to Strategy: How Chinese Cyber Activities Shape U.S. Foreign Policy Responses          *

Amazon Addresses Critical Token Exposure Bug in WorkSpaces Linux Client (CVE-2025-12779)          *

Cisco ISE RADIUS Vulnerability (CVE-2025-20343) Causes Unauthenticated Denial-of-Service Attacks          *

OCI Fixes Container Escape Vulnerabilities in runc (CVE-2025-31133, CVE-2025-52565, CVE-2025-52881)          *

Russia-Aligned InedibleOchotense Impersonates ESET to Deploy Kalambur Backdoor Targeting Ukraine          *

Malicious Plugin or Dependency Injection Enables Remote Code Execution in Claude Desktop Environment          *

Massive DoS Risk Emerges from HTTP/2 ‘MadeYouReset’ Vulnerability          *

Newly Discovered Flaws in GPT Models Enable 0-Click Exploitation          *

Hackers Weaponize Windows Hyper-V to Hide Linux VM and Evade EDR Detection          *

ValleyRAT Campaign (ValleyRAT) — Windows Remote-Access Trojan          *

EndClient RAT Exploits Hijacked Code-Signing to Bypass Endpoint Defenses and Exfiltrate Victim Data          *

Gootloader Resurfaces After 7 Month Hiatus with Enhanced Evasion Techniques          *

Hyundai AutoEver America Data Breach Exposes SSNs and Driver’s Licenses          *

Critical VizAir Vulnerabilities (CVSS 10.0) Allow Unauthenticated Control of Airport Weather Systems          *

PROMPTFLUX Malware Uses Gemini AI to Rewrite Its Code Hourly          *

Cisco Unified CCX Remote Code Execution Vulnerabilities (CVE-2025-20354, CVE-2025-20358)          *

Google Issues Urgent Chrome Update to Patch Critical WebGPU and V8 Security Flaws          *

Django Patches High-Severity SQL Injection (CVE-2025-64459) and DoS Bug (CVE-2025-64458)          *

Apache OpenOffice Infrastructure Reportedly Breached via Akira Ransomware Campaign          *

Attackers Exploit OneDrive.exe DLL Sideloading to Run Arbitrary Code          *

17,000 Employees and Partners Affected in Nikkei Slack Security Incident          *

CISA Flags Gladinet CentreStack and Control Web Panel Vulnerabilities Under Active Exploitation          *

ASF Confirms No Evidence of Data Breach Following Akira Ransomware Claims          *

AI-Driven Ransomware Surge Against European Organizations          *

Jupyter Misconfiguration Vulnerability Lets Attackers Gain Root Access Remotely          *

Malicious Android Applications on Google Play Accumulate Over 42 Million Downloads          *

Microsoft Teams Identity & Message Manipulation Flaws (CVE-2024-38197)          *

Critical CVE-2025-11749-AI Engine Plugin Authentication, MCP Token Exposure          *

NGate Android Malware Relays NFC Transactions, Enables ATM Cashouts          *

Critical Flaw in WordPress Post SMTP Plugin Exposes 400,000 Sites to Account Takeover Risk          *

Sweden Probes Major Municipal IT Supplier Breach Affecting 1.5M People          *

Malicious PuTTY and Fake Teams Ads Spread Malware, Granting Attackers Network Access          *

Critical 0-Click Vulnerability Exposes Android Devices to Remote Code Execution Attacks          *

Critical Vulnerability in React Native NPM Package Enables Remote Code Execution          *

Balancer DeFi Platform Targeted in Multi-Chain Exploit, With Over $100 Million in Assets Drained from V2 Pools          *

SleepyDuck RAT Infects IDE Extensions, Raises Supply-Chain Alarms          *

Active RondoDox v2 Malware Campaign Exploiting Multiple IoT and Enterprise Vulnerabilities          *

Google AI ‘Big Sleep’ Discovers Five New WebKit Vulnerabilities in Safari (CVE-2025-43429 through CVE-2025-43434)          *

JobMonster WordPress Theme Hit by Critical Auth Bypass Vulnerability          *

SesameOp Exploits Legitimate OpenAI API to Run Encrypted Espionage Operations          *

Generative AI Empowers Rapid Reverse Engineering of XLoader’s Multi-Layer Encryption          *

AI-Discovered Redis Flaw (CVE-2025-62507) — Stack Buffer Overflow Allowing Potential RCE          *

Windows SMB Server Elevation-of-Privilege Vulnerability (CVE-2025-58726)          *

Hacker Claims to Have Stolen 1.2 Million Donor Records in University of Pennsylvania Data Breach          *

Major Telecom Provider Ribbon Communications Breached by State Hackers          *

Windows Graphics Engine Flaws Allow Remote Code Execution by Attackers          *

New Global Phishing Campaign Exploits Cloudflare and Zendesk Pages for Credential Theft          *

Canada Reports Critical Infrastructure Breach by Hacktivists          *

Operation SkyCloak Targets Russian, Belarusian Military via LNK Exploit and Tor Backdoor          *

New Defensive Email Protocol Blocks Phishing Vectors Exploited in NPM Compromise          *

Ernst and Young (EY) Exposes 4 TB SQL Server Backup Publicly on Microsoft Azure          *

Elastic Cloud Enterprise Privilege Escalation (CVE-2025-37736)          *

Open VSX Access Token Leak Enables Supply-Chain Malware Campaign          *

New BOF Tool Exploits Microsoft Teams’ Cookie Encryption to Access User Chats          *

UNC6384 Attack via Windows Shortcut Vulnerability (CVE-2025-9491) Deploys PlugX RAT Through Canon DLL Sideloading          *

AMD Zen 5 RDSEED Flaw (CVE-2025-62626) Risks Randomness Integrity — Microcode Fix Coming          *

ASD Warns of Ongoing BADCANDY Attacks Exploiting Critical Cisco IOS XE Vulnerability (CVE-2023-20198)          *

Researchers Create Linux Rootkit That Bypasses Elastic EDR          *

Russian Threat Actors Exploit LotL Methods, Deploy Sandworm Webshells, and Steal Credentials in Ukraine          *

Chinese Hackers Exploit Cisco ASA Firewall Flaws to Target Governments Worldwide          *

Conduent Data Breach Exposes Personal Information of Over 10 Million People Linked to Government Services          *

Threat Actors Exploiting Open-Source C2 Frameworks to Deploy Malicious Payloads          *

Brash — Critical Chromium Blink DoS via document.title injection          *

Threat Actors Using Multilingual ZIP File to Attack Financial and Government Organizations          *

AzureHound Penetration Testing Tool Weaponized by Threat Actors to Enumerate Azure and Entra ID          *

CVE-2025-64095 Critical CVSS 10.0 Flaw in DNN Platform Allows Unauthenticated Website Overwrite          *

MOVEit Transfer Vulnerability (CVE-2025-10932) Fixed in Latest Progress Security Update          *

Kimsuky and Lazarus Hacker Groups Unveil New Tools That Enable Backdoor and Remote Access          *

500GB Great Firewall Data Breach Reveals Censorship Secrets          *

PhantomRaven Campaign Steals Developer Tokens via Hidden npm Dependencies          *

Airstalk Malware Exploits VMware AirWatch MDM APIs in Suspected Nation-State Espionage Campaign          *

Lampion Stealer Returns with ClickFix Campaign to Steal User Credentials Stealthily          *

Brash Vulnerability in Chromium Blink Engine Triggers Critical Browser Collapse          *

Chinese APT BRONZE BUTLER Exploits LANSCOPE Zero-Day (CVE-2025-61932)          *

Critical XSS Flaw (CVE-2025-12450) Affects Over 7 Million WordPress Sites Using LiteSpeed Cache          *

Russian-Linked Ransomware Gangs Weaponize Open-Source Exploits          *

Thousands of WordPress Sites at Risk from Actively Exploited WP Freeio Privilege Escalation Vulnerability          *

Windows Cloud Files Minifilter TOCTOU Privilege Escalation (CVE-2025-55680)          *

Jenkins Hit by Series of Plugin Vulnerabilities, Including SAML Authentication Bypass (CVE-2025-64131)          *

Automated Threat Campaigns Rise as Botnets Exploit PHP Flaws, IoT Weaknesses          *

Hacktivist Attacks Disrupt Canadian Critical Infrastructure Systems          *

npm Typosquat Campaign Delivers PyInstaller Infostealer via Fake CAPTCHA          *

New AI-Targeted Cloaking Attack Deceives AI Crawlers Into Treating False Content as Verified Facts          *

WooCommerce Credit Card Skimmer Malware Targets WordPress Sites          *

Trigona Ransomware Attacks MS-SQL Servers Using Rust Scanner and BCP Utility to Deploy Payloads          *

Critical IBM Maximo Vulnerability (CVE-2025-36386) Exposes Cognos Analytics to Unauthenticated Attacks          *

Critical MikroTik Vulnerability (CVE-2025-61481, CVSS 10.0) Leaks Admin Credentials via Unencrypted WebFig Interface          *

Beast Ransomware (BEAST) — Active SMB-targeting RaaS with Double-Extortion Tactics          *

Hackers Allegedly Claim Breach of HSBC USA Customers’ Records Including Financial Details          *

Atroposia’s Plugin Ecosystem Enables Targeted Fileless Exfiltration          *

New TEE.Fail Side-Channel Attack Extracts Secrets from Intel & AMD DDR5 Secure Enclaves          *

Dentsu Confirms Data Breach Impacting Its Subsidiary Merkle          *

Gunra Ransomware Analysis: Dual-Platform Threat with Recoverable Linux Encryption Flaw          *

Wear OS Messages Flaw (CVE-2025-12080) Enables Silent SMS/RCS Transmission by Unprivileged Apps          *

Docker Compose Path Traversal Vulnerability (CVE-2025-62725) Enables Arbitrary File Overwrite via OCI Artifacts          *

Critical Ubuntu Kernel Flaw Enables Local Privilege Escalation to Root          *

XWiki Zero-Day RCE Actively Used to Deploy Cryptominer          *

Gamaredon Phishing Campaign Exploits WinRAR Path-Traversal Flaw (CVE-2025-8088) to Target Government Entities          *

Herodotus Sophisticated Android Malware Imitates Human Actions to Evade Biometric Defenses          *

Predatory Sparrow Group Launches Cyber Attacks on Critical Infrastructure to Destroy Data and Disrupt Operations          *

Kaspersky Tracks ForumTroll Hackers Exploiting Chrome Zero-Day to Spy on Users          *

ChatGPT “Tainted Memories” Exploit Targets Atlas Browser Memory Feature          *

BlueNoroff Refines Social Engineering Tactics to Target Executives and Financial Managers          *

Everest Ransomware Targets Swedish Energy Infrastructure          *

DLL Sideloading and Graph API: Inside Lazarus Group’s DreamLoader Operation          *

Caminho Loader (LaaS) Uses LSB Steganography to Hide .NET Payloads in Images          *

Ubiquiti UniFi Access App Flaw Exposes Management API to Unauthenticated Access          *

New SideWinder Attack Chain Uses ClickOnce to Compromise South Asian Diplomats          *

Baohuo Android Backdoor Disguised as Telegram X Clone Uses Redis-Based C2 Infrastructure          *

Apache Addresses Tomcat RCE and Log Escape Flaws Allowing File Upload and Hijack Server          *

Prompt Injection Risk in ChatGPT Atlas via Malformed URLs          *

Major HashiCorp Vault Vulnerabilities Expose Systems to Authentication Bypass and DoS Attacks          *

Italian Spyware Vendor Memento Labs Linked to Chrome Zero-Day Exploits in Operation ForumTroll          *

EDR-Redir Tool Bypasses EDR Protections (EDR-Redir)          *

DDoS Attack Disrupts Russian Food-Safety Agency Rosselkhoznadzor’s Shipment Tracking Systems          *

Smishing Triad 194,000+ Malicious Domains Power Global Phishing-as-a-Service Campaign          *

WhatsApp Zero Click Exploit Disclosed to Meta          *

North Korean Chollima Threat Actor Activity Surges in Crypto and Espionage Operations          *

Qilin Ransomware Hybrid Attack Leverages Linux Payload & BYOVD Exploit          *

BreachForums Returns Again with New Clearnet Domain          *

Microsoft Adds Wi-Fi-Based Work Location Auto-Detection to Teams          *

RedTiger Infostealer Used to Hijack Discord Accounts          *

Unauthenticated API Bypass Flaw Exposes Dell Storage Manager to Remote Exploitation (CVE-2025-43995)          *

OpenWrt patches ubusd RCE and ltq-ptm kernel memory leak          *

Veeder-Root TLS4B Command Injection RCE (CVE-2025-58428)          *

Datadog Reveals CoPhish Phishing Campaign Abusing Microsoft Copilot Studio Agents for OAuth Token Theft          *

APT36 Deploys Golang-Based DeskRAT in Espionage Campaign Against Indian Government          *

Critical ZYXEL ATP/USG Vulnerability (CVE-2025-9133) Exposes Sensitive Configurations          *

Proofpoint Launches PDF Object Hashing Tool to Detect Malicious PDFs          *

Samsung Galaxy S25 Zero-Day Vulnerability Allows Remote Camera and Location Access          *

Multiple Oracle VM VirtualBox Vulnerabilities Enable Complete Takeover          *

Self-Spreading GlassWorm Malware Infects VS Code Extensions in Global Supply Chain Attack          *

SquareX Uncovers Cybercriminals Impersonating AI Sidebars in Browser Extensions          *

Critical HP OneAgent Update Disrupts Microsoft Entra ID Access          *

Toys “R” Us Canada Data Breach Exposes Customer Information          *

Fileless Remcos RAT (Commercial RAT) Campaign Bypassing EDRs          *

Lazarus Group Targets European UAV Firms in Sophisticated Cyberespionage Campaign          *

CISA Alerts on Critical Raisecom Router Bug (CVE-2025-11534, CVSS 9.8) Allowing Root SSH Access Without Authentication          *

PhantomCaptcha Spearphishing Campaign Uses Social Engineering and WebSocket RAT, Exploits Fake Captcha for Remote Access          *

Critical NeuVector RCE Vulnerability (CVE-2025-54469) Enables Command Injection via Unsanitized Environment Variables          *

Researchers Uncover Warlock Ransomware, A Chinese-Linked Threat Exploiting Microsoft Zero-Day          *

Critical WSUS RCE via Unsafe AuthorizationCookie Deserialization — CVE-2025-59287          *

Critical Argument Injection Vulnerability in AI Agents Allows Remote Code Execution          *

Security Bug in Perplexity’s Comet Screenshot Function Enables Prompt Injection Exploits          *

Severe Smithery.ai Vulnerability Exposes Thousands of AI Servers and Credentials          *

WinRAR RAR Archive Exploit Lets Attackers Drop Files          *

SessionReaper Vulnerability Actively Exploited in Adobe Commerce and Magento          *

Iranian APT MuddyWater Deploys Phoenix Backdoor in Attacks on 100+ Government Entities          *

Critical BIND 9 Flaws Allow DNS Cache Poisoning and Denial-of-Service Attacks          *

CISA Issues Warning as Hackers Exploit Major Lanscope Endpoint Manager Vulnerability          *

Jingle Thief Hackers Target Cloud to Steal Gift Cards          *

Jira Path Traversal Vulnerability (CVE-2025-22167) Enables Arbitrary File Write on Server and Data Center Instances          *

Symantec Exposes Coordinated Chinese Cyber Espionage Campaign Targeting Global Organizations          *

Malicious NuGet Typosquat “Nether?um.All” Targets Developers to Steal Crypto Wallet Keys via Solana-Themed C2          *

Bitter APT Launches Targeted Cyber-Espionage Campaign Using WinRAR Zero-Day and Malicious Office Files          *

High-Severity V8 Vulnerability (CVE-2025-12036) Prompts Urgent Google Chrome Update          *

GitLab Fixes High-Severity Runner Hijacking Bug (CVE-2025-11702) and Several Denial-of-Service Vulnerabilities          *

New APT Campaign PassiveNeuron Deploys Novel Malware Across Three Continents          *

Millions of User Credentials Compromised Daily by Stealer Malware          *

SharkStealer Uses EtherHiding on BSC Testnet to Evade C2 Detection          *

High-Severity TARmageddon Flaw Found in Popular Rust TAR Libraries          *

Vidar Stealer Targets Browser Credentials with Direct Memory Attacks          *

Muji Suspends Online Sales Following Ransomware Attack on Delivery Partner          *

PolarEdge Router Botnet Expands: Cisco, ASUS, QNAP, Synology Targeted          *

Sophisticated APT PassiveNeuron Returns, Escalates Attacks on Government and Finance          *

Luma Infostealer Malware Targets Browser Data and Crypto Wallets          *

Microsoft 365 Copilot Vulnerability Exposes Sensitive Data Through Indirect Prompt Injection          *

Critical Vulnerabilities in TP-Link Omada Gateways Prompt Urgent Firmware Update          *

AdaptixC2 Targets Developers Through Malicious npm Supply-Chain Attack          *

Remote Code Injection Vulnerability Discovered in Apache Syncope's Groovy Integration          *

Critical Vulnerability in LANSCOPE Endpoint Manager Enables Remote Code Execution          *

Critical Moxa Vulnerability (CVE-2025-6950, CVSS 9.9) Enables Unauthenticated Admin Access Through Hard-Coded JWT Secret          *

Severe Squid Proxy Bug (CVE-2025-62168) Allows Credential and Token Leakage Through Error Pages          *

Global Internet Disruption as AWS Outage Hits Key Services          *

Clone Wave Hijacks WhatsApp via 131 Chrome Extensions          *

PoC Published for High-Severity Linux-PAM Flaw Allowing Local Privilege Escalation          *

Volkswagen Hit by Ransomware Group 8Base in Alleged Global Data Breach          *

Zimbra Releases Urgent Update to Fix Critical SSRF Flaw in Chat Proxy          *

Phishing Campaign Leveraging Microsoft Logos and Remote Access Fraud          *

BlockNovas Threat Group Evolves with New OtterCandy Malware in ClickFake Interview Campaign          *

Indiana City Acknowledges Ransomware Hackers Caused Widespread Disruption in September          *

Advanced Winos 4.0 Toolset Powers Silver Fox Cyber Attacks in Asia Pacific          *

Windows 11 24H2/25H2 Update Causes Mouse and Keyboard to Stop Working in Recovery Mode          *

Dairy Farmers of America Confirms June Cyberattack Exposed Personal Information          *

Phoenix Contact Patches QUINT4 UPS Flaws; One Vulnerability Remains Unfixable          *

Microsoft Patches Most Severe ASP.NET Core Vulnerability to Date          *

ConnectWise Automate Security Vulnerabilities Allow Injection of Malicious Code via Software Updates          *

Misconfigured NetcoreCloud Server Leaked 40 Billion Records Across 13.4TB of Data          *

Critical Security Flaws Found in Spring Cloud Gateway (CVE-2025-41253) and Spring Framework (CVE-2025-41254)          *

LinkPro Rootkit Leverages eBPF on GNU/Linux to Conceal Malicious Activity          *

Critical GDI Vulnerability in Windows Rust Kernel Module Causes System Instability          *

Fake Microsoft Support Scam Tricks Users into Giving Up Credentials          *

AI Used to Boost Cyberattacks and Create Malware, Report Finds          *

VMware Workstation and Fusion 25H2 Update Introduces New Features and Expanded OS Compatibility          *

Cisco IP Phone Bugs in CUCM-Registered Devices Allow Remote DoS and XSS Threatening Network and Device Stability          *

Prosper Data Breach Exposes Personal Information of 17.6 Million Users          *

North Korea-Linked Hackers Exploit EtherHiding Technique in Advanced Crypto Theft Campaign          *

Log Poisoning Attack Exploits phpMyAdmin to Deliver Gh0st RAT          *

Critical Deno Vulnerability Enables Command Injection via Batch Files on Windows          *

Akka.NET TLS Vulnerability Exposes Clusters to Untrusted Access (CVE-2025-61778)          *

Sotheby’s Confirms Data Breach Exposing Customer Financial and Personal Information          *

Severe Samba Flaw Enables Unauthenticated Attackers to Execute Commands Remotely          *

Windows Scheduled Tasks Used to Spread ValleyRAT          *

TP-Link AX1800 Media-Sharing Vulnerability Leads to Root Shell          *

Critical UEFI Shell Bug Exposes 200K Framework Laptops to Secure Boot Bypass          *

Previously Removed Malicious Extensions Found Again on OpenVSX          *

PhantomVAI Loader Uses Image Steganography to Deploy Katz Stealer and Bypass Sandboxes          *

Critical Vulnerability in Apache ActiveMQ Allows Arbitrary Code Execution on Clients          *

UK firm Capita Hit with Microsoft 365 Breach and Ransomware Attack Resulting in £14 Million Fine          *

ScreenConnect Exploited in Campaign Granting Unauthorized Remote Access          *

Android “Pixnapping” hijacks screen pixels to grab MFA codes          *

Fake LastPass and Bitwarden Breach Alerts Used to Deliver PC-Hijacking Malware          *

Adobe Releases Patch for Critical Vulnerability in Connect Collaboration Suite          *

NSE Defends Against Record-Breaking Cyberattacks During Operation Sindoor Simulation          *

Nation-State Hackers Breach F5 Networks, Steal BIG-IP Source Code and Vulnerability Data          *

New Windows Server 2025 Update Disrupts Large Group AD Sync          *

Jewelbug Campaign Targets Russian IT Provider and Software Supply Chain          *

Clothing Brand MANGO Reports Unauthorized Access to Customer Info          *

Security Risks Ahead: Microsoft Ends Support for Exchange 2016 and 2019          *

Two Critical Vulnerabilities in Red Lion RTUs Could Give Hackers Complete Industrial Control          *

Veeam Issues Critical Security Patch to Prevent Remote Code Execution Attacks          *

Supply Chain Vulnerability in Clevo UEFI Firmware Exposes Intel Boot Guard Private Keys (CVE-2025-11577)          *

Authentication Bypass Vulnerability Identified in FortiPAM and FortiSwitch Manager          *

New GhostBat Android Malware Posing as RTO Apps Targets Indian Bank Customers          *

FortiOS CLI Vulnerability Lets Attackers Run Arbitrary System Commands          *

Critical Vulnerability in IIS Allows System Level Access via Malicious COM Object Race          *

Microsoft Patch Tuesday Security Advisory – October 2025          *

Rockwell Automation Fixes Critical Flaws in FactoryTalk and ArmorStart Systems          *

Google Patches Use-After-Free Exploit in Chrome          *

SAP NetWeaver Vulnerability Enables Remote Denial-of-Service via Malformed Logon Tickets          *

Critical Flaw in Elastic Cloud Enterprise Enables Malicious Command Execution          *

Colombian Court-themed SVG Smuggling Campaign Distributes AsyncRAT via Malicious HTA          *

Pro-Russian Hacktivist Harvests Credentials from OT-ICS Networks          *

Free Windows 10 ESU for One Year Comes with Mandatory Account and Cloud Backup Setup          *

Critical Vulnerabilities Expose Ivanti Endpoint Manager to Deserialization, Path Traversal & SQL Injection Risks          *

Massive International Botnet Targets U.S. RDP Services          *

Migration from Windows 10 is Critical as EOL Status Creates Exploitable and Non-Compliant Systems          *

Astaroth Banking Trojan Persists via GitHub After Disruption Attempts          *

Kearney Cyberattack Highlights Growing Threat to Education Sector          *

Better Auth Vulnerability Enables Complete Account Takeover via API Key Exploit          *

MediaTek Warns of Multiple High-Severity Vulnerabilities Affecting Wi-Fi and GNSS Hardware          *

Critical Zero-Click Vulnerability Found in Cherry Studio – CVE-2025-61929          *

New WhatsApp Worm Deploys Banking Malware, Exfiltrates Credentials          *

SimonMed Imaging Data Breach Exposes Data of 1.2 Million Patients          *

RealBlindingEDR: Kernel Callback-Based Tool for Disabling AV/EDR Permanently          *

Massive Salesforce Data Breach Linked to Scattered Lapsus$ Hunters          *

Microsoft Fixes Long-Standing Windows 11 ‘Update and Shut Down’ Glitch          *

Critical DOM Vulnerability Enables Remote Code Execution, Impacting 2.7 Million Users          *

Spanish Cybercrime Unit Shuts Down Sophisticated Phishing Network Using AI          *

Axis Plugin Exposed Hardcoded Secrets in Signed DLLs Enabled Widespread Access to Sensitive Resources          *

Critical Zero-Day in Gladinet/Triofox (CVE-2025-11371) Enables RCE via LFI          *

Discord Webhooks Weaponized for Supply Chain Attacks Across Multiple Ecosystems          *

Alert on Fake Homebrew Installer Sites Targeting macOS Developers with Malicious Payloads          *

High-Severity Vulnerabilities Patched in NVIDIA GPU Drivers Across Windows, Linux, and vGPU          *

TP Link Router (CVE 2023 28760) Writable USB Share Can Lead to Root RCE, PoC Out          *

Antivirus Software Vulnerabilities Allow Backdoor Exploits by Hackers          *

New Smishing Scam Targets New Yorkers with Fake Inflation Refund Messages          *

High-Severity Oracle E-Business Suite Vulnerability (CVE-2025-61884) Enables Data Access Without Authentication          *

ChaosBot Breaches Networks via CiscoVPN and AD Credentials          *

Researchers Uncover 175 Malicious npm Packages Used to Redirect Victims to Phishing Sites          *

Polymorphic Python RAT Evades Detection by Mutating on Every Execution          *

Dell Power Manager Vulnerability Exposes Devices to Local Exploits          *

Critical Flaw in Worldline Yomani XR Terminals Allows Root Access via Debug Port          *

North Korean APT Contagious Interview Uses 338 Malicious npm Packages to Target Cryptocurrency Developers          *

Apple now pays $2M for zero-click RCEs          *

SentinelLabs Identifies MalTerminal as an Early LLM-Based Attack          *

Stealit Uses Node.js SEA to Spread via Fake Game and VPN Installers          *

GitHub Copilot Vulnerability Exposes Private Repositories to Source Code Theft          *

Ransomware Actors Leverage Velociraptor in Sophisticated Storm-2603 Campaign          *

Massive Data Breach Reported at KFC Venezuela—1 Million Affected          *

APT Group 'Contagious Interview' Launches Massive npm Attack to Steal Cryptocurrency          *

Massive Global Botnet Targets Remote Desktop Protocol Services          *

Payment Terminal Breach Allows Remote Control          *

Law Enforcement Shuts Down Newly Revived BreachForums Clearnet Marketplace          *

RondoDox Botnet Uses ‘Exploit Shotgun’ to Target 50+ Flaws in Routers and IoT Devices          *

Researchers Publish PoC Exploiting Nothing Phone Boot Chain Flaw          *

Pro-Russian Group TwoNet Exploits XSS Flaw in Fake Water Treatment Plant          *

SnakeKeylogger Malware Spreads via Fake Remittance Emails Using PowerShell and ISO Files with BAT Scripts          *

Juniper Networks Issues Patches for Critical Vulnerabilities in Junos Space          *

Chaos Ransomware’s New C++ Variant Combines File Deletion and Bitcoin Clipboard Hijacking          *

Cybercriminals Target U.S. University Payrolls via HR Platform Phishing          *

CrowdStrike Issues Updates to Resolve Two Windows Falcon Sensor Vulnerabilities Affecting System Stability          *

GitLab Patches Two High-Severity Vulnerabilities in CE and EE Editions          *

Flowise Vulnerability (CVE-2025-61913) Allows Remote Code Execution via Arbitrary File Write          *

Microsoft Azure Suffers Major Outage, Disrupting Cloud Services Across Multiple Regions          *

Tracing UTA0388s Espionage Malware from HealthKick Origins to GOVERSHELL Advancement          *

7Zip Vulnerabilities Allow Remote Code Execution on Unpatched Systems          *

SonicWall Confirms Breach of Customer Firewall Configuration Backups          *

ClayRat Turns Phones into Spy Tools via Social Engineering          *

GitLab Releases Critical Security Fixes for Multiple Denial-of-Service Vulnerabilities          *

Hackers Use Cache Smuggling to Upgrade ClickFix, Silently Delivering Malware          *

PoC Released for Vulnerability in ksmbd Filesystem of Linux Kernel          *

Researchers Discover Python Malware Capable of Changing Its Code on Each Execution          *

Critical OData Injection Flaw Found in Microsoft Events Exposing Registration and Waitlist Databases          *

Attackers Target WordPress Plugin Vulnerability to Hijack Admin Accounts          *

GlobalProtect Portals Under Siege: 2,200 IPs Launch Coordinated Attacks on Palo Alto PAN-OS Systems          *

BK Technologies Reports Cybersecurity Incident Impacting IT Systems and Employee Data          *

Figma Under Threat: MCP Vulnerability Allows Hackers Full Access          *

“Mic-E-Mouse” Hack Turns Ordinary Mice Into Tools for Stealing Private Audio Data          *

Crimson Collective Targets AWS Cloud Environments for Data Theft          *

Open Source Tools Weaponization Marks New Phase in Cyber Warfare          *

Google Chrome Update Fixes Critical Memory Vulnerabilities          *

Nagios Vulnerability Exposes Administrative API Keys in Cleartext          *

Critical Privilege Escalation Vulnerability Affects AWS Client VPN for macOS          *

Shuyal Malware Compromises 19 Browsers to Steal Login Data          *

ASCII Smuggling Vulnerability Exploiting Hidden Unicode Tags Exposes AI Systems to Spoofing and Poisoning          *

CSS Hidden-Text Attacks: Salting Methods Used to Conceal Malware          *

Suspected Chinese Hackers Launch Phishing Campaign Against Serbian Aviation Authority and EU Targets          *

Qilin Ransomware Gang Hacks Mecklenburg County, VA Public Schools          *

Go-Based Vampire Bot Malware Used in Job Scam by Vietnamese Threat Actor BatShadow          *

FWMEP Data Breach Exposes Sensitive Info of 29,485 Individuals          *

Avnet Confirms Data Breach Affecting EMEA Region, Says Most Data Unreadable Without Proprietary Tools          *

CVE-2025-59159: Critical Flaw in SillyTavern Allows Remote Code Execution on Local AI Instances          *

CISA Warns of Ongoing Exploitation of Microsoft Windows Privilege Escalation Vulnerability          *

Trinity of Chaos Hackers Steal and Leak Data from 39 Companies, Including Cisco and Google          *

Multiple Critical Vulnerabilities Fixed by Elastic in Kibana and Elasticsearch          *

OpenSSH Clients Vulnerable to RCE via OpenSSH ProxyCommand Username Injection Using Malicious Git Submodules          *

Snipe-IT Flaw Chain Enables Remote Code Execution and Complete Server Compromise          *

Russian Cybercrime Group Deploys Latrodectus V2 Loader in New Ransomware Campaign          *

Critical Qt Flaws in SVG Module Threaten Embedded and IoT Systems          *

IBM Security Verify Access Vulnerability Enables Root Level Privilege Escalation CVE-2025-36356          *

Doctors Imaging Group Reports Data Breach Affecting Over 171,000 Patients          *

WireTap Attack Circumvents Server SGX to Exfiltrate Sensitive Data          *

FCC Accidentally Leaks Apple’s Confidential iPhone 16e Technical Data          *

Severe Redis Vulnerability (CVE-2025-49844) Enables Remote Code Execution via Lua Scripting          *

QNAP Patches Critical Vulnerabilities in NetBak Replicator and Qsync Central, Including RCE and SQL Injection          *

Persistent WARMCOOKIE Threat Gains Advanced Execution and Campaign Tracking Capabilities          *

Google Chrome Hit by WebAssembly Vulnerability Leading to Full Code Execution          *

Hackers Reportedly Breach Huawei Technologies, Expose Source Code and Internal Tools          *

Adobe Analytics Update Bug Results in Exposure of Client Data to Other Tenants          *

PoC Exploit Released for Sudo Vulnerability That Grants Root Access          *

Yurei Ransomware Spreads Through Network Shares and USB Drives to Lock Files          *

Abuse of IT Administration Tools Enables Stealthy Ransomware Deployment          *

WordPress Sites Silently Compromised Through Server-Side PHP Injections in Theme Files          *

Red Hat Confirms Access to Internal Repositories by Unauthorized Party          *

Zimbra Flaw Exploited in Zero-Day Attack via iCalendar Files          *

Unauthenticated Remote Code Execution Threatens Oracle EBS          *

Local Privilege Escalation in Zabbix Agent via OpenSSL DLL Injection CVE-2025-27237          *

Microsoft Identifies Bug Causing Outlook Classic to Crash on Startup          *

CometJacking Attack Tricks Comet Browser into Email Theft          *

Detour Dog Exploits DNS Infrastructure to Deploy Strela Stealer Malware          *

Palo Alto Networks Login Portals See Massive Surge in Scanning Activity          *

Severe Security Flaw in Unity Editor Enables Arbitrary Code Execution Across Major Operating Systems          *

Critical Privacy and Security Flaws Found in Mobile VPN Solutions          *

Apple EV Certificates Misused to Deliver Fully Undetectable macOS Malware          *

OpenSSL Addresses Three Security Flaws: Memory Corruption and Timing Attacks Affect Numerous Versions          *

XWorm V6.0: RAT Turned Ransomware Threat Targets Windows Systems          *

New FreeIPA Flaw (CVE-2025-7493) Allows Attackers to Escalate Privileges to Domain Admin          *

Critical flaw CVE 2025 6388 enables authentication bypass in WordPress plugin and is actively exploited          *

Critical WebUI Vulnerability in DrayOS Routers Allows Unauthenticated Remote Code Execution          *

Renault and Dacia UK Report Data Breach Affecting Customers          *

DrayTek Fixes Major WebUI Flaw Allowing Remote Code Execution Without Authentication          *

Cavalry Werewolf Phishing Campaign Delivers FoalShell and StallionRAT to Russian Agencies          *

Yoast SEO Premium Vulnerability Exposes WordPress Sites to XSS Attacks          *

Android Spyware Masquerades as Signal and ToTok to Target Users          *

SORVEPOTEL Malware Spread via WhatsApp Targets Windows Systems          *

Compromised Endpoints Weaponized by GhostSocks Proxy Malware Service          *

Attackers Deploy Point and Click Phishing Tool That Evades Email Filters          *

High-Value IIS Servers Compromised by Chinese Hackers to Influence Search Rankings          *

SideWinder Targets Government Entities Across South Asia With Sophisticated Credential Phishing          *

Coordinated Campaign Exploits Grafana CVE-2021-43798 in One-Day Global Surge          *

Critical Security Vulnerabilities Discovered in Splunk Enterprise and Splunk Cloud Platform          *

Google Chrome Patches Dozen Security Flaws in Major Stability Update          *

Three Critical Vulnerabilities in TOTOLINK X6000R Routers Enable Remote Code Execution          *

CABINETRAT Malware Spreads via Malicious Excel Add-ins in Ukraine          *

Ransomware Attack on Dealership Software Firm Exposes Sensitive Data          *

Termix Docker Image Leaking SSH Credentials(CVE-2025-59951)          *

Apache Kylin Flaw (CVE-2025-61733) Allows Complete Authentication Bypass in OLAP Engine          *

Critical NVIDIA Vulnerabilities Allow Privilege Escalation on Affected Systems          *

Malicious PyPI Package SoopSocks Poses as SOCKS5 Proxy and Installs Backdoor on Windows Systems          *

Datzbro Trojan Targets Seniors with Fake Facebook Scams to Steal Banking Data          *

New Klopatra Android RAT Uses Stealth VNC and Paid Obfuscators to Hijack EU Banking Logins          *

CVE-2025-10725: OpenShift AI Role-Binding Flaw Lets Low-Privileged Users Become Cluster Admins          *

Phantom Taurus: New China-Connected Cyberespionage Group Deploys Stealth Malware Against Governments          *

New China Linked APT Group Deploys NET STAR to Breach Government and Telecom Servers          *

Patchwork APT Exploits Macros and Scheduled Tasks for Stealthy C2 and Exfiltration          *

Cybercriminals Exploit Google Careers Branding in Sophisticated Phishing Attack          *

Cyberattack Halts Production at Asahi Group, Disrupts Operations Nationwide          *

Researchers Reveal Google Gemini AI Vulnerabilities Enabling Prompt Injection and Cloud Exploitation          *

Western Digital My Cloud NAS Devices Affected by Critical Command Injection Vulnerability          *

New Infostealer Hides Control Using BNB Smart Chain and Steam Profiles          *

Broadcom Patches Critical Vulnerabilities in VMware vCenter and NSX          *

Cisco ASA End of Life Devices Targeted by Persistent Bootkit RayInitiator and LINE VIPER          *

Broadcom Releases Patches for VMware Tools and Aria Operations to Address Privilege Escalation and Information Disclosure Flaws          *

New Spear-Phishing Campaign Deploys DarkCloud Infostealer for Credential Theft          *

CVE-2025-58384 (CVSS 10): Watchdoc Print Management Software Hit by Severe RCE Flaw          *

Critical Security Alert Apache Fory Pyfory Exposes Systems to RCE          *

Malicious Actors Leveraging Dynamic DNS Services for Cyber Attacks          *

Rhysida Ransomware Gang Claims Cyberattack on Maryland Transit Administration          *

Medusa Ransomware Group Claims Massive Data Breach on Comcast, Demands $1.2 Million Ransom          *

Harrods Suffers Major Data Leak as 430,000 Customer Records Stolen Through Vendor Breach          *

Archer Health Breach Exposes 23GB of Patient Medical Records          *

New Olymp Loader Malware-as-a-Service Enables Defender Bypass and Auto Certificate Signing          *

ThreatBook Rolls Out Industry-Leading Threat Intelligence Technology          *

WhatsApp 0-Click Vulnerability Exploited via Malicious DNG Image          *

Windows Heap Record Update Flaw Enables Arbitrary Code Execution          *

CVE-2025-59934: Formbricks Password Reset Vulnerability Enables Account Compromise          *

Critical Rancher Vulnerability Enables Admin Lockout and Account Takeover via Username Manipulation          *

Cybercriminals Exploit Facebook, Google Ads, and YouTube to Spread Crypto-Stealing Malware          *

ASLR Bypass via NSDictionary Serialization on Apple Devices          *

New DLL Hijack Flaw in Notepad++ Could Be Weaponized for Local Attacks          *

XCSSETmacOS Malware Evolves Variant Exploits Firefox and Clipboard for Crypto Theft          *

Cyberattack on Jaguar Land Rover Triggers Major Supply Chain Disruption          *

Collins Aerospace Restores Airline Systems Following Cyberattack          *

Thousands of Bank Transaction Records in India Leaked Due to Fintech Cloud Security Flaw          *

Ransomware Attack on Kido International Exposes Data of 8,000 Children Across Global IT Infrastructure          *

Fake Microsoft Teams Installers Spread Oyster Malware Through Malvertising          *

New LNK-Based Attack Exploits Legitimate System Binaries          *

Rust Dependency Attack Targets Solana and Ethereum Private Keys          *

LockBit 5.0 Ransomware: Advanced Multi-Platform Variant Strikes Windows, Linux, and ESXi Systems          *

High-Severity Vulnerability Found in Rack’s Query Parameter Handling          *

Steam Acknowledges Malware Discovery in BlockBlasters Game          *

CloudSEK Uncovers Sophisticated Botnet Campaign Targeting Routers and Enterprise Systems          *

Arizona School District Alerts 35,000 Individuals of Data Breach After Ransomware Attack          *

Unpatched Vulnerabilities in Legacy Cognex Cameras Pose Serious Industrial Security Risks          *

Ransomware Attack on Union County, Ohio Exposes Data of 45,000 Residents and Employees          *

JWT Validation Flaw in Formbricks Exposes Users to Full Account Takeover          *

Attackers Exploit SVG Files in New Phishing Campaign Against Ukraine          *

Nvidia Issues Critical Security Update for Megatron-LM Framework          *

Sophisticated XCSSET macOS Variant Hijacks Cryptocurrency Payments          *

Critical Apache Airflow Flaw (CVE-2025-54831) Exposes Secrets to Read-Only Users          *

New Linux Kernel Vulnerability in ksmbd File-Sharing Server Enables High-Privilege Remote Attacks          *

GitLab Patches High-Severity DoS Vulnerabilities Allowing Unauthenticated Attackers to Crash Instances          *

RedNovember Group Targets Government and Tech Firms to Install Persistent Backdoor          *

Mapped Links Identified Between Hacker Groups LAPSUS$, Scattered Spider, and ShinyHunters          *

Critical Cisco Security Flaw Lets Hackers Gain Root Access via HTTP Services          *

NTDS.dit Pulled from Active Directory Threat Actors Gain Domain Access          *

Typosquatted Rust Crates Impersonate Logging Libraries to Steal Ethereum and Solana Wallet Keys          *

Mass Exploitation of CVE-2017-7921 Highlights Need for Urgent Firmware Updates          *

Zloader Reemerges as a Sophisticated Initial Access Broker for Ransomware Attacks          *

BRICKSTORM Malware Campaign Targets US Legal, SaaS, BPO, and Tech Sectors in Stealthy Cyberattacks          *

Emergency Cyber Directive Issued as Cisco ASA Faces Advanced Threat Campaign          *

Hidden Backdoors Give Attackers WordPress Admin Control          *

North Korean Hackers Target Crypto Devs with AkdoorTea Malware          *

ZendTo Vulnerability Exposes System Files to Authenticated Users          *

Two Major Security Bugs in Wondershare RepairIt Risk Data Leaks and AI Model Tampering          *

Cisco IOS and XE Vulnerability Exposes Confidential Information          *

Cisco Confirms In-The-Wild Exploitation of SNMP Stack Overflow in IOS and IOS XE Software          *

NVIDIA Merlin Flaw Allows Attackers to Execute Code Remotely With Root Access          *

Copyright Infringement Notices Abused for Malware Distribution          *

Misconfigured Firebase Services in Mobile Apps Expose Sensitive Data to Unauthenticated Access          *

New Phishing Campaign Targets PyPI Maintainers to Harvest Credentials          *

YiBackdoor Malware Emerges as Strategic Backdoor Tool with Long-Term Persistence Capabilities          *

Cisco Identifies New PlugX Malware Tied to Chinese APT Actors          *

Chromium Extensions Exploited Through Silent Backdoors in Windows Domains          *

Critical Unauthenticated Vulnerability Exposes WAGO Industrial Databases          *

OnePlus OxygenOS Flaw Exposes SMS Data to Malicious Apps          *

Chrome V8 Vulnerabilities Allow Data Exposure and Code Execution          *

Attackers Evade EDR Detection Using In-Memory PE Loaders via Malicious Downloads          *

Critical XSS Vulnerability in DNN Platform Flaw Enables Malicious Scripts Execution with Elevated Privileges          *

Critical RCE Flaw in SolarWinds WHD Triggers Privilege Escalation          *

Lectora Desktop and Online Vulnerable to Cross-Site Scripting Attacks          *

Salesforce CLI Exploit Allows System Level Access on Affected Devices          *

Hackers Target IMDS Service to Gain Initial Access in Cloud Environments          *

BadIIS Module Lets Hackers Hijack IIS Servers to Serve Malware          *

GitHub Strengthens npm Security with WebAuthn 2FA and Trusted Publishing Requirements          *

Subtle Snail’s Silent Siege: Iran-Linked Cyber Espionage Uncovered          *

AAPB Fixes IDOR Exploit That Allowed Unauthorized Access to Archived Content          *

Active Exploitation of Command Injection Vulnerability (CVE-2025-59689) in Libraesva ESG          *

Unpatched Security Flaws in Novakon HMIs Could Allow Remote Attacks on Industrial Systems          *

Data Breach at Stellantis Affects Major Automotive Brands Across North America          *

BlackLock ransomware targets Windows Linux ESXi encrypts data using ChaCha20 and ECDH          *

Netcraft Uncovers 17,500 Lucid Phishing Domains Hitting Global Enterprises          *

Windows Shortcut (LNK) Files Exploited via LNK Stomping to Bypass Security          *

New Tool Silences EDRs and Antivirus with Freeze Mode          *

GOLD SALEM: Global Attacks via SharePoint Flaws          *

Critical BiDi Swap Vulnerability Allows URL Spoofing in Major Web Browsers          *

Microsoft Entra ID Vulnerability (CVE-2025-55241) Enabled Global Admin Impersonation          *

Massive Risk to Industrial IoT as Planet Gateways Found Vulnerable to Unauthenticated Remote Exploitation          *

Cyberattack Cripples Russian Airline KrasAvia, Disrupts Booking and Operations          *

CISA Uncovers Malware Toolkits Used in Ivanti EPMM Exploitation Campaigns          *

FBI Warns Public of Fake IC3 Crime Reporting Portals Used in Scams          *

'Shai-Halud' Malware Campaign Exploits Open-Source Supply Chains via 477 JavaScript Packages on NPM          *

Cyberattack Disrupts Key Airport Systems Across Europe          *

Advanced Threat Actors Exploit Router Vulnerabilities and DNS Flaws in Coordinated Attack          *

Fortra Releases Urgent Patch for GoAnywhere MFT Vulnerability with Maximum Severity CVSS Score of 10.0          *

Tiffany & Co. Confirms External System Compromise Leading to Data Breach          *

Nokia CBIS NCS Manager API Vulnerability: Critical Authentication Bypass          *

Multiple High-Severity Vulnerabilities Discovered in ProGauge MagLink LX Devices          *

AI-Driven Phishing Attacks Use Fake Captcha Pages to Bypass Security and Harvest Credentials          *

Critical Sandbox Bypass in HubSpot’s Jinjava Engine Enables Full Remote Code Execution          *

New iOS Tool Injects Deepfakes to Bypass Facial Verification via Jailbroken iOS Devices          *

CISA: Hackers Leveraging Ivanti Endpoint Vulnerabilities to Deploy Malware          *

KrasAvia Faces Major IT Outage After Suspected Cyber Intrusion          *

Russian Hacking Groups Gamaredon and Turla Collaborate to Deploy Kazuar Backdoor          *

Critical Jenkins Vulnerabilities in Jetty Permission Checks and Log Handling          *

Critical Greenshot Vulnerability Allows Local Code Execution Without Admin Rights          *

CountLoader Expands Russian Ransomware Reach with Versatile Malware Loader          *

SilentSync Strikes: Malicious PyPI Packages Target Python Ecosystem          *

Stack Overflow in TP-Link CWMP Enables Ret2libc RCE, Bypassing ASLR Protections          *

New Rowhammer Attack Bypasses DDR5 Mitigations in SK Hynix DRAM          *

WatchGuard Firebox VPN Vulnerability Opens Door for Network-Based Remote Code Execution Attacks          *

Everest Ransomware Targets BMW in Major Data Breach, Internal Documents Allegedly Stolen          *

Firewall Misconfiguration in PureVPN Linux Clients Risks Data Leakage          *

Russia’s CopyCop Disinfo Web Expands to 200+ Sites Targeting Western Democracies          *

Warlock Ransomware Campaign Targets Global Enterprises via Exploited SharePoint and EDR Bypass          *

Multiple High-Severity Vulnerabilities Patched in Aruba EdgeConnect SD-WAN          *

New MuddyWater Campaign Reveals Strategic Pivot to Precision Malware and Cloud-Based C2          *

BeaverTail Malware Delivered via Fake Job Platforms and Repos          *

Google Issues Urgent Chrome Patch for Actively Exploited V8 Zero-Day (CVE-2025-10585)          *

Kubernetes C Hash Client Vulnerability Exposes Clusters to MiTM Attacks via Custom CA Misuse          *

224 Malicious Apps With 38 Million Downloads Found on Google Play          *

Critical Vulnerabilities in Chaos Mesh Grant Attackers Control Over Kubernetes Clusters          *

LG WebOS TV Flaw Allows Full Device Takeover          *

AI-Powered VenomRAT Targets Windows Users in RevengeHotels Campaign          *

Apple Releases iOS 26 and iPadOS 26 Security Update Fixing 27 Vulnerabilities          *

Spring Framework Fails to Enforce Security Annotations in Generic Superclass Methods          *

Linux Kernel ksmbd Bugs Chained for 0-Click RCE: CVE-2023-52440 & CVE-2023-4130 Exploited.          *

Kimsuky’s AI-Powered Phishing Targets South Korean Defense Sector          *

Critical CUPS Flaws Expose Linux Systems to Remote Attacks          *

Critical LangChainGo Vulnerability Exposes LLM Apps to SSTI Attacks          *

FlowiseAI Password Reset Vulnerability Opens Door to Organization-Wide Breaches Through Insecure API Endpoint          *

Critical Vulnerabilities in Digiever NVRs Allow Unauthenticated Remote Code Execution and Credential Disclosure          *

IBM QRadar SIEM Affected by CWE-732 Misconfigured File Permissions in Version 7.5.0 UP13 IF01          *

Yurei Ransomware Uses PowerShell and ChaCha20 Encryption to Lock Victims' Files          *

Financial Firms Targeted in New DarkCloud Stealer Campaign          *

Great Firewall of China Suffers Unprecedented 500GB+ Data Leak          *

Advanced Malware Campaign Uncovered from China-Aligned Threat Group Hive0154          *

Cloud Isolation Cracked VMSCAPE Exploit Targets AMD and Intel CPUs          *

Phishing Wave Exploits Look-Alike Domains to Target Major U.S. Energy Companies          *

EvilAI Campaign: Exfiltration via Legitimate-Looking Tools          *

New Phishing Service Targets Microsoft, Google, and Okta Users          *

Wayne Memorial Hospital Data Breach Exposes Personal Data of 160,000 Patients          *

HackerOne Investigates Breach, Unauthorized Access to Salesforce Confirmed          *

AI-Powered Pentesting Tool 'Villager' Raises Global Cybersecurity Concerns          *

Reflected XSS Vulnerability Bypasses Amazon CloudFront Security in Safari Browser          *

Panama Ministry of Economy Discloses Ransomware Breach          *

Critical Threat from HybridPetya Ransomware Exploiting UEFI Secure Boot Vulnerability (CVE-2024-7344)          *

Mustang Panda Deploys Advanced Malware in Targeted Southeast Asia Espionage Campaign          *

Fortinet FortiDDoS Vulnerability (CVE-2024-45325) Allows Privileged Attackers to Execute Unauthorized OS Commands          *

Sunshine for Windows Contains High-Severity Vulnerabilities Enabling Attackers to Gain SYSTEM Privileges          *

Systemic SQL Injection Weakness in pREST Threatens PostgreSQL Deployments          *

Adobe Issues Urgent Security Fixes for High-Risk Vulnerabilities Across Multiple Products          *

Samsung Patches Actively Exploited Android Zero-Day CVE-2025-21043          *

Cornwell Quality Tools Data Breach Exposes Personal and Financial Information of Over 100,000 Individuals          *

Daikin Security Gateway Flaw Enables Attackers to Bypass Authentication and Access Internal Systems          *

Microsoft Patches Critical Windows Defender Firewall Flaws Allowing SYSTEM-Level Privilege Escalation          *

Sidewinder APT in Rattlesnake Campaign Deploys Obfuscated JScript via Windows LNK Files          *

SVG Email Attachments Used in Malware Campaign to Deliver XWorm and Remcos RAT          *

Buterat Malware Exploits Enterprise Endpoints for Persistent Access          *

Axios Vulnerability Allows Attackers to Crash Node.js Apps via Malicious Data URLs          *

GitLab Urges Immediate Updates to Patch Critical Security Flaws in CE and EE Versions          *

Stork UI Exposed to Unauthenticated Denial of Service Threat          *

Sophisticated kkRAT Malware Campaign Hits Chinese Users via Fake Installers          *

LNER Data Breach Highlights Supply Chain Vulnerabilities          *

Palo Alto Networks Vulnerability Exposes Service Account Passwords in Cleartext          *

Cisco Releases Fixes for High-Impact IOS XR Vulnerabilities Affecting Network Management and Control          *

Critical Angular SSR Vulnerability (CVE-2025-59052) Exposes Sensitive Data          *

CoreDNS Flaw (CVE-2025-58063) Enables Long-Term DNS Cache Poisoning and Service Disruption          *

Critical RCE Vulnerability in Cursor AI Code Editor Enables Silent Remote Code Execution on Folder Open          *

Massive UDP Flood Overwhelms DDoS Defense Provider with 1.5 Gpps Traffic          *

PoisonSeed Threat Actor Leverages New Domains for Credential Theft          *

NVIDIA NVDebug Tool Vulnerabilities Allow Privilege Escalation and Code Execution          *

Critical Siemens UMC Flaws Enable Remote Code Execution and DoS Attacks          *

EggStreme Malware Employs Multi-Stage In-Memory Attack Chain          *

CHILLYHELL and ZynorRAT: Sophisticated New Malware Strains Target macOS, Windows, and Linux          *

Siemens SIVaaS Vulnerability Exposes Network Share to Remote Attackers          *

SAP Releases Security Updates for High-Risk NetWeaver and S 4HANA Bugs          *

Critical Microsoft Office Flaws Allow Remote Code Execution          *

Sophos Releases Patch for AP6 Access Points Flaw Allowing Admin Access          *

Chrome 140 Update Resolves CVE-2025-10200 and CVE-2025-10201 Security Vulnerabilities          *

SessionReaper Exploit Threatens Magento Ecosystem          *

CVE-2025-41243 : Critical Vulnerability in Spring Cloud Gateway Server WebFlux Allows Property Modification Risk          *

Microsoft Patch Tuesday Security Advisory – September 2025          *

Industrial Ethernet Vulnerability in Rockwell Stratix Devices Enables RCE via CSRF Exploitation          *

Chess.com Discloses Data Breach via Third-Party File Transfer App, Affecting 4,500 Users          *

iCloud Calendar Invites Weaponized in Callback Scam          *

Lovesac Admits Data Breach After Ransomware Group's Claims          *

Astro Cloudflare Adapter Vulnerability (CVE-2025-58179) Enables Attackers to Serve External Content and Execute Malicious Scripts          *

Tenable Confirms Data Breach Impacting Customer Contact Information          *

CVE 2025 9636 COOP Vulnerability in pgAdmin Version 9.7 and Earlier Enables OAuth Flow Manipulation          *

Authorities in Australia Track and Uncover Ransomware Group Activities          *

ImageMagick Vulnerability Enables Remote Code Execution Causing Heap Corruption via Seek-Write Flaw          *

Salesloft & Drift Breach Highlights Risks of OAuth Token Abuse from GitHub Attacks          *

Apache Jackrabbit Vulnerability Exposes Systems to Remote Code Execution (RCE)          *

Stealthy NightshadeC2 Botnet Targets Windows Systems          *

PoC Released for High-Severity cJSON JSON Pointer Parsing Bug (CVE-2025-57052)          *

Critical Podman Flaw Exposes Host Files via Symlink Attack          *

Remote Command Execution Flaw Patched in OpenEdge AdminServer by Progress          *

Wealthsimple Confirms Data Breach via Compromised Third-Party Software          *

Cloudflare Stops 11.5 Tbps Distributed Denial-of-Service Attack Amid Surge in Global DDoS Activity          *

TAG-150 Ramps Up Attacks with Exclusive Malware Tools          *

SafePay Ransomware Surge: A Rising Threat to Global Enterprises          *

New macOS Malware Campaign Targets Enterprise Users with Data-Stealing Trojan          *

Qualcomm Warns of Two Critical Modem Vulnerabilities with CVSS 9.8          *

School District Data Breach Exposes Personal and Financial Data of More Than 31,000 People in South Carolina          *

Advanced GPUGate Malware Exploits Google Ads and GitHub in Delivery Chain          *

Critical Argo CD Vulnerability Exposes Repository Credentials          *

Kaspersky Blocks 10.7 Million Mobile Attacks Amid 143K Malware Packages          *

North Korean Hackers Launch Coordinated Malware Campaign Using Facebook and Telegram          *

Envoy Addresses Two Vulnerabilities Linked to DoS and Session Hijacking Risks          *

Critical Argo CD Vulnerability (CVE-2025-55190) Exposes Git Repository Credentials          *

Windows Driver Vulnerability Discovered Allowing Local Users to Escalate Privileges and Potentially Gain Full System Access          *

Ruijie Networks Switches Affected by Critical CVE-2025-56752 Vulnerability Enabling Remote Admin Access          *

SVG-Based Phishing and SWF Obfuscation Drive Colombian Cyber Campaign          *

Stealthy Windows Attack Bypasses EDR, Uses Raw Disk Access to Evade Detection Targeting SAM and NTDS Credential Files          *

AI-Powered Phishing Attacks Target Microsoft 365 Credentials          *

Critical Zero-Click Email Vulnerability Exploits Unicode-Punycode Mismatch          *

Chinese Cyber Units Weaponize Network Devices in Ongoing Espionage Operations          *

New Cyber Threat Campaign Targets Windows Servers with Custom Malware and SEO Manipulation          *

ZIP File Phishing Leads to Multi-Stage PowerShell Attack by NoisyBear          *

CVE-2025-53690: Remote Code Execution via ASP.NET Machine Key Misuse          *

CVE-2025-53187: ABB ASPECT BMS Exposed to Unauthenticated Remote Code Execution          *

Sangoma Patches Actively Exploited Flaw Allowing Remote Code Execution in FreePBX          *

Bridgestone Probes Cyberattack Disrupting North American Manufacturing          *

CISA Flags Actively Exploited TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377          *

New Django SQL Injection Bug (CVE-2025-57833) Threatens Web App Security          *

CVE-2025-5086 (CVSS 9.0): Critical RCE Vulnerability in DELMIA Apriso Actively Exploited in the Wild          *

Critical Flaw Could Allow Attackers to Exploit AI Model Namespaces          *

Windows Users at Risk as Improper TLS Certificates for 1.1.1.1 Issuance Targets Cloudflare DNS          *

Cloudflare Confirms Data Breach via Drift-Salesloft Supply Chain Attack          *

Proofpoint Warns of Rising Threat from Stealerium Based Malware Campaigns          *

Hackers Attempt $130M Heist on Evertec’s Brazilian Subsidiary via Pix Payment System          *

NVIDIA Mitigates High-Risk Threats Across Networking Stack          *

XWorm Malware Unveils New Infection Technique to Evade Security Detection          *

Latest Chrome Update Fixes Critical Bugs, Including RCE in JavaScript Engine          *

Apache DolphinScheduler Fixes File Permission Vulnerability CVE-2024-43166          *

Google Issues September 2025 Android Security Patch Addressing Actively Exploited 0-Day Vulnerabilities          *

Cloud Security Alert on Azure AD Credential Exposure in ASP NET Core Applications          *

Advanced Phishing Tactic Exploits OneDrive to Target Leadership          *

Supply Chain Attack Hits Palo Alto Networks via Salesforce Integration          *

Critical Vulnerabilities Found in MobSF 4.4.0 Allow Arbitrary File Writes and Data Exposure          *

ESPHome Authentication Bypass Vulnerability Exposes Smart Devices to Attack          *

CVE-2025-6203: Critical Denial-of-Service Vulnerability Discovered in HashiCorp Vault          *

Multi-Stage Phishing Campaigns Abuse Email Marketing Domains and Cloud Infrastructure to Deliver Targeted Phishing Lures          *

CSS Injection Flaw in Google Web Designer Enables Full System Takeover          *

Malicious Ads Used to Launch Phishing Attacks on Hotel Systems          *

MediaTek Addresses Critical Modem and System Vulnerabilities in September 2025 Security Bulletin          *

IBM Issues Urgent Patch for Watsonx Orchestrate SQL Injection Vulnerability          *

Zero-Day Flaw in Citrix NetScaler Devices Triggers Emergency Patching Effort          *

Zscaler Confirms Data Breach Caused by Supply-Chain Attack Through Salesloft Drift          *

Hackers Exploit macOS Security Features to Spread Malware          *

New Sitecore Vulnerabilities Enable Remote Attacks on Fully Patched Systems          *

Linux UDisks Vulnerability Grants Attackers Access to Privileged Data          *

Cybersecurity News Roundup Highlighting WhatsApp, Chrome Flaws and Advanced AI Attacks          *

AI Waifu RAT Targets Communities with Sophisticated Deception          *

QNAP Issues Critical Security Patches for VioStor NVR Devices          *

Critical ImageMagick 32-Bit RCE Exploit from Stride Miscalculation During Malicious BMP Image Processing          *

Zero-Click Exploit Allowing Remote Code Execution on iOS and macOS Patched in Latest WhatsApp Update          *

Amazon Disrupts Evolving APT29 Cyber Campaign Targeting Microsoft Authentication          *

Google Advises 2.5 Billion Gmail Users to Change Passwords Following Salesforce Data Breach          *

Google Ads Abuse Distributes TamperedChef via Rogue PDF Application          *

MystRodX: Stealthy New Backdoor Evades Detection with Passive Triggers          *

Brokewell Trojan Targets Android via Facebook ads, Hitting Banking and Crypto          *

FreePBX Servers Targeted in Widespread Attacks Leveraging Unpatched Zero-Day in Endpoint Module          *

Cisco IMC vKVM Flaw Lets Remote Attackers Redirect Users to Malicious Sites          *

Hikvision Discloses Critical Security Vulnerabilities in HikCentral Software          *

TransUnion Data Breach Compromises Over 4 Million Customers          *

Cyberattack Disrupts Nevada State Systems, Offices Halt Operations          *

Sophos Uncovers Intrusion Using Velociraptor and Visual Studio Code for Tunneling          *

Anthropic Thwarts Attempts to Exploit Claude AI for Cybercrime          *

Critical Cisco Nexus Vulnerability Allows DoS Attacks via Malformed IS-IS Packets          *

Critical Security Flaws in Cisco UCS Manager Allow Root-Level Command Injection by Authenticated Users          *

Hook v3 Malware The Next Generation of Android Banking Threats          *

Google Issues Urgent Chrome Patch for AI-Discovered CVE-2025-9478 Vulnerability          *

NVIDIA NeMo Curator Hit by High-Severity Security Flaw (CVE-2025-23307)          *

Critical Code Injection Flaws Found in NVIDIA NeMo Framework          *

Critical Flaws in Securden PAM Expose Enterprises to Remote Code Execution and Credential Theft          *

Auchan Retail Breach Exposes Customer Loyalty Information          *

Chinese Hackers Use VPNs and Proxies to Hide Their Tracks          *

SpyNote RAT Masquerades as Google Play Apps in Sophisticated Malware Campaign          *

Lab-Dookhtegan's Crippled Iranian Maritime Operations Through Satellite Vulnerabilities Targeting NITC and IRISL          *

Proxyware Malware Poses as YouTube Video Download Site          *

Zero-Click Exploit in Zendesk Android App Lets Attackers Hijack Accounts Using Predictable Token Generation          *

Severe Security Flaws in vtenext CRM Put Thousands of Businesses at Risk Worldwide          *

Ransomware Attack Disrupts Operations at Chip Programming Firm Data          *

Data Breach at Aspire Rural Health System Affects 138,386 Individuals          *

Cybercriminals Leverage SendGrid in New Phishing Scheme to Harvest User Login Credentials          *

Microsoft Confirms NDI Streaming Issues After August 2025 Windows Update          *

Tableau Server Vulnerabilities Allow Malicious File Uploads and Path Traversal          *

BQTLock Ransomware Campaign Leverages Obfuscation and Credential Theft for Double Extortion Attacks          *

Cybercriminals Deploy Android Malware Posing as Russian Intelligence Tool          *

Fileless and Fearless: The Rise of Linux Filename Malware          *

IBM Patches High-Risk Flaw in Jazz Team Server Vulnerability (CVE-2025-36157)          *

UAE Authorities Urge Citizens to Avoid Public Wi-Fi Amid Massive Surge in Cyber Breaches          *

SSH Brute-Force Tool in Go Found to Secretly Leak Successful Logins to Remote Attacker via Telegram          *

Android Malware Targeting Russian Business Executives Through Fake Antivirus Apps          *

Grok Chatbot Leak Exposes Hundreds of Thousands of Private Conversations          *

Sophisticated Gmail Phishing Attack Leverages AI Prompt Injection          *

New Android RATs Exploit Military Personnel Across South Asia          *

Lumma Affiliates Drive Financial Fraud and Crypto Theft via Phishing, Malvertising, and Fake Listings          *

Help TDS Campaign Exploits WordPress Sites in Global Redirect Scam          *

Threat Actors Leverage VPS and Anonymized Networks to Launch Sophisticated SaaS Exploits          *

GeoServer Instances Targeted Through CVE-2024-36401 Remote Code Execution          *

Anatsa Android Malware Targets Banks and Crypto Platforms          *

Fake Microsoft Security Alerts Spread via TDS on Legit Sites          *

Global Web Security Alert: Critical Bug in sha.js Library          *

Critical Docker Desktop Vulnerability (CVE-2025-9074) Allows Full Host Takeover on Windows and Mac          *

Data Breach at CPAP Medical Supplies Exposes Sensitive Information of 90,000+ Individuals          *

Kubernetes Capsule Security Flaw Allows Unauthorized Label Manipulation          *

UAC-0057 Exploits PDF Invitations to Deploy Shell Script Attacks          *

DaVita Breach Exposes Sensitive Records of Nearly 2.7 Million Individuals          *

CVE-2025-55746: Severe Directus Vulnerability Allows Unauthenticated File Uploads and Remote Code Execution on Servers          *

Temporary Exposure of AMD’s FSR 4 Source Code Could Fuel Unofficial Builds          *

Critical Plex Media Server Vulnerability (CVE-2025-34158) – Immediate Patch Urged          *

Commvault Bugs Allow Attackers to Bypass Authentication Controls          *

Apple Releases Emergency Patch for Zero-Day Exploited in Targeted Attacks          *

Memory Corruption and Sandbox Escape Vulnerabilities Addressed in Firefox 142          *

MITM6 and NTLM Relay Attack Exposes Active Directory Weaknesses          *

SHAMOS macOS Malware Poses as Tech Support to Capture User Logins          *

IBM Researchers Track QuirkyLoader Campaigns Targeting Taiwan and Mexico          *

Paper Werewolf Unleashed: Phishing, Payloads, and WinRAR Exploits          *

Apache Tika PDF Parser XXE Flaw Enables Data Exposure via Malicious PDFs          *

Kudelski Security Uncovers Critical CodeRabbit Vulnerability Allowing RCE and Access to 1M GitHub Repositories          *

Security Flaws in Lenovo’s AI Chatbot Raise Concerns Over Enterprise AI Deployments          *

Microsoft M365 Copilot Flaw Lets Attackers Bypass Audit Logs and Access Sensitive Data Undetected          *

Salty 2FA: A Rising Threat in the Phishing-as-a-Service Landscape          *

CVE-2023-46604 Exploited: Hackers Secure Linux Servers with Post-Intrusion Patching          *

CERT CC Alerts Municipalities to Critical Workhorse Software Flaws          *

Data Breach at Business Council of New York State with External System Intrusion Exposes Over 47,000 Records          *

Google Fixes High-Risk V8 Bug in Latest Chrome Release          *

Spies in Your Skype: GodRAT Malware Campaign Targets Financial Sector          *

SAP NetWeaver Metadata Unauthenticated Uploader Exploited for JSP shell, RCE via Visual Composer          *

Ransomware Attack on Inotiv Disrupts Systems, Impacts Business Processes          *

Phishing Operation Uses Fake Government App to Deploy Banking Malware on Android Devices          *

Copyright Phishing Notices Drive Global Spread of Noodlophile Malware          *

PyPI Introduces Domain Expiry Checks to Strengthen Account Security          *

Bragg Gaming Group Reports Cybersecurity Breach, Ensures Operational Continuity          *

HijackLoader Unleashed: Malware Hidden in Pirated Games Bypasses SmartScreen & Adblockers          *

XenoRAT Malware Campaign Hits Multiple Embassies in South Korea          *

Netfilter Bug Exposes Linux Infrastructure to Privilege Escalation Threats          *

Critical Vulnerability Found in Palo Alto Networks GlobalProtect          *

Rockwell Automation Patches Critical Security Bugs in Key Industrial Systems          *

Blue Locker Ransomware Targets Critical Infrastructure in Pakistan          *

Fraudsters Hijack Back-to-School Bargains to Trap Online Shoppers          *

Workday Discloses Data Breach Linked to Widespread CRM Attacks          *

Advanced Threats in Hybrid Environments: CrossC2 and ReadNimeLoader Exposed          *

PostgreSQL Issues Urgent Patches for Critical Remote Code Execution Vulnerabilities          *

Millions of Downloads Impacted by Critical tar-fs Directory Traversal Vulnerability          *

Critical AMI Aptio UEFI Flaw CVE-2025-33043 Exposes PCs to Stealth Firmware Attacks          *

Zero-Day in Elastic Endpoint Agent Allows Attackers to Evade Detection and Crash Windows Systems          *

High-Severity ImageMagick Vulnerabilities Discovered via Google AI Tool          *

EncryptHub Hackers Leverage MSC EvilTwin Flaw to Spread Fickle Stealer Malware          *

ERMAC 3.0 Banking Trojan Exposed: Expanded Capabilities and Security Flaws Uncovered          *

Compromised npm Package Used in Dependency Automation Attack          *

Critical Authentication Bypass Vulnerability in FortiWeb (CVE-2025-52970)          *

Colt Technology Services Battles Cyberattack Disrupting Operations          *

Cisco Issues Security Patches for IKEv2 DoS Vulnerabilities Affecting IOS, IOS XE, ASA, and FTD Systems          *

Booking.com Users Targeted by Unicode-Based Homograph Phishing Campaign          *

Taiwan's Web Infrastructure Compromised by UAT-7237 Using Modified Hacking Utilities          *

US Sanctions Garantex, Grinex, and Affiliates for Facilitating Illicit Transactions          *

Critical CVE-2025-20265 RADIUS Vulnerability in Cisco FMC Could Allow Remote Code Execution          *

Hackers Leverage Microsoft Flaw to Breach Canadian House of Commons Systems          *

Microsoft Web Deploy Vulnerability Exposes Enterprise Servers to Remote Attacks          *

FireWood Malware Targets Linux for Remote Command Execution and Data Theft          *

Malicious Proxyware Spread Through Fake Freeware and YouTube Downloader Sites          *

Critical Xerox FreeFlow Core Vulnerabilities Exposed — Public PoC Enables Unauthenticated RCE          *

VexTrio Viper: Cybercriminals Exploit CAPTCHAs and App Stores in Global Scam Network          *

Hackers Exploit FIDO Authentication Downgrade via Custom Phishlet in AiTM Attacks          *

ShinyHunters Targets Salesforce Amid Clues of Scattered Spider Collaboration          *

Intel, AMD, and Nvidia Disclose Dozens of Security Flaws          *

Adobe Fixes Dozens of Vulnerabilities in Creative and Commerce Tools          *

Zoom Fixes Critical Windows Vulnerabilities Allowing Privilege Escalation          *

SmartLoader Malware Distribution campaign Targets Windows Exploiting GitHub Through Fake Game Hacks and Cracks          *

Charon Ransomware: APT-Level Tactics with Devastating Encryption Payloads          *

Critical FortiSIEM Vulnerability (CVE-2025-25256) Enables Remote Command Injection          *

Chrome 139 Update Fixes Critical Security Flaws in V8, libaom, and ANGLE          *

Microsoft Patch Tuesday Security Advisory – August 2025          *

SAP Issues Critical Security Updates for Multiple Product Vulnerabilities          *

Royal Enfield Hit by Ransomware Attack: Hackers Claim Full System Breach and Data Encryption          *

CVE-2025-53652: Critical Command Injection Discovered in Jenkins Git Parameter Plugin          *

Critical Flaw in Dealer Portal Allowed Remote Vehicle Takeover          *

Eclypsium Uncovers Critical BadUSB Vulnerability in Lenovo Devices, Hijacked via Firmware Exploit          *

Google Issues Highest-Ever Bug Bounty for Critical Chrome Sandbox Escape          *

Millions at Risk from SSH Vulnerabilities Uncovered by SSHamble          *

TETRA Networks Compromised by Weak Encryption, Replay, and Injection Vulnerabilities          *

Connex Credit Union Confirms Data Breach Triggered by Undisclosed Intrusion Vector          *

Critical Vulnerability in Smart Bus Systems Exposes Fleet Control and Tracking Risks          *

Critical Zero Trust Flaws Expose Zscaler, Netskope, and Check Point to Authentication Bypasses          *

Efimer Malware Campaign Exploits Legal Scams and Fake Torrents to Steal Cryptocurrency          *

Critical 7-Zip Flaw (CVE-2025-55188) Exposes Linux and Windows Systems to Arbitrary File Writes          *

CVE-2025-5095 (CVSS 9.8): Critical Security Vulnerability in ARC Solo Broadcasting Devices Allows Unauthorized Remote Access and Control          *

Severe RCE and SSRF Vulnerabilities Discovered in Xerox FreeFlow Core          *

APT Sidewinder Uses Fake Government Portals to Harvest Military Credentials          *

New ClickFix Malware Campaign Exploits macOS Terminal to Steal Crypto and Personal Data          *

Security Risks and Escrow Vulnerabilities in Darknet Market Transactions          *

CISA Identifies Critical EG4 Inverter Bugs Enabling Remote Exploitation          *

PyPI Blocks Malicious ZIP Uploads to Prevent Parser Confusion Attacks          *

Customer Data Compromised in Air France–KLM Breach Tied to Broader Salesforce Exploitation by Cybercrime Group          *

IBM X-Force Uncovers CastleBot Malware-as-a-Service Powering Multi-Stage Ransomware Campaigns          *

DarkCloud Malware Resurfaces with Advanced Capabilities in Global Windows Attack Campaign          *

Severe Linux Kernel Flaw Enables Full Kernel Access via Chrome Sandbox Exploit          *

PBS Employee Data Leaked on Discord Fan Servers Following Breach          *

Personal Data of 6.4 Million Leaked in Bouygues Telecom Hack          *

WinRAR Zero-Day Exploited to Install RomCom Malware via Malicious Archives          *

Critical Flaws Discovered in Axis Communications Surveillance Systems          *

Columbia University Reports Cyberattack Impacting Over 860,000 Individuals          *

Pandora Jewelry Targeted in Supply Chain Cyberattack via External Vendor          *

New CISA ICS Advisories Reveal High-Risk Flaws Across Industrial Platforms          *

CISA Issues Urgent Alert: Federal Agencies Must Patch Exchange Server Flaw by Monday          *

Ruby JWE Security Breach (CVE-2025-54887) Undermines AES-GCM Authentication          *

Critical Hybrid Exchange Vulnerability (CVE-2025-53786) Enables Cloud Privilege Escalation          *

SocGholish Malware Exploits Hacked Websites for Initial Access          *

Malicious Go Modules Identified 11 GitHub Packages Deploy Stealthy Malware          *

Phishing Campaign Leverages Microsoft 365 Direct Send to Mimic Internal Email Traffic          *

North Korean ScarCruft Group Deploys Advanced Malware and Ransomware Against South Korea          *

Malicious npm Packages Target WhatsApp API Developers with Remote Kill Switch and Data Exfiltration Capabilities          *

Severe HTTP Flaw Threatens Millions of Websites with Takeover          *

1.2 Million Medical Devices and Systems Exposed in Major Data Breach          *

Akira Ransomware Launches BYOVD Attack with CPU Tuning Driver          *

Lazarus Group Deploys PyLangGhost RAT Using Fake Camera and Mic Errors          *

MedusaLocker Ransomware Uses Vulnerable ThrottleStop Driver, exploits RDP and Disables AV in Kernel-Level Attack          *

PHP Object Injection Vulnerability in Everest Forms Plugin (CVE-2025-52709) Threatens 100K Sites          *

CVE-2025-22470: Critical Vulnerability in SATO Printers Enables Remote Root Control          *

Rockwell Automation Patches High-Severity Memory Corruption Flaws in Arena Simulation Software          *

Trend Micro Apex One Under Active Attack from Critical RCE Vulnerabilities          *

Project AK47: A Hybrid Threat Linking Financial Cybercrime to State-Sponsored Activity          *

10,000+ Fake TikTok Domains Target Users with Spyware and Credential Theft          *

Kimsuky APT Launches Malware Attack Using LNK Files to Evade Windows Defender          *

Adobe Issues Emergency Priority 1 Update for High-Risk AEM Forms Vulnerabilities          *

GitHub Action Vulnerability CVE-2025-54594: React Native Bottom Tabs Targeted in RCE Attack          *

CISA Urges Action on Exploited D-Link IP Camera Vulnerabilities          *

Critical Flaws Discovered in MediaTek Chipsets Across Android and IoT Platforms          *

Cisco Discloses Data Breach via Vishing Attack Leading to Unauthorized CRM Access          *

Critical SQL Injection Vulnerability Found in ADOdb SQLite3 Driver          *

North Korea’s Famous Chollima APT Targets Job Seekers with Malicious GitHub Packages          *

PXA Stealer Campaign Targets 62 Countries with DLL Sideloading          *

Android Malware Mimics Indian Banks to Steal Data and Mine Crypto          *

Critical Android System Vulnerability (CVE-2025-48530) Patched in Latest Security Update          *

Royal Ransomware Took Down Wilhelm Einhaus’s Mobile German Insurance Giant          *

Critical Vulnerabilities Found in Dahua Security Cameras, Patches Released          *

Massive Data Breach at Northwest Radiologists Exposes Sensitive Information of 348,000 Patients          *

Nvidia Triton Vulnerabilities Enable Remote Code Execution in AI Servers          *

Critical Squid Proxy Vulnerability Allows Remote Code Execution and Data Leaks          *

Severe HashiCorp Flaw Lets Hackers Execute Code on Host Systems          *

FUJIFILM Printer Vulnerability Exposes Devices to Denial-of-Service Attacks          *

North Korean Hackers Hide Malware in Images to Bypass Windows Security          *

Interlock Ransomware and ClickFix Social Engineering Exposed          *

APT37 Targets South Korean Systems with Steganography and Backdoor Malware          *

Phishing Through Wrapped Links Exploiting Proofpoint and Intermedia for Microsoft Credential Theft          *

Remote Code Execution Vulnerability Found in NestJS DevTools (CVE-2025-54782)          *

Critical Security Flaws in Partner Web: Default Credentials & XSS          *

Digital Certificate Leak Undermines PlayReady DRM Security Across Platforms          *

Cyberattack on Seychelles Commercial Bank Involving Data Breach and Potential Espionage Activity          *

Decryptor for FunkSec Ransomware Released: Victims Can Recover Files at No Cost          *

ApolloShadow Malware Installs Root Certificates to Legitimize Malicious Websites          *

Chinese-Linked Group Launches Prolonged Cyberattack on Telecom Infrastructure          *

Qilin Affiliate Hastalamuerte used for Cryptocurrency Integration,Money Laundering Operations          *

Lazarus Group Exploits Software Supply Chains Through npm and PyPI in Advanced Espionage Operation          *

AI-Crafted npm Package Conceals Advanced Crypto Wallet Drainer          *

Targeted Ransomware Attacks by SafePay Disrupt Key Global Industries          *

Undetectable ‘Plague’ Malware Targets Linux for Long-Term SSH Access          *

Akira Ransomware Exploits SonicWall SSL VPNs Amid Surge in Attacks          *

Hackers Exploit Unauthenticated Relay in Microsoft 365 for Phishing          *

Chinese-Backed PlayPraetor Malware-as-a-Service Expands Globally, Targets Mobile Banking Apps          *

Critical Security Flaw in Cursor IDE Lets Attackers Execute Code via Malicious Prompts          *

Luxembourg Probes Cyberattack That Crippled National Telecom Network          *

Pi-hole Data Breach Exposes Donor Information Through WordPress Plugin Vulnerability          *

Cybercriminals Exploit EDR Trial Versions to Evade Detection          *

$1 Million Bounty Offered for WhatsApp 0-Click RCE Exploit at Pwn2Own Ireland 2025          *

Singapore Battles Advanced Cyber Espionage with Forensic Precision          *

Hackers Use TrickBot Malware to Steal $724 Million in Cryptocurrency          *

Silver Fox Group Exploits Trusted Tools for Malicious Windows Attacks          *

DoubleTrouble Banking Trojan: A New Threat Exploiting Android Accessibility Services          *

Critical BIOS Vulnerabilities Discovered in Lenovo Desktops          *

Nokia Suffers Data Breach Affecting 94,500 Employees via Third-Party Vendor          *

Russian Healthcare Sector Targeted in Cyberattack, Hundreds of Pharmacies Affected          *

Critical Zero-Day Vulnerability in CrushFTP (CVE-2025-54309) Enables Unauthenticated Remote Code Execution          *

Critical SUSE Manager Flaw Allows Remote Root Access Without Authentication          *

Spear Phishing Campaign Delivers VIP Keylogger via Email Attachment          *

Qilin Ransomware Exploits Vulnerable TPwSav.sys Driver to Evade EDR and Target Industrial Sector          *

NOVABLIGHT: NodeJS Infostealer Disguised as Games and Educational Apps          *

New RedLoader Variant Delivered via Sophisticated Multi-Stage Execution by GOLD BLADE          *

Critical Privilege Escalation Flaw Found in BeyondTrust Windows Agent          *

Critical RCE in WordPress Alone Theme Actively Exploited by Hackers          *

Apple Deploys Urgent Security Updates Across All Platforms to Counter Active Threats          *

Enterprise LLMs at Risk: Prompt Injection Attacks Expose Critical Security Flaws in AI Systems          *

ToxicPanda Android Malware Infects 4,500+ Devices to Steal Banking Data          *

Unauthorized Access Uncovered in Base44’s Vibe Coding Ecosystem          *

Microsoft Addressed Privacy Breaching TCC Bypass flaw in Unsigned Importers Plugins in Spotlight macOS          *

French Telecom Leader Orange Hit by Cybersecurity Breach          *

Multiple Critical Firmware Flaws Found in Lenovo All-in-One Desktops          *

Critical CodeIgniter Flaw Exposes Millions of Web Apps to ImageMagick File Upload Attacks          *

ArmouryLoader: A Sophisticated Multi-Stage Malware Loader Exploiting ASUS Software          *

Multi-Stage PowerShell Attack Uses LNK Files to Deploy REMCOS RAT          *

XWorm 6.0 Uses AMSI Bypass and Critical Process Tactics to Stay Hidden          *

RedHook Android Banking Trojan Targets Vietnamese Users with Phishing, RAT, and Keylogging          *

Hackers Exploit SAML Response Mismatch to Bypass Logins in Node-SAML-Driven Apps          *

1TB of Sensitive Data Leaked from Naval Group in Major Cybersecurity Scare          *

LG Innotek LNV5110R CCTV Cameras Remain Vulnerable to Unauthorized Access Due to Unpatched Flaw          *

Indian Payment Gateway Airpay Faces Data Breach Claims Amid Rising Cyberattacks          *

Aeroflot IT System Breach Shuts Down Flights at Moscow Airport          *

22 Million IPs and Locations Exposed in Leak Zone Dark Web Forum Breach          *

Critical Niagara Framework and Industrial System Flaws Expose Infrastructure to Full Takeover          *

Scattered Spider Hijacks Virtual Infrastructure to Paralyze U.S. Retail and Transportation Sectors          *

Critical Privilege Escalation Vulnerability Found in Lakeside SysTrack (CVE-2025-6241)          *

VMware Under Fire: Fire Ant Hackers Exploit ESXi and vCenter Vulnerabilities          *

Chaos RaaS Targets Global Businesses in Sophisticated Ransomware Campaign          *

Salesforce Released latest version of Tableau Server patching Critical Vulnerabilities Including RCE and SSRF          *

GitHub Action Vulnerability CVE-2025-54416 Could Compromise Over 5,000 GitHub Repositories          *

Supply Chain Attack Hits Major Open Source JavaScript Dependencies          *

CastleLoader Malware Loader Actively Targeting Systems via Phishing and Fake Repositories          *

Security Vulnerability in Post SMTP Plugin Puts 200,000 WordPress Sites at Risk of Hijacking          *

Allianz Life Announces Data Breach Affecting Most of Its 1.4 Million Customers          *

Endgame Gear Hit by Software Supply Chain Attack via Malware Embedded in OP1w 4k v2 Installer          *

Microsoft Probes Possible Leak Behind SharePoint Exploits by Chinese State Hackers          *

Google Forms Hijacked in Escalating Phishing Campaigns Aimed at Crypto Investors          *

Cloud Environments Compromised by Soco404 and Koske Malware Campaigns Leveraging Fileless Techniques          *

Cargo-Themed Phishing Emails Deliver EAGLET Malware in Russian Espionage Operation          *

Turkish Defense Companies Targeted by Patchwork in Spear-Phishing Campaign Using Malicious Shortcut Files          *

Gunra Ransomware Emerges Amid Surge in Dark Web Activity          *

Scammers Use Google Forms to Bypass Security and Steal Crypto via Phishing          *

Hackers Use Fake Sites and .HTA Scripts to Spread Red Ransomware          *

Sophisticated Android Malware Masquerades as Indian Banking Apps to Steal Credentials and Evade Detection          *

Mitel Releases Emergency Patches for High-Risk MiVoice MX-ONE Vulnerability          *

VMware Patches Critical Security Flaws in Guest Authentication Service VGAuth          *

Early Access Steam Game Used as Vehicle for Infostealer Malware by Hacker          *

AI-Driven Koske Malware Exploits Image Files to Infect Linux with Cryptominers          *

Critical Axios Vulnerability (CVE-2025-54371) Exposes Applications to HTTP Manipulation via Form-Data Flaw          *

Cloud-Based Cryptojacking Campaign 'Soco404' Discovered by Researchers          *

Stealthy Spyware Found in Popular 4 Open-Source Packages, Impacts 56,000+ Downloads          *

Supply Chain Attack Hits Toptal: npm Packages Used for Token Theft & Data Wipe          *

New GitLab Security Updates Address Six Vulnerabilities Including Two High-Risk XSS Flaws          *

Critical Flaw in AWS Client VPN for Windows Enables Privilege Escalation          *

SonicWall Patches Critical Arbitrary File Upload Flaw (CVE-2025-40599) in SMA 100 Series          *

Ghost RAT and PhantomNet Malware Used in Targeted Windows Attacks by Chinese Hackers          *

Stealthy WordPress Mu-Plugin Backdoor Grants Persistent Admin Access to Hackers          *

Critical Security Flaws Found in Synology BeeDrive for Windows          *

Critical Command Injection Vulnerabilities Discovered in TP-Link NVR Devices          *

EdskManager RAT Uses HVNC to Enable Hidden Remote Access and Evade Detection          *

SonicWall SMA 100 Under Threat: Patch Buffer Overflow and XSS Vulnerabilities ASAP          *

Mozilla Fixes Critical JavaScript and Memory Flaws in Firefox 141 Release          *

Critical Vulnerability in form-data JavaScript Library Exposes Applications to Remote Attacks          *

Coyote Trojan Leverages Windows UI Automation to Swipe Bank and Crypto Logins          *

Ransomware Groups Exploit RMM Tools for Network Intrusion and Data Theft          *

Unauthenticated SSRF in Manager.io (CVE-2025-54122) Enables Full Cloud Compromise          *

Google Chrome Fixes Two High-Risk V8 JavaScript Engine Flaws CVE-2025-8010 and CVE-2025-8011          *

Malicious npm Package Update Distributes Scavenger Malware          *

New Apache Jena Security Bugs Could Lead to System Compromise via Admin Abuse          *

Kubernetes Image Builder Vulnerability Enables Remote Admin Access on Windows VMs          *

Dark Web Travel Agencies: The Cybercrime Syndicates Undermining Hospitality          *

Fake Facebook & TikTok Apps Spread Android Malware for Data Theft and Monetization          *

Critical Security Bug in Nokia WaveSuite NOC Could Allow Remote Attacks on Telecom Systems          *

Critical Fixes in wolfSSL: Apple Certificate Bypass and Weak Randomness Patched          *

Sophos Issues Urgent Hotfixes for Firewall Vulnerabilities in Older Firmware Versions causing RCE          *

Authentication Bypass and Command Injection Vulnerabilities found in HPE Networking Devices          *

VanHelsing Ransomware Group Strikes Compumedics, Leaks Patient Health Data          *

Radiology Associates of Richmond Confirms Data Breach Affecting 1.4 Million          *

The Texas Alcohol & Drug Testing Service Confirms Major Data Breach Impacting Over 748,000 Individuals          *

Microsoft Urges Immediate Patching of Actively Exploited SharePoint Vulnerability          *

QR Phishing Attack Lets PoisonSeed Hackers Bypass FIDO Protections          *

SilentRoute: Malicious SonicWall VPN Client Compromises Enterprise Login Data          *

Malicious RAR5 Archives Exploit 7-Zip Vulnerability          *

Critical Livewire RCE Vulnerability (CVE-2025-54068) Puts Laravel Apps at Risk          *

Katz Stealer Malware Is a One Hundred Dollar Per Month Threat That Steals Digital Identities          *

APT28 Exploits Outlook, WinRAR, and Webmail Flaws for Espionage Operations          *

Lumma Infostealer Campaign Monetizes Stolen Credentials on Cybercrime Forums          *

Deceptive Voicemail Malware Campaign Impersonating Veeam Targets Enterprise Users          *

2,800 Domains Linked to Ongoing Chinese Malware Attacks on Windows Users          *

Threat Actors Exploit CrushFTP Vulnerability to Gain Unauthorized Admin Control          *

Attackers Leverage Ivanti Zero-Days to Inject Cobalt Strike Using MDifyLoader          *

CERT-UA Uncovers LAMEHUG Malware Using AI in Phishing Attacks Linked to APT28          *

TeleMessage SGNL Exposed via Unsecured Spring Boot Endpoint          *

Official Ransomware Decryptor Restores Phobos and 8Base Files at No Cost          *

Arch Linux AUR Compromised by Malicious Packages Distributing CHAOS RAT Malware          *

Sophisticated Cyber Espionage Campaign Targets Asia: UNG0002 Behind Attacks          *

Massistant Spy Tool Used by Chinese Authorities to Access Private Data from Mobile Phones          *

Massive Data Breach Hits Anne Arundel Dermatology, 1.9 Million Impacted          *

Security Flaws in Grafana Allow Redirects and Code Execution          *

Critical Buffer Overflow in Lenovo Protection Driver Exposes Systems to Privilege Escalation          *

Local Privilege Escalation Bugs Found in Sophos Intercept X Components          *

High Severity Security Flaw Identified in NVIDIA Container Toolkit Affecting AI Workloads          *

NoName057(16) Hacktivist Network Dismantled by Europol Over DDoS Campaigns          *

Amadey Malware Campaign Leverages GitHub Repositories to Evade Detection          *

Major Russian Drone Supplier Targeted by Ukrainian Cyberattack          *

Critical Unauthenticated Stack Overflow flaw in D-Link DIR-825 Router Leads to Remote DoS          *

H2Miner Malware Targets Linux, Windows, and Containers to Illegally Mine Monero          *

Microsoft Teams Exploited to Deliver Encrypted Matanbuchus Malware          *

Oracle Addresses 200 Security Flaws in July 2025 Critical Patch Update          *

Cisco Addresses New Critical Vulnerability in ISE System          *

Critical RCE Vulnerability in SharePoint's Deserialization Logic          *

Protestware Spreads Through 28+ Malicious Software Packages          *

DNS Tunneling Exploits: A Growing Risk for Enterprise Network Security          *

Android Malware campaign employs Typosquat-Domains, Telegram APKs to Spread Malware via Phishing          *

New Malware Campaign Targets WordPress Sites with ZIP Archive Exploit          *

Google’s AI ‘Big Sleep’ Uncovers Critical SQLite 0-Day, Stops Active Exploits          *

Lenovo Vantage Vulnerabilities Allow Local Attackers to Escalate to SYSTEM Privileges          *

Unprecedented Cyber Siege: DDoS Hits 7.3 Tbps with Billions of Packets          *

Polyglot File Trick Bypasses Email Filters in New Malware Attacks          *

Konfety Malware Exploits APK ZIP Structure for Silent Infiltration          *

Ransomware Breach in Albemarle County Exploits On-Premises Infrastructure          *

Google Issues Emergency Chrome Patch Zero-Day Exploit and Two More High-Severity Vulnerabilities          *

VMXNET3, VMCI, and PVSCSI Vulnerabilities in VMware Receive Critical Fixes from Broadcom          *

Node.js Security Fixes CVE-2025-27210 (Path Traversal), CVE-2025-27209 (HashDoS) flaws in latest release          *

Century Support Services Suffers Major Data Breach Involving Financial and Health Data          *

DragonForce Targets U.S. Retailer Belk in May 2025 Breach          *

Critical Security Vulnerability in Kafbat UI Allows Remote Code Execution Without Authentication          *

High-Severity Git Vulnerability Affects DevOps Pipelines and CI-CD Tools          *

Espionage in the Cloud: CL-STA-1020's Use of AWS Lambda for Covert Government Surveillance          *

Cybercriminals Clone Major News Sites in Global Investment Fraud Scheme          *

The Apache Tomcat Coyote Flaw Enable Attackers to Cause DoS Attacks          *

Interlock Ransomware Campaign Leverages FileFix for RAT Deployment          *

Open VSX Marketplace Abused to Breach Cursor AI, Steal $500K in Digital Assets          *

BlackSuit Ransomware Strikes with Speed, Stealth, and Data Theft          *

HazyBeacon Backdoor Exploits AWS Lambda for Covert C2, Aims at Government Targets          *

North Korean XORIndex Malware Targets Developers via npm Supply Chain through Multi-staging          *

Fortinet FortiWeb Hit by Severe SQLi to RCE Flaw — Patch Immediately          *

Gigabyte UEFI Bugs Threaten System Integrity with Persistent Exploits          *

Bitcoin Depot Suffers Major Security Breach, Exposing 27,000 Users' Data          *

Louis Vuitton Reports Data Breach Affecting Global Customers          *

Red Bull Job Scam Masks Sophisticated Phishing Campaign          *

Cyber Weapons, A The New Frontier of Modern Warfare          *

Zero Click RenderShock Attacks: Exploiting File Previews and Indexing Services          *

Billions of IoT Devices Vulnerable Due to Kigen eUICC Card Exploit          *

Invisible Email Prompts Hijack Gemini to Spread Phishing          *

Critical IP Camera Vulnerability (CVE-2025-7503) Exposes Devices to Full Remote Takeover          *

DoNot APT Exploits Cloud Services in Attack on European Diplomatic Networks          *

Helm Security Update Fixes Critical Local Code Execution Vulnerability          *

GitHub Repositories Masquerading as Free VPNs Spread Lumma Stealer Malware          *

Interlock RAT new PHP Variant Targets Windows via Fake CAPTCHA and PowerShell Execution          *

Gravity Forms Plugin Hit by WordPress Supply Chain Attack Through Official Downloads          *

Stealthy Cyber Campaign Exploits ASP.NET Servers Using Leaked Machine Keys          *

GPUHammer Attack Exposes AI Model Vulnerabilities in NVIDIA GPUs          *

Fox Kitten Linked Pay2Key I2P RaaS backed by Iran Targets US and Israel, attacks Critical Infrastructure          *

Active macOS Infostealer Campaigns Aim to Extract Sensitive User Data          *

Critical IAM Policy Misconfiguration Exposes Delegation Risk in AWS Organizations          *

Customer Data at Risk as Arkana Claims Major Breach in Telecom Industry          *

New Malware Variant Spreads Through ISO File with Hidden Payload          *

Massive McHire Data Exposure Affects Over 64 Million Job Applicants          *

Critical Laravel Flaw: Leaked public APP_KEY Enables Remote Code Execution          *

Denial-of-Service Risk Found in Juniper Junos OS          *

Critical Remote Vulnerability in D-Link DIR-825 Routers Enables Unauthenticated DoS Attacks          *

Arbitrary File Deletion Bug in WordPress Plugin Allows Remote Code Execution          *

Vulnerabilities in RapidFire Tools Network Detective Put Global IT Environments at Risk          *

Malicious Actors Leverage Fake Tech Companies to Target Crypto Users on Telegram and Discord          *

Severe Vulnerabilities in MCP Tools Expose AI Systems to Remote Code Execution          *

PerfektBlue Exploit Demonstrated on Volkswagen, Skoda, Mercedes Head Units          *

AI-Powered Extension Used by Hackers to Steal $500,000 in Crypto Assets          *

Palo Alto Networks Patched Critical Privilege Escalation Vulnerability in GlobalProtect VPN          *

Schneider Electric Vulnerabilities Open Door to OS-Level Attacks          *

Hackers Use GitHub to Spread Fake VPN Malware          *

Siemens, Schneider Electric, and Phoenix Contact Address ICS Security Issues on Patch Tuesday          *

Unpatched Ruckus Flaws Expose Wireless Networks to Full Compromise          *

Qilin-Driven Ransomware Wave Triggers Global Security Concerns          *

Remote Code Execution Bug in GeoServer Used to Spread Cryptocurrency Miners          *

GreyNoise Uncovers 3,600+ Device Botnet Scraping US and UK Web Servers          *

Chinese Cyber Group Exploits Exchange Server Flaws to Exfiltrate COVID-19 Research          *

SparkKitty Malware Targets iOS and Android to Steal Photos          *

Microsoft Fixes Wormable Remote Code Execution Flaw Affecting Windows Client and Server Systems          *

Adobe Releases Patches for Critical Code Execution Vulnerabilities          *

SAP Releases Security Updates to Address Remote Code Execution and System Takeover Risks          *

XwormRAT Malware Campaign Leverages Code Injection for Stealthy System Compromise          *

Google Play Apps Deliver Anatsa Banking Malware to Users in the U.S. and Canada          *

CVE-2025-48818: BitLocker TOCTOU Flaw Allows Physical Bypass of Disk Encryption Protections          *

Vulnerabilities in Zoom Windows Clients Could Allow Denial of Service (DoS) Attacks          *

Nippon Steel Solutions 0-Day Network Flaw Exposes Sensitive User Data          *

11 Google-Verified Chrome Extensions Spread Malware to Over 1.7 Million Users          *

Microsoft Patch Tuesday Security Advisory – July 2025          *

FortiOS Heap Overflow Bug in Wireless Client Setup Raises RCE Concerns          *

Critical Security Update for Ivanti Connect Secure and Policy Secure Products          *

NTLM Credential Theft Enabled by Unicode Bypass Vulnerability in DNN CMS          *

NordDragonScan Uses LNK and HTA Scripts to Deploy Infostealer on Windows          *

CVE-2025-24269: Severe macOS SMBClient Flaw Allows RCE and Kernel Crashes          *

Critical Security Flaw Forces Call of Duty: WWII Offline on PC          *

Batavia Spyware Infects Employees Through Malicious Word Documents          *

Slopsquatting Rise of AI Supply Chain Attacks exploiting Hallucinated Dependencies          *

Android Malware Attacks Surge in Q2, Fueled by Banking Trojans and Spyware          *

Linux Initial RAM Filesystem Vulnerability Grants Root Access During Encrypted Boot Process          *

Remote Code Execution Risk Found in Comodo Internet Security 2025          *

Ransomware Disrupts Ingram Micro's Tech Distribution and Logistics Network          *

Gaming-Themed Firefox Add-ons Used as Trojan Horses for OAuth and Data Theft          *

Rising Threat: Malicious Drivers Exploit Windows Signing to Bypass Security          *

CVE-2025-47227 & CVE-2025-47228: ScriptCase Bugs Threaten Server Security.          *

RingReaper: Exploiting io_uring for Stealthy Linux EDR Evasion          *

TAG-140 Strikes Indian Infrastructure Using Advanced Remote Access Trojan          *

XWorm RAT Transforms into LockBit Ransomware Delivery Vector          *

Hpingbot Botnet targets Windows, Linux, IoT systems via Pastebin, hping3          *

PoC Published for Linux Privilege Escalation Flaw Affecting udisksd and libblockdev          *

Sophisticated XWorm RAT Exploits Advanced Evasion and Persistence Techniques          *

Cybercriminals Launch Fake DWP Alert Scheme to Steal Financial Data          *

Cybercriminals Turn Job Boards and Messaging Apps into Fraud Channels          *

New Citrix Vulnerability Enables Session Hijacking and MFA Bypass          *

Massive Data Breach Hits CIEE: 248K+ Records Exposed by Threat Actor 888          *

Cybercriminals Weaponized Inno Setup for Stealthy Malware Delivery          *

Caution: Fraudulent MBAs and Degree Scams Thrive via Misleading .edu.eu European Domains          *

NightEagle APT Exploits Zero-Day Vulnerability to Target Microsoft Exchange Servers in China          *

Hpingbot and Crypto Miners Exploit Java and SSH Vulnerabilities in Coordinated Campaigns          *

NSB Flags Chinese Apps for Excessive Data Collection and Privacy Risks          *

Ingram Micro Experiences Global Outage, Cause Still Unknown          *

Hellcat Ransomware Group Targets Telefónica Again via Jira Flaw          *

PHP Vulnerabilities Identified – Potential for SQL Injection and DoS Attacks          *

Fake SEO Plugins Compromise WordPress Sites Through Search Engine Spam          *

Beware of Fake Online Stores Copying Big Brands and Stealing Payments          *

High Severity Cache Poisoning Vulnerability in Next.js (CVE-2025-49826) Affects Self-Hosted and On-Prem Deployments          *

New Apache APISIX Vulnerability Impacts Federated Identity Environments          *

Kelly Benefits Notifies 553,000 Affected After Major Data Compromise          *

HUMAN Satori Uncovers Sophisticated Mobile Ad Fraud Scheme: IconAds          *

HIKVISION applyCT Exposed: Fastjson Flaw Enables Critical Remote Code Execution          *

Lenovo System File Flaw Enables AppLocker Evasion Tactics          *

Sudo Vulnerabilities Expose Root Privilege Escalation Risk Across Major Linux Distros          *

Cybercriminals Exploit VPNs, Cisco Faces Surge in Password Spray Attacks          *

Hpingbot Leverages Pastebin for Payload Delivery and Launches DDoS via Hping3          *

Cybercriminals Exploit Trust in .COM: Dominates Credential Phishing Landscape          *

Qantas Data Breach Exposes Information of Up to 6 Million Customers          *

Azure API Vulnerabilities Expose VPN Keys, Enable Over-Privileged Access          *

ModSecurity Vulnerability CVE-2025-52891 Exposes Web Servers to XML-Based DoS Attacks          *

Cisco Unified CM Vulnerability Enables Remote System Control          *

Wing FTP Server Critical RCE Vulnerability (CVE-2025-47812) Allows Full Server Takeover          *

Qwizzserial Android Malware Poses as Legit Apps to Steal Banking Info and 2FA Codes          *

Malicious IDE Extensions Bypass Trust Checks, Target Developers Globally          *

Security Flaw in YONO SBI App Puts Users at Risk of Man-in-the-Middle Attacks          *

Critical Flaw in Forminator Plugin Threatens Over 400,000 WordPress Sites          *

DCRat Malware Exploits Windows for Stealth Control and Information Extraction          *

Exploiting Nessus Vulnerabilities on Windows Arbitrary System File Overwrites          *

Chinese Houken Group Exploits Ivanti Zero-Days to Deploy Advanced Linux Rootkits          *

FileFix Exploit Abuses Windows Browser Functions to Evade Mark-of-the-Web Security          *

New DEVMAN Ransomware from DragonForce Targets Windows 10 and 11 Users          *

Kimsuky Hackers Leverage ClickFix Tactic to Deploy Malicious Scripts Globally          *

Critical Remote Code Execution Vulnerability Discovered in Anthropic MCP Inspector Tool          *

Patient Data Compromised in Esse Health Cybersecurity Incident          *

Multiple Security Issues in IBM Cloud Pak Put Enterprise Data at Risk          *

Django Framework Exposed: Path Traversal and RCE Vulnerabilities Identified          *

Leveraging Credentials As Unique Identifiers: A Pragmatic Approach To NHI Inventories.          *

Blind Eagle Targets Colombian Banks with Proton66 Hosting for Phishing and RAT Attacks          *

Escalating Iranian Cyber Campaigns Target U.S. Defense and Industrial Networks          *

Hackers Exploit UAC Bypass and .PIF Files to Spread Remcos Malware on Windows Devices          *

Google Releases Emergency Patch for Actively Exploited Chrome Zero-Day Vulnerability          *

Threat Actors Leverage Facebook Ads for Widespread Malware Distribution          *

Sarcoma Ransomware Group Breaches Swiss Nonprofit Health Organization Radix          *

High-Risk Flaws in D-Link Router Allow Unauthenticated Remote Code Execution          *

Evasive Payload Generator ‘Zig Strike’ Raises Red Flags Across Security Industry          *

Critical Synology Backup Flaw Exposes Microsoft 365 Data Worldwide          *

IBM WebSphere Application Server Flaw Permits Remote Code Execution          *

Critical Langflow Vulnerability Exploited to Launch Flodrix Botnet Attacks          *

Hackers Use Snake Keylogger in Spearphishing Attacks Amid Rising Oil Geopolitics          *

WordPress Sites Compromised by Stealthy RAT Campaign Using header.php Dropper          *

RansomHub Ransomware Targets RDP Servers with Mimikatz and Advanced IP Scanner Tools          *

Cloudflare Enhances Orange Meets with End-to-End Encryption and Open Source Access          *

Bluetooth Vulnerabilities in Airoha Chipsets Expose Audio Devices to Attacks          *

APT42 Spear-Phishing Campaign Targets Israeli Experts with Social Engineering          *

Glasgow City Council Hit by Cybersecurity Breach          *

Updated GIFTEDCROOK Malware Targets Ukrainian Government Entities          *

Scattered Spider Expands Attacks to Aviation Sector Using Social Engineering          *

Citrix NetScaler CVE-2025-6543 Flaw (CVSS 9.2) Exploited in Real-World Attacks          *

Hackers Leak Data of Paraguay’s Citizens, Demand $7.4 Million Ransom          *

Trojanized Software Installers Deliver Sainbox RAT to Windows Systems          *

CapCut-Inspired Phishing Lures Users Into Sharing Sensitive Data          *

TikTok Exploited in Global Malware Scheme Targeting PowerShell Users          *

Open VSX Exploit Could Let Attackers Push Malicious VS Code Extensions          *

Pre-Authentication DoS Vulnerability (CVE-2025-6709) Impacts MongoDB Server          *

Hunt Electronics DVR Flaw Exposes Admin Passwords          *

APT-C-36 Uses WebDAV Malware Delivery and Dynamic DNS to Evade          *

Cyber Incident Hits Hawaiian Airlines, No Impact on Travel or Safety          *

UNFI Recovers Core Systems Following Cyberattack on Whole Foods Supplier          *

Massive Data Breach at Ahold Delhaize Hits 2.2 Million Individuals          *

Critical Mitsubishi Electric AC Vulnerability Enables Remote Control Without Authentication          *

Microsoft 365 Direct Send Abuse Enables Internal-Looking Phishing Attacks          *

APT35 Intensifies Cyberwarfare with High-Tech Phishing on Israeli Security Experts          *

Microsoft Teams Introduces Admin Controls to Manage M365 Apps for Improved Security          *

HPE OneView for VMware vCenter Security Flaw Enables Privilege Escalation          *

Critical Cisco ISE Flaws Enable Remote Execution of Malicious Commands          *

Authentication Bypass Vulnerability Reported in ControlID iDSecure Software          *

Pubload Malware Campaign Targets Tibetan Groups with Spear Phishing          *

Realtek Bluetooth Vulnerability Enables DoS Attacks During Device Pairing          *

CISA Issues Alert on MICROSENS NMP Web+ Vulnerabilities Allowing Full System Access          *

Vulnerabilities in Brother Devices Allow Execution of Unauthorized HTTP Requests          *

Chrome Releases Security Update to Fix 11 Code Execution Flaws          *

Firefox 140 Released with Fix for Critical Code Execution Vulnerability – Immediate Update Advised          *

TeamViewer Flaw Exposes Windows Systems to High-Risk File Deletion Attacks          *

Critical Vulnerability in NVIDIA Megatron-LM Enables Malicious Code Injection          *

FileFix Exploit Uses File Explorer to Run Hidden PowerShell Commands          *

More Than 2,000 Devices Infected in Phishing Attacks Using Weaponized Social Security Statements          *

TAG-140 targets Indian Govt. through DRAT V2 RAT, Exploiting Ministry of Defence Portal          *

Hackers Inject Fake Customer Support Numbers into Bank of America, Netflix, and Microsoft Services          *

SHOE RACK Malware Exploits Fortinet Firewalls Using DNS-over-HTTPS and SSH          *

Critical Flaw in OPPO Clone Phone App Threatens User Data Security          *

Critical Security Flaw CVE-2025-52562 Identified in Performave Convoy Management Panel          *

Zimbra Issues Urgent Patch for High-Risk Stored XSS Vulnerability          *

Silent Werewolf Exploits Windows LNK Flaw to Deploy XDigo Malware Across Eastern Europe          *

WhatsApp Ban Enforced on U.S. House Devices for Security Reasons          *

U.S. DHS Issues Warning on Rising Iranian Cyberattack Threats Amid Escalating Tensions          *

SOHO Under Siege: LapDogs Malware Campaign Redefines Stealth Attacks          *

CERT-UA Uncovers APT28 Targeting Ukrainian Government ICS with BEARDSHELL and COVENANT Malware          *

IBM patches Critical vulnerabilities causing RCE and Data leakage in UP12 IF02 release.          *

REvil Hackers Freed After Convictions on Carding and Malware          *

New Malware Strains Delivered Through Signal in APT28 Attacks on Ukraine          *

Critical Notepad++ Flaw Allows Full System Takeover – PoC Now Public          *

TikTok Mods Weaponized: SparkKitty Spyware Hunts Crypto Wallets          *

Cyberattack on McLaren Health Exposes Critical Patient Data          *

Critical Vulnerabilities in Amazon EKS Lead to AWS Credential Exposure and Privilege Escalation          *

Critical Teleport Vulnerability Allows SSH Authentication Bypass          *

Mocha Manakin Exploits PowerShell and Node.js in Sophisticated Malware Chain          *

Google Adds Multi-Layered Defenses to Secure GenAI from Prompt Injection Attacks          *

Colombian Phishing Scheme Exploits SVG Files to Distribute AsyncRAT and RemcosRAT          *

Critical RCE Vulnerability in Mattermost (CVE-2025-4981, CVSS 9.9) Exploited via Path Traversal          *

Fraudulent Pop-Ups on CoinTelegraph Site Trick Users in Crypto Theft          *

CoinMarketCap Hacked via Supply Chain Attack to Steal Crypto Through Fake Web3 Popup          *

RapperBot Strikes Again: 50,000 Devices affected by DDOS Demanding Monero          *

Confucius APT Unveils New Modular Backdoor Anondoor in Advanced Espionage Campaign          *

Severe Meshtastic Vulnerability Exposes Private Messages to Attackers          *

Google Flags New Tactic for MFA Bypass in Gmail by Russian Hackers          *

Oxford City Council Suffers Data Breach Impacting Legacy Systems and Staff Records          *

Aflac Reports Network Breach, Potential Data Exposure Under Investigation          *

Unpatched Mattermost Servers Exposed to High-Risk Exploits          *

OpenVPN 2.7_alpha2 Released with Major Upgrades and Critical Security Patch          *

Paste-and-Run Scheme Powers Mocha Manakin Malware Attacks          *

Trojanized WhatsApp Installer Targets East and Southeast Asia with XWorm RAT          *

Prometei Botnet Update Targets Linux Infrastructure with Mining and Credential Theft          *

Russia Faces Cyberattack Targeting Critical Veterinary Certification System          *

UK Retail Giants Hit by Coordinated Cyberattack, CMC Labels It ‘Systemic Event’          *

Pickai Backdoor Exploits ComfyUI Flaws in Global AI Infrastructure Attack          *

Hackers Seize Iranian Broadcast and Crypto in Sophisticated Cyber Strike          *

Tonga's NHIS targeted in Ransomware attack, impacting digital functions          *

Personal Data Exposed in Cyberattack on Oxford City Council          *

Donut Giant Krispy Kreme Discloses Massive Data Breach After Ransomware Attack          *

Critical Privilege Escalation Vulnerability in Motors WordPress Theme          *

Cloudflare Tunnel Exploited in Global Malware Distribution Campaign          *

Trojanized Python Tools Discovered in Massive GitHub Malware Campaign          *

Record-Breaking 7.3 Tbps DDoS Attack Floods Hosting Provider with 37.4 TB in Under a Minute          *

DuckDuckGo Boosts Scam Blocker to Block Fake Stores, Crypto Scams & Malvertising          *

Godfather Android Trojan Now Operates Inside Fake App Environments          *

MCP AI Engine Exploit Threatens More Than 100,000 WordPress Sites          *

North Korean Hackers Use Social Engineering and Calendly to Deliver AppleScript Malware          *

Silver Fox APT Exploits Trojanized Medical Software in Multi-Stage Cyber Espionage Attacks          *

Cyberattackers impersonate MineCraft Mods targteting players via Multi-stage Malware          *

The Pervasive Threat of the 16 Billion Record Data Leak          *

Apache Traffic Server Vulnerability Enables Denial-of-Service via Memory Exhaustion          *

Cisco AnyConnect VPN Vulnerability Enables Unauthenticated DoS Attacks          *

LogMeIn Remote Access Exploited in Targeted System Breach          *

Sophisticated Phishing Attack Using ASP Pages Targets Prominent Critics of Russia          *

Hackers Use Cloudflare Tunnels to Deploy Python Malware on Windows Systems          *

North Korean Chollima Hackers Deploy GolangGhost RAT Against Windows and macOS          *

Sorillus RAT Campaign Abuses Cloud Services to Target European Organizations          *

Critical Remote Code Execution Flaw Discovered in Cisco ClamAV (CVE-2025-20260, CVSS 9.8)          *

Critical WordPress Plugin Flaw Allows Subscriber-Level Privilege Escalation          *

Chrome 137 Update Fixes Multiple High-Severity Security Flaws          *

Citrix NetScaler Receives Patch for Critical Security Flaw          *

Hackers Bypass Security in Apple Pay and Google Pay Using Transit Mode          *

Evasive Winos 4.0 Malware Campaign Hits Taiwan with Targeted Phishing Attacks          *

Scania Suffers Insurance Data Breach in Cyber Extortion Attack          *

KimJongRAT Uses Legitimate CDNs and Windows Utilities in Updated Multistage Attack Campaign          *

Linux Kernel Vulnerability Allows Privilege Escalation via Namespace Abuse          *

Critical Linux Root Exploit Chain Discovered in PAM and UDisks          *

Flodrix Botnet Deployed via Active Exploitation of Langflow RCE Vulnerability          *

Freedman HealthCare Targeted in Significant Data Breach          *

Critical SSTI Vulnerability (CVE-2025-5309) in BeyondTrust RS and PRA Enables Remote Code Execution          *

Chrome Users Targeted via Zero-Day Exploit in Ongoing Phishing Attacks          *

RapiPlata SpyLoan App Exposes Over 150,000 Users to Severe Data Breach          *

Critical Vulnerabilities in sslh Lead to Remote Denial-of-Service Attacks          *

Critical TP-Link and Zyxel Flaws Exploited in the Wild, CISA and GreyNoise Warn          *

Scattered Spider Hackers Escalate Attacks on U.S. Insurance Industry          *

Vulnerability in ASUS Armoury Crate Allows Elevation to Admin on Windows          *

Washington Post Hacked – Journalists' Email Accounts Breached in Targeted Cyberattack          *

Gunra Ransomware group targets American Hospital Dubai in Major Data Breach          *

Zoomcar Data Breach Exposes Personal Information of 8.4 Million Users          *

Asheville Eye Associates Reports Data Breach Impacting 147,000 Individuals          *

Spring Framework Vulnerability Exposes Applications to Reflected File Download Attacks          *

Over 20 Fake Crypto Wallet Apps on Google Play Steal Users’ Login Details          *

IBM Warns of High-Risk Privilege Escalation Vulnerability in BRMS for iSeries          *

Malicious PyPI Package Targets Developers: Chimera-Sandbox-Extensions Exposed          *

Tenable Patches Critical Agent Software Privilege Access Flaws Impacting Windows Systems          *

AI-Powered Discovery of Zero-Day Vulnerabilities in .NET Assemblies          *

KIA Vehicles in Ecuador at Risk Due to Outdated Keyless Entry Technology          *

Critical Bug in Grafana Leaves Thousands of Monitoring Systems Open to Takeover          *

High-Risk Vulnerability in Mitel OpenScape Accounting Management – CVE-2025-23092          *

Security Flaw in Grafana Lets Low-Level Users Access DingDing Webhook URLs          *

Cybercriminals Exploit DeepSeek-R1 Chatbot Hype to Spread BrowserVenom Malware          *

APT Tactics Observed in Fog Ransomware Attack on Asian Finance Sector          *

Critical Windows SMB Client Flaw Enables SYSTEM-Level Privilege Escalation via Kerberos Abuse          *

U.S. Sharp Healthcare Patients Impacted by Episource Data Breach in Ransomware attack          *

Cyberattacks Disrupt Government Services in North Carolina and Georgia          *

Quasar RAT Uses Batch Scripts and Sandbox Evasion to Stay Undetected          *

Anubis Ransomware Evolves with Destructive Wiping Feature          *

Cyber Intrusion at WestJet Affects App and Backend Services          *

New TokenBreak Attack Outsmarts AI Moderation with One-Character Tweaks          *

Weaponizing WordPress: Inside VexTrio’s Global Scam Network and Affiliate TDS Ecosystem          *

Cloudflare, Google Workspace services impacted by Google Cloud's outage          *

Critical Security Vulnerability Puts Mitel MiCollab Deployments at Risk          *

New JavaScript Injection Campaign Using JSFireTruck Threatens Web Users          *

New Ransomware Campaigns Leverage Unpatched SimpleHelp for Double Extortion          *

Microsoft 365 MFA Service Disruption Due to Internal Configuration Update          *

Discord Invitation Vulnerability Abused in Ongoing Malware Campaign          *

Apple’s iMessage Used as Spyware Gateway in Targeted Attacks          *

ACL Policy Misconfiguration in Nomad Opens Door to Job Hijacking          *

OAuth Exploited: Phishing Attacks Hijack GitHub Tokens via Device Code Flow          *

Acer ControlCenter Security Flaw Exposes Windows to Remote Code Execution          *

OpenPGP.js Vulnerability Permits Evasion of Message Signature Validation          *

OneLogin AD Connector Flaw Exposes User Authentication Credentials          *

Malware Attack via Expired Discord Invite Links          *

CVE-2025-49146: PostgreSQL JDBC Driver Bug Opens Door to Man-in-the-Middle Attacks          *

Amazon Cloud Cam Vulnerability Could Be Leveraged for Network Reconnaissance          *

Microsoft Outlook Vulnerability Could Allow Remote Code Execution by Hackers          *

Trend Micro Issues Urgent Patches for Critical Apex One Vulnerabilities          *

Palo Alto Networks Addresses Privilege Escalation Vulnerabilities with New Patches          *

Graphite Spyware Exploited in Apple iOS Zero-Click Attacks Targeting Journalists          *

Proofpoint Uncovers Entra ID Breach Campaign Using Legitimate Security Tool          *

Reflective Kerberos Relay Attack: A New Zero-Day Threat to Windows SMB Client          *

Critical Vulnerabilities in Weidmueller IE-SR-2TX Routers Enable Remote Root Exploits          *

GitLab Urgent Update: Critical Security Flaws Fixed – Immediate Upgrade Required          *

Adobe Issues Security Update to Resolve 254 Vulnerabilities          *

SinoTrack GPS Devices Found Vulnerable to Unauthorized Remote Access          *

Chrome and Firefox Updates Patch Critical Memory Vulnerabilities          *

Zero-click AI Data Leak Vulnerability Discovered in Microsoft 365 Copilot          *

Privilege Escalation and Secret Key Exposure Fixed in Apache CloudStack LTS Releases          *

Ivanti Addresses Critical Credential Security Vulnerabilities in Workspace Control          *

Critical Kibana Vulnerability: Synthetic Monitoring at Risk of Unauthorized Entry          *

Firmware-Level Privilege Escalation Through Insyde’s Insecure NVRAM Variable SecureFlashCertData          *

HPE Aruba Patches Sensitive Data Exposure Vulnerability in Private 5G Core          *

Microsoft Patch Tuesday Security Advisory- June 2025          *

TxDOT Data Breach Exposes Sensitive Driver Information          *

Ongoing Heroku Outage Impacts Developers and Online Services          *

FIN6 Leverages Fake Resumes and Cloud Infrastructure to Deliver More_eggs Malware          *

Roundcube Webmail Vulnerability CVE-2025-49113 Enables Remote Code Execution via PHP Object Injection          *

Misconfigured DanaBot C2 API Endpoint Discloses Sensitive Attacker Information          *

Critical Remote Code Execution Flaw in ManageEngine Exchange Reporter Plus          *

Security Flaw Threatens Over 33,000 RealHomes WordPress Sites with Admin Hijacking          *

OpenAI Cracks Down on Misuse of ChatGPT by Russian, Chinese, and North Korean Actors          *

Critical QNAP Vulnerabilities Enable Remote Account Hijacking          *

Chinese Hackers Target SentinelOne in Failed Breach Attempt, Report Finds          *

Operation DRAGONCLONE: China-Aligned APT Targets China Mobile Tietong with Advanced Malware and Exploits          *

Critical Authentication Bypass in RevPi Webstatus (CVE-2025-41646) Exposes Industrial Systems to Remote Attacks          *

Critical Vulnerability in Lovable Platform Exposes User Data          *

Phishing Campaign Targets Legacy Office Users with FormBook-Infested Excel Files          *

Chinese Nation-State Hackers Launch Coordinated Attacks Across 70+ Entities          *

Wazuh Servers Hit by Mirai Botnets Exploiting Critical RCE Flaw          *

Cyberattack Disrupts United Natural Foods Inc. (UNFI), Operations Across U.S. and Canada          *

Sensata Technologies Data Breach Exposes Employee Information After Ransomware Attack          *

Socket Uncovers npm Malware Designed to Annihilate Production Systems          *

Salesforce Aura Controller Hit by Critical SOQL Injection Vulnerability          *

Millions of Devices Compromised by HelloTDS Malware Through Fake Captcha Networks          *

Encoded Malware and Social Engineering Used in Recent Kimsuky Operation          *

GitHub Hosts Emerging C# Malware Toolkit DuplexSpy RAT          *

Blitz Malware Spreads Through Backdoored Standoff 2 Cheats          *

North Korea Hit by Widespread Internet Outage, Internal Cause Suspected          *

Malware Discovered in NPM Packages with Over 1 Million Weekly Downloads          *

Malicious Android App Posing as Government Tool Distributes Stealer Malware          *

Malicious Actors Exploit ChatGPT to Generate Fake IT Resumes and Spread Disinformation          *

Operation Phantom Enigma: Browser Extension Malware Campaign Hits Brazil          *

Fake Microsoft Support Centers in India Scammed Thousands in Japan          *

Backdoor Vulnerabilities in npm Modules Allow Complete File Deletion          *

DragonForce Targets Critical Industries in Sophisticated Ransomware Attacks          *

Rust-Coded Infostealer Targets Chromium Profiles and Bypasses EDR          *

ClickFix Phishing Attack Leverages Cloudflare CAPTCHA Spoofing          *

Single User Behind Hundreds of Malicious GitHub Repos Aimed at Novice Cybercriminals          *

BladedFeline Cyber Group Intensifies Espionage Against Iraqi and Kurdish Targets          *

Optima Tax Relief Hit by Chaos Ransomware in Double-Extortion Attack          *

Modified Mirai Botnet Targets Legacy Surveillance Systems          *

Cybersecurity Researchers Discovered Critical Flaws in Popular Chrome Extensions          *

Unpatched Fortinet Systems Targeted in New Qilin Ransomware Surge          *

Kettering Health Confirms Major Ransomware Attack by Interlock Group          *

Amplify Codegen Vulnerability Allows Remote Code Execution          *

Critical FreeRTOS-Plus-TCP Vulnerability Enables Remote Code Execution or System Crash          *

BadBox 2.0 Malware Targets Over Million Android Devices in Global Cyber Threat          *

Paste ee Exploited as Malware Delivery Vector for XWorm and AsyncRAT          *

TA397 targets China and Europe organizations exploit scheduled tasks, deploy RAT via SpearPhishing          *

New Wireshark Vulnerability Enables DoS Exploits          *

Dark Web Listing Claims Sale of Exposed Odoo Employee Database          *

PathWiper destructive Malware deployed to obstruct Ukrainian operations          *

Dell PowerScale Flaw Lets Attackers Gain Unauthorized Access to Filesystem          *

VMware NSX XSS Flaw Allows Remote Attackers to Inject Malicious Code into Systems          *

WordPress Administrators Alerted to Credential-Stealing Cache Plugin          *

Data Breach at Media Giant Lee Enterprises Impacts 39,000 Individuals          *

Critical Cisco ISE Vulnerability Impacts AWS, Azure, and OCI Cloud Environments          *

Eleven11bot Botnet Hijacks 86,000 IP Cameras for Massive DDoS Assault          *

Stealthy ‘Sleeper Agent’ Browser Extensions Found on Over 1.5 Million Devices Worldwide          *

SCATTERED SPIDER Hackers Exploit IT Teams, Bypass MFA with Social Engineering          *

Crocodilus Android Trojan Expands to Eight Countries, Targeting Banks and Crypto Wallets          *

Chaos RAT disguised as Network tool targets Windows, Linux systems via Phishing          *

AMOS macOS Stealer Uses Clickfix Exploit to Sneak Malicious Code Past Defenses          *

35,000 Internet-Exposed Solar Power Systems at Risk of Cyberattacks          *

Luxury Retail Giant Cartier Discloses Customer Data Breach          *

Thousands Affected by Credential Stuffing Attack on The North Face          *

AI-Powered Microsoft Defender Blocks 120,000 Attacks in Six Months          *

Sensitive Configuration Files at Risk Due to IBM QRadar Vulnerabilities          *

Google Fixes Third Actively Exploited Chrome Zero-Day Vulnerability of 2025 (CVE-2025-5419)          *

CISA Warns of Active Exploitation of ConnectWise ScreenConnect and Other Critical Flaws          *

Cyberattackers impersonate Gitcode and Docusign sites to spread NetSupport RAT through Multi-staging Powershell scripting          *

Android Devices Receive Critical Patch for GPU and Kernel Vulnerabilities          *

10-Year-Old Roundcube RCE Vulnerability Threatens Millions of Servers          *

Exploiting Safari’s JavaScript TypeError Vulnerability for Cross-Site Scripting (XSS)          *

Black Owl Hacktivists Escalate Cyber Attacks on Russian Infrastructure          *

Unauthenticated XML Injection Found in Apple’s iOS Activation Flaw          *

Unpatched iOS Activation Flaw Exposes Devices to Silent Pre-Setup Attacks          *

MainStreet Bank Data Breach Affects Customer Payment Cards          *

Authentication Flaw in Instantel Micromate Puts Critical Infrastructure at Risk          *

ModSecurity Bug Lets Attackers Exhaust Memory and Disrupt Web Services          *

New Lyrix Ransomware Strain Exploits Advanced Evasion to Attack Windows Users          *

Cybercriminals Exploit CAPTCHA Bypass to Automate Microsoft Account Creation          *

Dameware Vulnerability Could Let Low-Level Users Gain Admin Access          *

Critical HPE StoreOnce Vulnerabilities Expose Systems to Remote Code Execution and Authentication Bypass          *

JINX-0132 Cryptojacking Campaign Exploits Devops Webservers via XMRig Mining Malware          *

Android CVEs Reveal How Preinstalled Apps Compromise User Security          *

EddieStealer Malware Spread Through ClickFix CAPTCHA Scam          *

Critical Vulnerabilities Found in MediaTek Chipsets          *

Realtek Bluetooth HCI Adaptor Vulnerability Poses Privilege Escalation Risk          *

Urgent Patch Required for IBM InfoSphere DataStage Cleartext Vulnerability          *

Qualcomm Urges Immediate Patching Amidst Active Adreno GPU Exploitation          *

JavaScript Bundle Flaw Grants Unauthorized Access to Azure AD Tokens          *

Severe Vulnerability in Denodo Scheduler Enables Remote Code Execution by Threat Actors          *

Attackers Exploit Critical Remote Code Execution Flaw in Roundcube          *

Critical Security Flaw in Open-Source Code Exposes GitHub Repositories          *

Critical Security Flaws Leave CS5000 Fire Systems Vulnerable Worldwide          *

Two Critical Linux Vulnerabilities Allow Credential Exposure via Core Dump Handlers          *

Blockchain Technology Implementation to Defend Digtital threats          *

Exploit Details for Critical Cisco IOS XE Flaw Now Public          *

Conti Ransomware Gang Exposed Key Leaders Unmasked and Operations Revealed          *

The Changing Landscape of DDoS Defense in 2025          *

UK Healthcare Organizations Targeted in Broad Cyber Campaign Exploiting Ivanti Flaw          *

Major DDoS Attack on ASVT Causes Widespread Internet Outages in Moscow          *

Massive Office 365 Breach Campaign Tied to Dadsec and Tycoon2FA Phishing Network          *

Firebase and Google Apps Script Exploited in New Phishing Campaigns          *

Maine and New Hampshire Hospitals Cut Services Following Cyber Incident          *

Interlock Ransomware Strikes UK Using Newly Deployed NodeSnake RAT          *

New Ubuntu and Red Hat Bugs Allow SUID Binary Memory Leaks          *

LexisNexis Risk Solutions Reports Unauthorized Data Access Impacting Over 360,000 Individuals          *

CISA Advised to Include CVE Origin and Exploit Conditions in KEV Entries          *

Critical RCE and API Vulnerabilities discovered in vBulletin Template Engine          *

Pure Crypter Bypasses Windows 11 24H2 Security Using Advanced Evasion Techniques          *

Critical Icinga 2 Flaw Enables Certificate Forgery and Trust Bypass by Attackers          *

Meta Blocks Foreign Influence Campaigns Exploiting Facebook and Instagram          *

ConnectWise ScreenConnect Hit by Nation-State Cyberattack          *

U.S. Sanctions Philippines-Based Funnull for Enabling Crypto Investment Scams          *

Firefox 139.0.1 Hotfix Resolves NVIDIA Graphics Glitches on Windows          *

Microsoft Entra Billing Roles Exploited by Attackers to Gain Elevated Access in Enterprises          *

China-Linked Threat Actor Earth Lamia Targets Enterprise Platforms Across Asia          *

Malicious PyPI Package Launches a Supply Chain Attack to Steal Solana Private Keys          *

New Malware Exploit Evades Antivirus by Skipping PE Header in Windows          *

Safari Fullscreen Exploit Enables Stealth Phishing Attacks to Capture User Credential          *

Vulnerability in Nextjs Dev Server Results in Exposure of Developer Information          *

EDDIESTEALER Malware Exploits Fake CAPTCHA to Target Windows Users          *

North Korean IT Workers Use Legitimate Tools and Network Techniques to Bypass EDR Detection          *

PumaBot Compromises IoT Devices Through SSH Credential Attacks          *

Critical Argo CD Flaw Lets Attackers Manipulate Kubernetes Resources          *

Phishing Campaign Exploits Nifty infrastructure Targets Corporate Users          *

Apache Tomcat Vulnerability Exposes Weakness in CGI Servlet Access Controls          *

SimpleHelp Flaws Exploited by DragonForce to Launch Widespread Ransomware Attacks          *

Stealthy Windows RAT Avoids Detection for Weeks by Abusing Corrupted DOS and PE Headers          *

Cybercriminals Use Malware Loaded Installers Posing as Popular AI Tools to Target Users          *

ChoiceJacking A New USB-Based Threat to Mobile Device Security          *

Woodpecker Tool to Find Security Issues in AI, Kubernetes, and APIs          *

Massive Brute-Force Attack UTG-Q-015 Hits Government Web Infrastructure          *

Exploitation of Supply Chain Vulnerabilities by APTs in Enterprise Environments          *

Phishing Operation Exploits NetBird and OpenSSH to Breach Global Financial Leaders          *

Dell Urges Immediate Update for PowerStore T Systems to Patch Critical Vulnerability          *

Zanubis Android Malware Steals Banking Data and Enables Remote Device Control          *

ChoiceJacking Flaw Lets Hackers Exploit Malicious Chargers on Android and iOS          *

Hackers Exploit Craft CMS Flaw to Deploy Cryptocurrency Mining Malware          *

XenServer VM Tools Security Flaws Allow Attackers to Execute Arbitrary Code          *

OneDrive File Picker Flaw Exposes Full Cloud Access via OAuth Misuse          *

AyySSHush Botnet Compromises 9,000 ASUS Routers via Persistent SSH Backdoor          *

Silver RAT Malware Leveraging New Anti-Virus Evasion Methods to Execute Malicious Activities          *

Firefox's Zero-Interaction libvpx Flaw: A Gateway for Arbitrary Code Execution          *

Ransomware Attack Disrupts MathWorks Operations, Impacts MATLAB Users Globally          *

Chrome 137 Launches with High-Severity Security Fixes and On-Device AI for Scam Detection          *

Hackers Imitate OneNote Login Page to Steal Office 365 and Outlook Credentials          *

DragonForce Ransomware Exploits SimpleHelp Vulnerabilities in MSP Supply Chain Breach          *

Payroll Portal Phishing Scam Targets Employees via Google Searches          *

TAG-110 Shifts to Macro-Enabled Word Templates in Espionage Campaign Targeting Tajikistan          *

Critical Unpatched Vulnerability in TI WooCommerce Wishlist Plugin (CVE-2025-47577)          *

Cybercriminals Exploit Fake DocuSign Alerts to Steal Corporate Information          *

Luna Moth (Chatty Spider) Callback Phishing Campaign Targeting U.S. Organizations          *

Service Outages at MathWorks Traced to Ransomware Breach          *

Microsoft 365-Based Cyberattack Exploiting OAuth Redirection for Unauthorized Account Access          *

Google Meet Impersonation Leads to Cross-Platform Malware via PowerShell Commands          *

Critical GIMP Vulnerabilities Allow Remote Code Execution via Malicious Image Files          *

Unsecured Firmware in Hardy Barth EV Stations Enables Full System Takeover          *

Silver RAT Malware Uses Process Hollowing and Obfuscation to Evade Detection          *

Adidas Data Breach Highlights Growing Threat of Third-Party Cyber Attacks in Retail Sector          *

Oracle TNS Vulnerability Allows Unauthenticated Access to Sensitive System Memory          *

vBulletin RCE Vulnerability Exposes Forums to Remote Attacks          *

FBI Warns of Silent Ransom Group Impersonating IT Support to Infiltrate Victims          *

Threat Actors Use Database Client Tools to Steal Sensitive Data from Compromised Systems          *

Katz Stealer Malware Infects Systems via Phishing and Malicious Downloads          *

Malicious Phishing Site Targeting DigiYatra Users          *

Remote Command Injection Vulnerability Found in Meteobridge Web Interface          *

Malicious npm and VS Code Extensions Exploit Open-Source Ecosystems          *

DOUBLELOADER Malware Uses Game-Hacking Obfuscator ALCATRAZ to Evade Detection and Deliver RHADAMANTHYS          *

Hacker Sells 500+ Databases on Dark Web, Exposing Sensitive User Data          *

Critical Apache Tomcat Remote Code Execution Flaw Exposed with PoC          *

Bitwarden Vulnerability Exposes Users to Malicious PDF Attacks          *

Tenable Network Monitor Update Fixes Critical Privilege Escalation Vulnerabilities          *

Thousands of Systems Compromised in Massive Cyber Campaign by TA-ShadowCricket          *

Security Flaw in D-Link Routers, Update to Firmware 1.1.00.26 to Protect Against Exploits          *

Ransomware Disrupts Nova Scotia Power Services and Leaks Sensitive Data          *

Severe Security Bug in WSO2 Allows Arbitrary User Password Resets          *

Over 184 Million User Passwords Exposed in Hacker-Managed Open Directory Leak          *

Chihuahua Malware Exploits .NET to Steal Credentials and Exfiltrate Through Phishing          *

Zero Trust Policy Flaw Allows Exploitation of Vulnerabilities and Tampering with NHI Secrets          *

Critical Flaw in AutomationDirect MB-Gateway Exposes Industrial Networks          *

Atlassian and GitLab Address Multiple High-Risk Flaws Admins Urged to Apply Updates          *

Ransomware Hits Marlboro-Chesterfield Pathology, Exposing Over 235K Health Records          *

Rapid7 Uncovers Stealthy Malware Campaign Delivering Winos 4.0 via Fake Apps          *

Denial-of-Service in BIND DNS Paves Way for Critical Security Policy Bypass          *

GitLab Duo AI Vulnerability Let Hackers Hijack Responses Using Hidden Prompts          *

CISA Issues Warning on Widespread SaaS Exploits Using App Secrets, Cloud Flaws          *

Critical ModSecurity Flaw Threatens Web Servers with DoS Attacks          *

Critical Backdoor Vulnerability in NETGEAR DGND3700v2 Routers (CVE-2025-4978) Enables Full Remote Access Without Authentication          *

Critical Flaws Exposed in ABB ASPECT Building Management System          *

Threat Actor Sells Burger King Spain Backup System Exploit for $4,000          *

Chinese Nexus Hackers Exploit Critical Flaw in Ivanti Endpoint Manager Mobile          *

TikTok Videos Exploited to Spread Vidar and StealC Malware via ClickFix Method          *

Smart Contract Vulnerability Leads to Massive $223M Breach on Cetus Protocol          *

Widespread Malicious NPM Packages Discovered Exfiltrating Data and Destroying Systems          *

Apple Patches Critical XNU Kernel Vulnerability CVE-2025-31219          *

Operation Endgame II Disrupts DanaBot’s Global Malware Network          *

New Windows Server 2025 Vulnerability Threatens Active Directory Environments          *

Critical Vulnerability Found in GitLab Duo AI Assistant          *

Leaked LockBit Data Reveals Affiliate Strategies and Ransomware Tactics          *

Newly Discovered Fortinet Flaw Allows Attackers to Take Control Remotely          *

Qakbot Malware Developer Allegedly Behind Widespread Ransomware Attacks          *

Cybercriminals Compromise more than 50 brands to turn 5,500 Edge Devices into Honeypots          *

CISA Warns of Threat Actors Exploiting Commvault Azure App to Exfiltrate Sensitive Data          *

Severe Flaw in Netwrix Password Manager Allows Remote Code Execution by Authenticated Users          *

AI-Assisted Discovery: SMB 0-Day Found in Linux Kernel via ChatGPT          *

Versa Concerto Authentication Bypass Leads to Remote Code Execution          *

Cisco Webex Vulnerability Exposes Users to HTTP Cache Poisoning Attacks          *

Chinese Threat Actor Exploits Cityworks Vulnerability to Target U.S. Local Governments          *

Fake Ledger Apps on macOS Stealing Crypto Wallet Seed Phrases          *

Security Flaws in Chrome Allow Remote Execution of Malicious Code          *

Malicious JavaScript Injected into PWAs to Target Mobile Users          *

23 Million Coca-Cola Records Stolen in Major Data Breach, Everest Hacking Group Involved          *

Cisco RADIUS Process Flaw in Identity Services Could Let Attackers Cause DoS          *

Cellcom Acknowledges Cyberattack Behind Five-Day Network Outage          *

Severe Security Flaw in Lexmark Printers Allows Remote Code Execution          *

Self-Replicating Malware Targets Docker Containers for Crypto Mining and Persistent Infections          *

Leaked 'Accenture Files' Reveal Global Projects Handling Billions of User Data          *

PureRAT Malware Surges in 2025, Leveraging PureLogs to Target Russian Businesses          *

Evolving 3AM Ransomware Tactics Mirror Black Basta and FIN7 Playbooks          *

Kettering Health experiences a widespread system outage due to a ransomware attack          *

Palo Alto Networks Discloses XSS Flaw Impacting GlobalProtect VPN Users          *

Fake Kling AI Scam Exposes 6 Million Users to Sophisticated Malware in Global Cyberattack          *

More Eggs Malware Exploits Job Applications to Distribute Malicious Payloads          *

Hackers Exploit TikTok and Instagram APIs to Confirm Stolen Account Details          *

Kimsuky threat group delivers XWorm RAT via powershell payloads          *

AWS Default IAM Roles Expose Pathways for Lateral Movement and Cross-Service Exploitation          *

Broadcom Patches Critical VMware Vulnerabilities Affecting ESXi vCenter and Workstation          *

SideWinder Targets South Asian Governments with Geofenced StealerBot Malware Campaign          *

Malicious Chrome Extensions Masquerade as Legitimate Tools to Exfiltrate Data and Hijack Sessions          *

Hazy Hawk Campaign Exploits Dormant DNS CNAME Records to Hijack Trusted Subdomains          *

SK Telecom Data Breach Malware Campaign Compromises USIM Data of 27 Million Users          *

Critical DoS Vulnerability in Multer Threatens Millions of Node.js Applications          *

Microsoft Patches High-Severity Bug in Windows 11 Admin Tools          *

Security Flaw in O2 VoLTE Allows Geolocation of Call Recipients          *

Microsoft Releases Emergency Update to Fix BitLocker Recovery Key Issue on Windows 10          *

Malicious npm Package Targets Koishi Chatbots, Stealing Sensitive Data Instantly          *

The W3LL Phishing Kit initiates a widespread campaign targeting Outlook login credentials          *

Prompt Injection Techniques Used to Evade AI-Powered Web Application Firewalls          *

Chinese APT Mustang Panda Unveils Advanced EDR Bypassing Techniques          *

Phishing Scam Tricks Users with Fake Zoom Invitations from Deceptive Domains          *

Ivanti EPMM 0-day Vulnerability Actively Exploited in the Wild          *

Cybercriminals Exploit AutoIT to Deploy Advanced Malware on Windows Systems          *

Trojanised KeePass Installer Used to Deliver Cobalt Strike and Steal Credentials in Sophisticated Malware Campaign          *

Critical Vulnerability in Auth0-PHP SDK Enables Brute Force Attacks on Session Cookies (CVE-2025-47275)          *

Sophisticated Phishing Campaign Targets Kuwaiti and Gulf Sectors with Over 230 Deceptive Domains          *

New Apple Kernel Vulnerability Affects Multiple iOS and iPadOS Versions          *

Dairy Giant Arla Foods Suffers Cyber Disruption at German Plant          *

Major Data Breach at UK Legal Aid Agency Compromises Sensitive Applicant Information          *

Volkswagen Data Breach Major Security Flaws in Connected Car App Expose Personal and Vehicle Information          *

Zero Day Attacks at Pwn2Own Trigger Firefox Security Update          *

Trusted VMware Tool RVTools Compromised to Deliver Bumblebee Loader Malware          *

Multi Stage Cyberattack Exploits Unpatched Confluence Servers via RCE and RDP Access          *

ModiLoader Malware Campaign Strikes Windows PCs to Steal User Credentials          *

BreachForums Admin Faces 700000 Penalty for Health Care Data Breach          *

glibc Flaw Exposes Linux Systems to Local Code Execution Threats          *

Critical UAF Vulnerability in Windows RD Gateway Enables Remote Code Execution          *

PowerShell Driven Ransomware Targets Elon Musk Fans in Satirical CyberAttack          *

High-Risk XXE Vulnerability Impacts WebDriverManager Java Library          *

Critical Security Flaws Found in OpenText OBM CVE-2025-3476 and CVE-2025-3272 Require Immediate Patching          *

Google Chrome Hit by Active Exploits: Urgent Patches Released          *

Enterprise Platforms Fall as VMware Firefox Red Hatand SharePoint Hacked at Pwn2Own          *

Cybercriminal Group INC Admits to Breaching South African Airways          *

Duo Broadband Customer Data Exposed in CDG Ransomware Attack          *

Critical Security Vulnerability in Rockwell Automation FactoryTalk Historian-ThingWorx Connector          *

Critical Privilege Escalation Vulnerability Impacts Over 10,000 WordPress Eventin Sites          *

Chinese Hackers Target Drone Supply Chain in Sophisticated Cyber Attacks          *

Sophisticated NPM Malware Uses Google Calendar for Stealthy Command-and-Control          *

Severe Vulnerability in Eventin Plugin Exposes 10000 WordPress Sites to Attack          *

Procolored Software Update Contained RAT and Crypto Stealer          *

Skitnet Malware Emerges as Powerful Post-Exploitation Tool for Ransomware Gangs          *

Fileless PowerShell Attacks Use LNK Shortcuts and MSHTA to Deliver Remcos RAT          *

New Branch Privilege Injection (BPI) Vulnerability in Intel CPUs          *

HTTPBot Botnet Targets China's Gaming and Tech Sectors with Precision DDoS Attacks          *

APT Group 123 Continues Targeting Windows Systems with Malicious Payload Campaign          *

FrigidStealer Malware Targets macOS Users with Sophisticated Credential Theft          *

VanHelsing Simulation Details How Affiliates Launch Coordinated Attacks          *

Commit Stomping How Hackers Manipulate Git Timestamps to Rewrite Code History          *

SonicWall SMA1000 SSRF Flaw Allows Remote Attackers to Exploit Encoded URLs          *

Jenkins releases security update addressing vulnerabilities that threaten CI-CD pipelines          *

Nucor Halts Operations at Multiple Facilities After Cybersecurity Breach          *

Hackers Use Open Source Packages to Spread Malware in Supply Chain Attacks          *

Hackers Use Google Services to Send Fake Law Enforcement Requests          *

CISA Issues Warning on Five Actively Exploited Zero-Day Vulnerabilities in Windows Systems          *

Fileless PowerShell Malware Evades Detection by Antivirus and EDR Tools          *

Advanced .NET Multi-Stage Loader Targets Windows to Deliver Malware Payloads          *

Hackers Exploit Coinbase Employees, Leading to $400 Million Data Exposure          *

Nova Scotia Power Confirms Data Breach, Offers Credit Monitoring to Affected Customers          *

Google Patches Actively Exploited Chrome Vulnerability CVE-2025-4664          *

BitLocker Threat: Bitpixie Vulnerability Enables Fast Encryption Bypass          *

Node.js Vulnerability Exposes Systems to Process Crashes and Service Disruptions          *

Russian hackers are using a new security flaw in MDaemon to attack webmail servers          *

Hackers Turn to Xanthorox AI for Automated Phishing and Malware Campaigns          *

Horabot Malware Campaign Targets Latin America Through HTML Phishing          *

Google Alerts U.S. Retailers of Rising Threat from Scattered Spider Tactics          *

Critical Adobe Illustrator Flaw Allows Remote Code Execution by Attackers          *

Remote Code Execution Vulnerability in Outlook Could Enable Code Execution          *

Earth Ammit Cyber Campaigns Target Taiwan and South Korea’s Defense and Tech Sectors          *

Cyberattack Disrupts Operations at Nucor, Largest U.S. Steel Producer          *

Australian Human Rights Commission Exposes Documents to Search Engines          *

BianLian and RansomExx Exploit SAP NetWeaver Vulnerability to Deploy PipeMagic Trojan          *

Samsung Fixes CVE-2025-4632 Vulnerability Exploited by Mirai Botnet Through MagicINFO 9          *

Microsoft Alerts Users to AD CS Vulnerability Enabling Network-Wide Denial-of-Service Attacks          *

Microsoft Issues Patch for Defender Vulnerability Allowing Local Privilege Escalation          *

Exploiting GovDelivery for TxTag Toll Charge Phishing Scam          *

Swan Vector APT Targets East Asian Organizations Using Spear-Phishing and Stealthy DLL Implants          *

Marks & Spencer Confirms Data Breach Following Cyberattack on Customer Systems          *

Hackers Exploit KeePass to Distribute Malware and Steal User Credentials          *

Threat Actor Used Fake Solana Tool on PyPI to Extract Source Code from 761 Downloads          *

Critical Fortinet RCE Flaw (CVE-2025-32756) Actively Exploited in FortiVoice and Other Devices          *

Microsoft Patch Tuesday Security advisory- May 2025          *

Ongoing North Korean Cyber Campaigns Targeting Ukraine and South Korea          *

Dior Alerts Chinese Customers After Cyberattack          *

Intel CPUs Affected by New Branch Privilege Injection Vulnerability          *

Public Alert on Fraudulent Online Investment Scheme Dismantled by Authorities          *

North Korean Nationals Indicted for Massive Remote IT Job Fraud          *

Ivanti Releases Critical Security Update for EPMM After Limited Exploits Discovered          *

Persistent Firmware Key Management Failures Weaken Intel Boot Guard and UEFI Secure Boot          *

CISA Warns of Stealth Functionality Flaw in TeleMessage TM SGNL          *

XSS Vulnerability in VMware Aria May Lead to Access Token Theft          *

Hackers Exploit PyInstaller to Deliver Stealthy Info-Stealing Malware on macOS          *

DriverHub Vulnerability in ASUS Software Exposes Systems to Privilege Escalation Attacks          *

DDoS Attacks Used as Cover for Data Breaches by Cybercriminals          *

Apple Issues Security Updates to Address Severe Data Exposure Vulnerabilities          *

North Korean Attackers Use Malicious LNK Files to Target Activists          *

Lumma Stealer Adopts PowerShell and Sophisticated Tactics in Latest Evolution          *

iClicker Website Compromised to Deliver Malware to Students via Fake CAPTCHA Page          *

Hackers Begin Testing ClickFix Attacks on Linux Systems          *

Zero-Day Flaw in Output Messenger Exploited in Espionage Campaigns          *

Fake AI Tools Used to Spread Malware          *

Threat Actors Use JPEG Images to Deliver Undetectable Ransomware Payloads          *

Hackers Leverage Cobalt Strike Beacon to Obtain Microsoft Entra Refresh Tokens in New Exploit          *

RATty Malware Campaign Targets Southern Europe via Sophisticated Phishing Scheme          *

ASUS DriverHub Patches Critical Remote Code Execution Vulnerabilities          *

New Phishing Technique Exploits Blob URLs to Bypass Secure Email Gateways and Evade Detection          *

Google Researchers Highlight Critical Mach IPC Flaws in macOS Sandbox          *

Hackers Leverage Copilot AI to Access Restricted SharePoint Content          *

Hackers Exploiting Microsoft Entra ID Legacy Protocols to Bypass MFA and Conditional Access Controls          *

Critical Vulnerabilities In Mitel SIP Phones Allows Attackers to Inject Arbitrary Commands          *

Metasploit Update Introduces Erlang/OTP SSH Exploit and OPNSense Vulnerability Scanner          *

Wormable Linux Rootkit Spreads Across Systems to Steal SSH Keys and Escalate Privileges          *

Threat Actors Target Job Seekers with Sophisticated Recruitment Scams          *

Advanced PhaaS Toolkits Now Generating Highly Realistic Phishing Pages          *

PupkinStealer Malware Exploits .NET to Steal Credentials and Exfiltrate Through Telegram          *

Critical Azure and Power Apps Flaws Enable Privilege Escalation and Data Exposure          *

Mitel SIP Phones Exposed to Critical Vulnerabilities: Command Injection and File Upload Risks          *

DOGE Employee's System Breached by Info-Stealer Malware, Data Security at Risk          *

Google Search and Chrome Get AI Upgrade to Detect Sophisticated Scam Tactics          *

Critical CloudVision ZTP Vulnerability Patched by Arista, Earning CVSS 10 Score          *

Helpdesk Under Siege: Hackers Exploit IT Support Portals for Initial Access          *

Stealthy .NET Malware Embeds Payloads in Bitmap Files to Evade Detection          *

SAP Systems Under Attack: Chinese Hackers Exploit Critical RCE Vulnerability          *

Brazilian Executives Targeted by Initial Access Brokers Using NF e Spam and Legit RMM Trials          *

OtterCookie v4 Now Detects Virtual Machines and Steals Chrome, MetaMask Credentials          *

U.S.-Dutch Operation Dismantles 7,000-Device Proxy Botnet Leveraging IoT and End-of-Life Systems          *

Malicious npm Packages Backdoor Over 3,200 Cursor Users, Steal Credentials          *

Threat Actors Exploit WinRM to Evade Security Measures in Active Directory Networks          *

SEO Poisoning Attack Uses Trusted IT Tools to Distribute Malware to Professionals          *

Security Flaw in Apache ActiveMQ Immediate Action Required to Prevent DoS Attacks          *

Critical macOS Vulnerability CVE-2024-44236 Enables Remote Code Execution via Malicious ICC Profiles          *

Attackers Leverage Host Header Injection for Web Application Breaches          *

Severe Flaw in Ubiquiti UniFi Protect Cameras Enables Remote Code Execution          *

New Spam Campaign Exploits Remote Monitoring Software to Infiltrate Organizations          *

New Scam Exploits X Twitter Ad URL Display Flaw to Deceive Users          *

Critical Flaws in Radware Cloud WAF Enable Bypass of Security Filters          *

38,000+ FreeDrain Subdomains Used in SEO Scam to Steal Crypto Wallet Seed Phrases          *

Insight Partners Confirms Data Breach Exposing Investor Information          *

Kickidler Employee Monitoring Software Exploited in Ransomware Attacks          *

Critical Microsoft Bookings Flaw Allowed HTML Injection and Meeting Manipulation          *

LockBit Ransomware’s Internal Data, Wallets, and Passwords Leaked in Major Breach          *

Remote Reboot Vulnerability in Cisco IOS, IOS XE, and IOS XR          *

Critical Cisco IOS XE Wireless Controllers Flaw Grants Attackers Full Device Control          *

Healthcare Sector Becomes Leading Target for Cyber Attacks in 2025          *

CoGUI Phishing Platform Sent 580 Million Emails in Massive Credential Theft Campaign          *

Europol Dismantles Six DDoS-for-Hire Platforms Involved in Worldwide Cyberattacks          *

OttoKit WordPress Plugin with Over 100K Installs Targeted by Exploits Leveraging Multiple Vulnerabilities          *

Lampion Malware Exploits ClickFix Tactics to Steal Banking Information          *

North Korean Hackers Exploit Trusted Vendor in $1B Crypto Theft, Researchers Reveal          *

Critical CVE-2025-25014 Vulnerability in Kibana Allows Remote Code Execution via Prototype Pollution          *

Samsung MagicINFO 9 Server RCE Vulnerability (CVE-2024-7399) Under Active Exploitation          *

Hackers Target Educational Institutions in New Mexico with Cyber Attacks          *

Apache Parquet Exploit Tool Identifies Servers Vulnerable to Critical Flaw          *

Exploitation of Remote Code Execution Flaw in Samsung MagicINFO 9 Server Confirmed in Recent Attacks          *

Hackers Use Fake Chrome Error Pages to Deliver Malicious Scripts to Windows Systems          *

Hackers Target HR Teams with Fake Resumes to Spread More_eggs Malware          *

Microsoft Warns Default Helm Charts May Expose Kubernetes Applications to Data Leaks          *

CISA Warns of Active Exploits in Critical Langflow API Vulnerability          *

Unauthorized Messaging App Used by Trump Aide Compromised in Data Breach          *

Babuk Ransomware Deployed via SentinelOne Evasion by Stealthy Threat Actor          *

Hackers Exploit 21 Popular Extensions to Seize Control of Ecommerce Servers          *

Critical Zero Click Vulnerability in Microsoft Telnet Exposes Windows Systems to Credential Theft          *

Ransomware Group DragonForce Targets UK Retailers in Major Data Breaches          *

Email Validation Flaws Lead to XSS and SSRF in Major Web Apps          *

Darcula PhaaS Leverages Phishing Texts to Steal 884000 Credit Cards          *

Commvault CVE-2025-34028 Added to CISA KEV Following Confirmed Active Exploitation          *

Zero-Click AirPlay Vulnerabilities Allow Wormable RCE on Apple Devices Over Public Wi-Fi          *

Claude AI Misused in Coordinated Influence-as-a-Service Campaigns          *

Luna Moth Launches New Social Engineering Attacks via Phony Helpdesk Sites          *

Critical Bugs in SonicWall SMA Let Hackers Steal Data and Execute Admin Commands          *

National Cyber Security Centre Alerts UK Organisations to Ransomware Risks          *

Critical Webmin Flaw Allows Remote Privilege Escalation to Root Access          *

Remote Code Execution Risk in Apache Parquet Java Through Malicious Avro Schemas          *

SocGholish Toolset Powers RansomHub’s Web-Based Credential Attacks          *

Stealerium Malware Campaign Leverages Tax Documents to Infiltrate U.S. Systems          *

TerraStealer Campaign Exposes Users to Widespread Data Exfiltration          *

CISA Warns of Critical Auth Bypass Flaws in KUNBUS Revolution Pi Devices          *

Black Kingdom Ransomware Operator Charged in U.S. for Hacking Microsoft Exchange Servers          *

Hackers Exploit Malicious PDFs to Deploy Remcos RAT on Windows Systems          *

Disk-Wiping Linux Malware Spread Through Malicious Go Modules in Supply Chain          *

Luna Moth Launches Callback Phishing Attacks on U.S. Legal and Financial Sectors          *

Corporate Insider Threat: North Korean IT Workers Embedded in Major Companies          *

New MintsLoader Campaign Delivers GhostWeaver Malware Through Phishing and ClickFix Exploits          *

Magento Supply Chain Attack Hits Hundreds of E-Commerce Stores          *

DragonForce Ransomware Hits Co-op, Customer Data Stolen          *

Ascension Reveals Data Breach Possibly Connected to Cleo Cyberattack          *

Cyberattack Disrupts Nova Scotia Power IT Systems          *

SonicWall Issues Urgent Patch for SMA1000 Series Due to SSRF Flaw          *

NVIDIA Patches Critical Vulnerability in TensorRT-LLM          *

Malicious Python Packages on PyPI Leverage Gmail SMTP for Unauthorized Access          *

LFI Vulnerability Detected in Multiple Windows Versions of Couchbase Server          *

Ukrainian Suspect Extradited to U.S. in Connection with Nefilim Ransomware Campaigns          *

Dutch Public Organizations Targeted by DDoS Attacks from Pro-Russia Hacktivists          *

Cyberattack Targets Harrods in Latest UK Retail Breach          *

Critical Use-After-Free Vulnerability (CVE-2025-47154) in Ladybird’s LibJS Engine Enables Arbitrary Code Execution          *

Commvault Admits Hackers Used CVE-2025-3928 Zero-Day in Azure Environment Breach          *

WordPress Sites Compromised by Fake Security Plugin in Global Attack          *

DarkWatchman and Sheriff Malware Secretly Attack Russia and Ukraine Using Advanced Hacking Methods          *

High-Severity RCE Vulnerability Found in Apache ActiveMQ NMS          *

SonicWall Appliances Face High Risk as Critical Vulnerability is Actively Exploited by Threat Actors          *

SonicWall Connect Tunnel Flaw Exposes Systems to DoS and File Corruption Attacks          *

Nitrogen Ransomware Deploys Cobalt Strike and Log Wipers in Targeted Organizational Attacks          *

Investment Scam Actors Employ Sophisticated DNS Tactics and RDGAs          *

Fake CAPTCHA Lures Used to Deploy Stealthy NodeJS RAT in Evolving KongTuke Campaign          *

TheWizards APT Leverages Spellbinder Tool for IPv6-Based Software Update Hijacking          *

Malicious WordPress Plugin Masquerading as Security Tool Installs Backdoor          *

IPv6 Vulnerability Enables Attackers to Hijack Software Updates          *

AiTM Phishing Campaigns Bypass MFA with Credential and Session Token Hijacking          *

Security Fixes Released by Mozilla for Firefox should be updated by Users          *

Privilege Escalation Vulnerability Discovered in Avast Antivirus          *

OrbitShade: Cyber Shadows in Space – The Rise of Satellite Sabotage          *

PowerDNS DNSdist Flaw Enables Remote Denial-of-Service Attacks          *

Tsunami Malware Wave Hits Harder with Stealthy Miners and Info-Stealers          *

Unpatched Windows LNK Flaw Allows Silent Remote Code Execution – Proof of Concept Available          *

Scattered Spider Suspected Behind Major Cyberattack on Marks & Spencer          *

PurpleHaze Cyber Espionage Targets SentinelOne and South Asian Government          *

Uyghur Activists Targeted by Windows Malware in Sophisticated Campaign          *

Zero-Day Exploits Rise in 2024, Over Half Tied to Spyware Attacks          *

Hitachi Vantara Targeted in Akira Ransomware Attack, Systems Taken Offline          *

Apple 'AirBorne' Vulnerabilities Enable Zero-Click Remote Code Execution via AirPlay          *

France Links Russian APT28 Hackers to 12 Cyberattacks on French Organizations          *

SK Telecom Offers Free SIM Replacements to 25 Million Customers After Cyberattack          *

Google Reports 75 Zero-Day Exploits in 2024, with 44 percent Targeting Enterprise Security Tools          *

Apache Tomcat Vulnerability Allows DoS Attacks by Skipping Security Validations          *

High-Severity Linux Kernel Vulnerability Enables Privilege Escalation          *

4800 IP Addresses Linked to Global Campaign Against Git Configurations          *

Cloudflare Defends Against Unprecedented Number of DDoS Attacks in 2025          *

Kali Linux Update Failure Imminent Due to Repository Signing Key Change: Users Must Manually Install New Key          *

RansomHub Deploys Malware to Compromise Business Networks          *

Threat Actors Exploit Valid Account Access Through Phishing Attack          *

CISA Alerts on Active Exploitation of Commvault Web Server Vulnerability          *

CISA Flags Critical Broadcom Brocade Fabric OS Vulnerability in Exploited Flaws Catalog          *

Earth Kurma APT Targets Southeast Asian Governments and Telecoms with Sophisticated Malware          *

Hackers Exploit Major Craft CMS Vulnerabilities, Potentially Compromising Hundreds of Servers          *

Over 1,200 SAP NetWeaver Servers at Risk Due to Actively Exploited Vulnerability          *

Phishing Campaign Impersonates WooCommerce Updates to Install Site Backdoors          *

Zero-Day Vulnerability in Viasat Modems Allows Remote Code Execution by Attackers          *

The Hidden Cyber Risks Behind Australia’s Election Spotlight          *

Critical FastCGI Library Flaw Puts Embedded Devices at Risk of Remote Code Execution          *

React Router Patch Urged as Spoofing and Data Injection Flaws Surface          *

CISA Issues Alert on Major Security Risks in Planet Technology Devices          *

Cybercriminals Market Advanced HiddenMiner Malware on Dark Web Forums          *

Leveraging Digital Forensics to Enhance Organizational Cybersecurity Resilience          *

Planet Technology Industrial Switch Vulnerabilities Expose Systems to Full Takeover          *

Weekly Cyber Intelligence Report Attacks and Vulnerability Highlights          *

Two Ransomware Attacks Expose Data of 1.1 Million Patients          *

Critical IXON VPN Flaws Allow Attackers to Compromise Windows and Linux Systems          *

Storm-1977 Exploits Education Cloud, Deploys 200+ Crypto Miners with AzureChecker          *

Massive Data Breach Hits 4chan, Exposing Internal Systems and User Information          *

Major API Security Lapse Exposes Confidential Employee Information          *

Lazarus Group Launches 'Operation SyncHole' Against South Korean Industries          *

Python h11 HTTP Library Vulnerable to Request Smuggling (CVE-2025-43859)          *

ToyMaker Uses LAGTOY to Help CACTUS Ransomware Gangs in Double Extortion          *

Fake WooCommerce Security Patches Hijack Admin Sites          *

Two Major Jailbreaks Reveal Widespread Security Flaws in Generative AI Systems          *

Warning to Gamers: New AgeoStealer Malware Targets Gaming Community          *

Threat Actors Launch Ransomware Attacks Against Organizations in Thailand          *

Microsoft Defender XDR False Positive Incident Exposes Over 1,700 Sensitive Documents          *

MTN Confirms Cyberattack Exposed Customer Data          *

Zero-Day Attack Leveraging Craft CMS RCE Vulnerability for Data Exfiltration          *

North Korean Actors Use Fake Crypto Firms to Spread Malware in Job Scams          *

Hackers Exploit OAuth 2.0 Flows to Hijack Microsoft 365 Accounts          *

MTN Reports Cyberattack That Exposed Customer Data          *

DslogdRAT Malware Exploits Ivanti ICS Zero-Day (CVE-2025-0282) in Japan-Based Attacks          *

Static Vulnerability Discovered in Ruby Servers, Posing Data Breach Risks          *

Hackers Target MS-SQL Servers to Deploy Malware and Gain Remote Access          *

Google Chrome Affected by Actively Exploited Use-After-Free Vulnerabilities          *

Yale New Haven Health Suffers Major Data Breach Impacting 5.5 Million Patients          *

New Android Malware Disguised as Mapping App Targets Russian Military          *

Frederick Health Confirms Cyberattack Impacting Over 930000 Patients          *

Lazarus Group Targets Six South Korean Companies Using CrossEX, Innorix Bugs and ThreatNeedle Malware          *

New Linux Rootkit Exploits io_uring to Bypass Syscall-Based Threat Detection          *

Critical SAP NetWeaver Zero-Day Exploited in the Wild to Deploy Webshells and C2 Frameworks          *

SVG Files Weaponized in Sophisticated Script in the Shadows Phishing Attacks          *

Stego-Campaign Exploits Office Flaw and Steganography to Deliver AsyncRAT Covertly          *

Hackers Leverage Ivanti Connect Secure 0-Day to Deliver DslogdRAT and Web Shell Payloads          *

Google Alerts of Rising Cyber Threats as Sophisticated Attackers Exploit Zero-Days and Target Cloud Systems          *

Redis DoS Vulnerability Can Lead to Server Crashes and Memory Exhaustion          *

North Korean Hackers Pull Off $137M TRON Heist in One-Day Phishing Scam          *

WhatsApp Boosts Privacy as Meta Faces EU Fine          *

Critical Unauthenticated RCE Vulnerability Discovered in Commvault Command Center (CVE-2025-34028)          *

Threat Actors Exploit TAG-124 Infrastructure to Distribute Malware          *

Iran Aligned Hackers Deploy MURKYTOUR Malware in Fake Job Scheme Targeting Israel          *

New SMS Phishing Scam Uses Google AMP Links to Bypass Security Filters          *

Critical Synology DSM NFS Vulnerability Allows Unauthorized File Access          *

Official Ripple XRPL NPM Package Compromised to Spread Private Key-Stealing Malware          *

Security Researchers Reveal Major Design Flaws in Crypto Wallet Extensions          *

Critical Vulnerability in FireEye EDR Enables Unauthorized Code Execution          *

Russian Hackers Exploit Microsoft OAuth to Target Ukraine Supporters Through Signal and WhatsApp          *

Security Flaws in Zyxel USG FLEX H Series Firewalls Expose Devices to Privilege Escalation Attacks          *

SK Telecom Cyberattack Exposes Sensitive USIM Data          *

Docker Malware Exploits Teneo Node for Crypto via Fake Heartbeats          *

IBM HMC Flaws Allow Local Privilege Escalation, Patches Released          *

Critical Active Mail Zero Day Exploited in Widespread Attacks Across Japan 2 2          *

Marks Spencer Confirms Cyberattack Amid Order Delays for Customers          *

Sophisticated Google Phishing Attack Exploits Infrastructure for Credential Theft          *

Microsoft Enhances Security with Azure Confidential VMs and New Resilience Measures          *

GCP Cloud Composer Vulnerability Allowed Privilege Escalation Through Malicious PyPI Packages          *

Conduent Cyberattack Exposes Personal Data, Impacts Government Services          *

Japan Raises Alert Over Hackers Draining Millions from Online Trading Accounts          *

Cracked and BreachForums Attempt Comebacks Amid Cybercrime Market Turmoil          *

FBI Warns of Impersonation Scam Involving Fake IC3 Officials          *

WinZip Vulnerability Allows Silent Execution of Malicious Code by Bypassing Mark-of-the-Web          *

Major Security Flaw in Windows Update Stack Allows Code Execution and Privilege Escalation          *

Cybercriminals Exploit Russian Host Proton66 for Malware Delivery          *

Critical Vulnerability in HPE Performance Cluster Manager Allows Unauthorized Access          *

Lotus Panda Deploys Stealth Malware Attacks on Southeast Asian Governments          *

SuperCard X Android Malware Facilitates Contactless ATM and PoS Fraud Using NFC Relay Attacks          *

Hackers Leverage Stolen Credentials and Private Keys for Organizational Breaches          *

New Obfuscation Technique Helps Hackers Bypass Antivirus and EDR          *

Hackers Advertise ‘Baldwin Killer’ Malware Designed to Bypass Antivirus and EDR Systems          *

Infostealer Attacks via Phishing Emails Surge Weekly          *

Cybercriminals Disguise FOG Ransomware as DOGE Cryptocurrency in Malicious Email Campaigns          *

Akira Ransomware Escalates Attacks Leveraging Stolen Credentials and Legitimate IT Tools          *

Critical Speedify VPN Vulnerability on macOS (CVE-2025-25364) Allows Root Command Injection and System Takeover          *

APT41’s RedGolf Infrastructure Briefly Exposed in Fortinet Zero-Day Attacks on Shiseido          *

Yokogawa Recorders at Risk from Critical Flaw in Default Security Settings          *

Critical Remote Code Execution Vulnerability in PyTorch (CVE-2025-32434)          *

Kimsuky APT Leveraging RDP Flaws and Office Exploits in Precision Cyber Operations          *

Cisco Webex Vulnerability Under Attack as ‘Voldemort’ Malware Spreads Globally          *

Phishers Exploit Google OAuth in DKIM Replay to Impersonate Official Google Emails          *

Threat Actors Exploit Zoom Remote Control Feature to Gain System Access          *

Phishers Exploit Google OAuth for DKIM Replay Attacks, Spoofing Google          *

APT29 Uses GRAPELOADER Malware in Wine-Tasting-Themed Attacks on European Diplomats          *

Ransomware Attack on Harvest SAS Goes Public with Data Leak          *

Nation-State Hackers Ramp Up Espionage Efforts Using ClickFix Exploit Technique          *

ASUS Urges Firmware Update as Critical AiCloud Router Vulnerability Confirmed          *

Malicious NPM Packages Imitate Telegram Bot API to Install SSH Backdoors on Linux Machines          *

Gorilla Android Malware Steals OTPs by Intercepting SMS          *

Malicious Android App Steals Credit Card Data via NFC Relay Attacks          *

DOGE Accused of Breaching U.S. Security and Leaking Sensitive Documents          *

KeyPlug Malware Infrastructure Leak Exposes Tools for Fortinet Firewall and VPN Exploitation          *

Microsoft Warns of Sophisticated Attacks Targeting Exchange and SharePoint Servers          *

GitHub Patches Critical Vulnerabilities in Enterprise Server, Urges Immediate Updates          *

Upgraded MysterySnail RAT Targets Russian and Mongolian Governments          *

Critical RCE Vulnerability Discovered in AnythingLLM          *

CISA Alerts on Ongoing Exploitation of Critical Windows NTLM Flaw          *

Interlock Ransomware Gang Distributes Fake IT Utilities in ClickFix Campaign          *

Cisco Webex Vulnerability Allows Remote Code Execution via Meeting URLs          *

Critical Auth Bypass Vulnerability Found in ASUS Routers with AiCloud          *

GoDaddy Registry Error Causes Global Disruption of Zoom Services          *

Over 6 Million Chrome Extensions Can Run Remote Commands on Users Browsers          *

Legends International Reports Security Breach – Customer Data Compromised          *

Hackers from CrazyHunter Group Exploit GitHub Resources to Breach Organizations          *

Advanced Phishing Attack Uses Layered Techniques to Spread Malware          *

Critical Flaw in GenAI Integration Protocol Exposes Systems to Attacks          *

Ghost Ransomware Campaign Hits Organizations in Over 70 Countries          *

CISA Urges Immediate Action on Exploited SonicWall Vulnerability          *

Google Cracks Down on AI-Powered Ad Scams, Suspends 700K Accounts          *

Advanced Malware Threat: Agent Tesla Delivered Using Script-Based Attack Vectors          *

Chinese APT Group Mustang Panda Utilizes Advanced Techniques to Bypass EDR          *

Unsecured API Endpoints Result in 33K Employee Record Breach          *

Data Breach Hits Landmark Admin, Over 1.6 Million Users Affected          *

Symlink Backdoor Found on Over 16,000 Compromised Fortinet Devices          *

Apple Confirms Active Exploitation of Two iOS Zero-Day Flaws in Complex Attacks          *

Windows Task Scheduler Bugs Let Attackers Evade UAC and Modify Logs          *

Firefox 137.0.2 Patches High-Severity Race Condition Vulnerability Leading to Memory Corruption          *

Gamma AI Platform Exploited in Sophisticated Phishing Campaign to Spoof Microsoft SharePoint Logins          *

New Server Side Phishing Scam Targets Employee Portals          *

Fake PDFCandy Converter Sites Distribute Info-Stealing Malware          *

Erlang or OTP SSH Server Hit by Severe RCE Vulnerability (CVE-2025-32433)          *

Hacktivists Turn Sophisticated, Deploy Ransomware Against Critical Infrastructure          *

Critical Windows 11 Vulnerability Enables Rapid Privilege Escalation          *

Turkish IT Firm Linked to ‘Araneida’ Web Hacking Service          *

Emerging Threats: Unconventional Malware Trends          *

Python Malware Masquerading as Coding Challenges Targets Crypto Developers          *

Rising Cloud Threats: Attackers Intensify Focus on IAM and Data Exfiltration          *

Major European Operation Targets Organized Crime Networks          *

Malicious PyPI Package Hijacks MEXC API to Steal Credentials and Manipulate Trades          *

Chinese APT UNC5174 Targets Linux and macOS with SNOWLIGHT Malware and VShell Tool in Stealthy Cyber Espionage Campaign          *

Landmark Admin Data Breach Exposes Information of 1.6 Million People          *

Russia-Linked Hackers Use New GrapeLoader Malware in Embassy Phishing Scam          *

Google Chrome Flaws Expose Users to Data Theft and System Compromise          *

AI Exploit Enables Creating Realistic Fake Passports with ChatGPT Image Generation          *

BPFDoor: The Hidden Malware Spying on Networks          *

Vulnerability in Apache Roller Allows Unauthorized Access          *

DOGE 'Big Balls' Ransomware Employs ZIP LNK Shortcuts and BYOVD for Stealth          *

Critical Flaws Found in Crush FTP Server          *

Cloud Misconfigurations: A Major Driver Behind Data Breaches          *

Microsoft Teams File Sharing Disruption Users Facing File Sharing Issues          *

Galaxy S24 Quick Share Vulnerability Allows Attackers to Create Arbitrary Files          *

WordPress Plugin with 100K+ Installs Targeted in Cyberattack 4 Hours Post-Disclosure          *

Educational Institutions Emerging as Prime Targets for Cyber Threats          *

NVIDIA Toolkit's Incomplete Fix for CVE-2024-0132 Still Enables Container Escape Attacks          *

Cybercriminals Exploit Microsoft Teams Chats to Spread Malware to Windows Systems          *

Threat Actor Claims to Sell Zero-Day Exploit Targeting Fortinet Firewalls          *

AI-Generated Package Hallucinations Pose Emerging Threat to Software Supply Chains          *

Morocco Probes Major Data Breach Allegedly Orchestrated by Algerian Hackers          *

European’s GDPR Article 7 Poses New Challenges for Businesses to Secure AI-Generated Image Data          *

SSL/TLS Certificates Set to Expire Every 47 Days by 2029          *

DaVita Hit by Weekend Ransomware Attack, Patient Care Continues Amid Investigation          *

Conduent Confirms Client Data Breach from January Cyberattack          *

Critical Ivanti VPN Flaws Exploited by Chinese APT Group          *

Hertz Confirms Data Breach Involving Sensitive Customer Information          *

Slow Pisces Hackers Target Developers with Python Malware and Coding Challenges          *

Cyber risks in aviation are increased by vulnerable software and aging technology          *

IBM Aspera Faspex Bug Lets Hackers Inject Harmful Code into Website Interface          *

ResolverRAT Malware Campaign Strikes Global Pharma and Healthcare Sectors          *

NASCAR Urged to Enhance Cybersecurity After Medusa Ransomware Strike          *

Windows Server 2025 Restart Issue Disrupts Active Directory Domain Controller Connectivity          *

Pakistan-Backed Threat Group Broadens Attacks in India Using CurlBack and Spark RATs          *

Severe Security Flaw in Langflow Allows Remote Takeover of Servers          *

Urgent Security Flaw in Yii 2 PHP Framework Affects Millions of Websites          *

CVE-2025-27840: ESP32 Exploit Threatens Bitcoin Wallet Security Worldwide          *

Gladinet’s CentreStack File sharing platform under zero-day Attack          *

Houthi-Linked Influence Campaign Targets Israel and Gulf States via Facebook Disinformation          *

Apache SeaTunnel Bug Allows Unauthenticated File Access & Code Execution          *

Ransomware and Hacktivist Threats Targeting Satellite and Space Industries          *

Smishing Triad eCrime Group Targets 121+ Countries with Advanced Smishing          *

FortiGuard Labs Warns of Malicious NPM Packages Targeting PayPal Users          *

Critical Heap Buffer Overflow Found in Perl – CVE-2024-56406          *

Jupyter Remote Desktop Proxy Vulnerability Allows Unauthorized Network Access to TigerVNC          *

Npm Malware Targets Atomic and Exodus Wallets to Hijack Crypto Transactions          *

TROX Stealer MaaS Campaign Exploits Urgency Themes to Exfiltrate Consumer Data          *

Widespread Smishing Scam Targets Toll Road Users Payment Information          *

Cyberattack Forces Shutdown of Oregon Environmental Agency's Network          *

Data Breach Confirmed by South African Telecom Provider Serving 7.7 million Subscribers          *

Chrome 136 Patches Two-Decade-Old Browser History Privacy Flaw          *

HelloKitty Ransomware Resurfaces, Now Targeting Windows, Linux, and ESXi Systems          *

Massive Data Breach Hits Morocco’s Social Security Systems          *

AI-Generated Code Dependencies Emerge as a New Supply Chain Threat          *

Cyber Attackers Replicate Google Chrome Install Page to Spread Android Malware on Fake Google Play Sites          *

Massive Health Data Breach Hits 1.6 Million at US Lab Testing Company          *

Cybercriminals Alter Search Results to Direct Users to Malicious Sites          *

Tycoon2FA Phishing Kit Unleashes New Tactics to Target Microsoft 365 Accounts          *

Zero-Day Exploits Used in Ongoing Attacks Targeting Semiconductor Companies          *

Western Sydney University Reports Cybersecurity Incident Involving Data Leak          *

Hackers Attack Business Networks Via Router Vulnerabilities          *

Palo Alto Networks Alerts on Brute-Force Attacks Aimed at PAN-OS GlobalProtect Portals          *

Fortinet Issues Urgent Warning Over Ongoing FortiGate Exploitation          *

Microsoft Warns: Do Not Delete 'inetpub' Folder Created by Windows Security Update          *

GOFFEE Launches Coordinated Attacks Using PowerModul on Government and Energy Systems          *

WordPress Sites at Risk Due to Critical InstaWP Connect Plugin Vulnerability          *

Ransomware Attack Disrupts Sensata Technologies' Operations          *

High-Severity Flaw in Popular WordPress Plugin OttoKit Under Active Exploitation          *

AkiraBot: AI-Powered Spam Framework Targets 400K+ Websites with Sophisticated SEO Scam          *

Gamaredon Breached a Western Military Mission in Ukraine          *

Trend Micro Uncovers Incomplete Fix for Critical NVIDIA Container Toolkit Flaw          *

TP-Link Smart Hub Security Flaw Leaks Wi-Fi Credentials          *

Pakistan-Linked SideCopy Group Escalates Cyber Campaign Against Indian Ministries          *

Jenkins Docker Vulnerability Exposes Network Traffic to Hacker Interception          *

Operation Endgame: Authorities Arrest SmokeLoader Botnet Users in International Crackdown          *

Licensing Glitch Disrupts Services for Microsoft 365 Family Subscribers          *

Cybercriminals Turn Messaging Apps into Money-Making Tools          *

Dell PowerScale OneFS Vulnerabilities Could Lead to User Account Hijacking          *

AkiraBot Targets 80,000 Websites Using CAPTCHA Bypass and Network Evasion Techniques          *

Shuckworm Group Utilizes GammaSteel Malware in PowerShell Attacks          *

ViperSoftX Malware Campaign Targets Korean Users with Advanced Distribution Tactics          *

Hackers Allegedly Breach WooCommerce, Exposing Data of 4.4 Million Customers          *

APT32 Leverages GitHub to Infect Chinese Cybersecurity Professionals with Backdoored Tools          *

Microsoft Exchange Admin Center Experiencing Worldwide Downtime          *

Oracle Confirms Hack of Legacy Servers, Dismisses Cloud Breach Claims          *

Critical USB Audio Driver Vulnerability Patched in Linux Kernel to Prevent Code Execution via Malicious USB Devices          *

CISA Issues Alert on Active Exploitation of CentreStack Hard-Coded Encryption Key Flaw          *

Hackers Exploit SSRF Vulnerabilities in EC2 to Steal AWS Credentials          *

Hackers Spied on Over 100 Bank Regulators' Emails for More Than a Year          *

Critical FortiSwitch Flaw Allows Remote Admin Password Changes          *

Windows Active Directory Flaw Allows Unauthorized Privilege Escalation          *

Windows Kerberos Flaw Facilitates Security Feature Bypass          *

Ransomware Groups Target Data with Double Extortion and Leak Threats          *

Fortinet Patches Critical Vulnerabilities in FortiAnalyzer, FortiManager, and Other Products          *

Over 26,000 Discussions on Dark Web Forums Targeting Financial Organizations          *

XSS Flaws in Zoom Workplace Apps Enable Malicious Script Injection          *

CLFS Zero-Day Vulnerability Exploited by Storm-2460 Ransomware Group          *

New Red Team Technique 'RemoteMonologue' Leverages DCOM to Harvest NTLM Authentication Remotely          *

Microsoft Patch Tuesday Security advisory- April 2025          *

Shopware Releases Patch for Critical SQL Injection Vulnerability          *

Security Breach at Oracle: Hackers Steal Client Login Information          *

CISA Warns of Ongoing Attacks Exploiting CrushFTP Auth Bypass Flaw          *

WhatsApp Vulnerability Allows Attackers to Execute Malicious Code Through Attachments          *

Hackers Abuse Windows .RDP Files to Establish Rogue Remote Desktop Connections          *

Threat Actors Using VPS Hosting to Distribute Malware and Bypass Detection          *

Threat Actors Exploit Toll Payment Services in Widespread Cyberattack          *

Kellogg Announces Data Breach Linked to Clop Ransomware Attack          *

Google Patches Android Zero-Days Exploited in Attacks, Alongside 60 Other Vulnerabilities          *

NEPTUNE RAT Targets Windows Systems, Harvests Credentials from Over 270 Applications          *

Cybercriminals Leverage Fake CAPTCHAs and Cloudflare Turnstile to Spread LegionLoader Malware          *

Sophisticated Phishing Campaign Uses Screensavers to Distribute Malware          *

New Sakura RAT Released on GitHub Capable of Bypassing Antivirus and EDR Defenses          *

PHP Vulnerability in Bitdefender GravityZone Console Allows Hackers to Execute Arbitrary Commands          *

China-Linked APT Strikes Ivanti Users in Fresh Wave of Espionage Attacks          *

PoC Released for Python JSON Logger Vulnerability Allowing Remote Code Execution          *

Critical Vulnerability in pgAdmin Enables Remote Code Execution          *

Dell PowerProtect Vulnerability Enables Remote Command Execution          *

Europcar GitLab breach exposes data of up to 200,000 customers          *

IngressNightmare: Critical RCE Flaws in Kubernetes NGINX Clusters Allow Full System Takeover by Attackers          *

State Bar of Texas Acknowledges Data Breach, Initiates Consumer Notifications          *

CISA Lists Actively Exploited Ivanti Connect Secure Flaw in Known Exploited Vulnerabilities Catalog          *

Ransomware Attack at Port of Seattle Exposes Data of 90,000 Individuals          *

Severe Security Vulnerability in Apache Parquet Library Exposes Systems to Remote Code Attacks          *

Hackers Targeting Juniper Smart Routers Using Default Passwords          *

AI-Driven Gray Bots Launch Relentless Web App Assaults at 17K+ Requests Hourly          *

Verizon iOS App Flaw Exposed Call Logs of Millions of Users          *

Hunters International Collaborates with Hive Ransomware to Target Windows, Linux, and ESXi Systems          *

Qilin Operators Mimic ScreenConnect Login Page to Deploy Ransomware & Gain Admin Access          *

Jenkins Plugin Vulnerabilities Expose Sensitive Data to Cyber Threats          *

Cyberattackers Exploit Apache Tomcat Flaw to Steal SSH Credentials and Compromise Servers          *

DarkCloud Stealer Exploits Weaponized .TAR Archives to Harvest Passwords from Targeted Organizations          *

Cisco AnyConnect VPN Flaw Lets Attackers Trigger Denial-of-Service (DoS) Attacks          *

SonicWall Firewall Vulnerability Allows Unauthorized Access          *

Hackers Exploit DeepSeek and Remote Desktop Apps to Deploy TookPS Malware          *

North Korean Cyberattack Campaign Targeting European Organizations to Breach Corporate Infrastructure          *

Privilege Escalation Vulnerability in Google Cloud Platform Grants Unauthorized Access to Sensitive Data          *

Royal Mail Probes Data Leak Claims, Confirms Operations Remain Unaffected          *

Global ChatGPT Outage Affects Thousands of Users – Latest Security Advisory Updates          *

Critical WordPress Vulnerabilities Expose 20,000 Sites to Takeover Risks          *

Cybercriminals Use Microsoft Teams for Malware Delivery in Phishing Campaign          *

New Outlaw Linux Malware Leverages SSH Brute-Forcing for Extended Botnet Management          *

Gootloader Malware Distributes Weaponized Documents Through Google Ads          *

Vulnerability in Plantronics Hub Enables Attackers to Escalate Privileges          *

KoiLoader Uses PowerShell Scripts to Deploy Malicious Payloads          *

Massive 400GB Twitter (X) Data Breach Exposes 2.8 Billion Records          *

Ransomware Poses a Risk to 93% of Industries—Building Resilience Is Essential          *

Sliver Framework Customization Enhances Evasion and Bypasses EDR Detection          *

APT34 Targets Finance and Telecom Sectors with Custom Malware          *

Critical XSS Vulnerability in Kentico Xperience CMS Leads to Remote Code Execution          *

Check Point Responds to Misinformation About Recent Data Leak          *

Vulnerability in Rockwell Automation Enables Attackers to Execute Arbitrary Commands          *

Hackers Exploit WordPress MU-Plugins to Conceal Malicious Code          *

Hackers Use SVG Files to Spread Phishing Malware and Avoid Detection          *

VMware Workstation Auto-Update Failure Caused by Broadcom URL Redirect          *

Lucid Phishing Service Exploits iOS & Android for Global Smishing Surge          *

Microsoft Leverages AI to Identify Vulnerabilities in GRUB2, U-Boot, and Barebox Bootloaders          *

Hacker Breach Exposes Samsung Customer Data          *

CISA Warns of RESURGE Malware Exploiting Critical Vulnerability in Ivanti Connect Secure Devices          *

Dell Unity Vulnerabilities Enable Attackers to Breach Systems          *

Canon Printer Flaw Exposes Devices to Arbitrary Code Execution Risk          *

Splunk Addresses Multiple Vulnerabilities with Latest Patches          *

Russia-Linked Gamaredon APT Deploys Remcos RAT in Ukraine Using Military Lures          *

Legacy Medical Devices: A Vulnerable Target for Ransomware Attacks          *

Lotus Blossom APT Abuses WMI for Stealthy Post-Exploitation          *

New Ubuntu Linux Vulnerabilities Enable Kernel Component Exploitation          *

UK ‘Unprepared’ for Cyberattacks Amid Rising State-Sponsored Threats, Public Infrastructure Vulnerable          *

TsarBot Android Trojan Targets 750 Banking and Finance Apps for Credential Theft          *

Hackers Leverage DNS MX Records to Spoof Logins for 100+ Brands          *

46 New Vulnerabilities in Solar Inverter Systems Allow Attackers to Manipulate Settings          *

RESURGE Malware Exploits Ivanti Vulnerability with Advanced Rootkit and Web Shell Capabilities          *

CVE-2025-2294 Exploits Vulnerability in Popular WordPress Plugin with Over 90,000 Active Installations          *

Oracle Health Data Breach Exposes Patient Information in US Hospitals          *

PlayBoy Locker Ransomware Targets Windows, NAS, and ESXi Systems          *

Cyberattack Disrupts Kuala Lumpur Airport, Hackers Demand $10M Ransom          *

Dozens of Vulnerabilities in Solar Inverters Could Be Exploited to Target Power Grids          *

Mozilla Issues Critical Patch for Windows Following Chrome Zero-Day Exploit          *

Cybercriminals Hijack 150,000 Websites to Push Chinese Gambling Sites          *

CoffeeLoader Malware Overcomes Endpoint Security to Deploy Rhadamanthys Shellcode          *

New macOS Malware ‘ReaderUpdate’ Evolves with Nim and Rust Variants          *

Blacklock Ransomware Infrastructure Compromised, Exposing Upcoming Attacks          *

Arkana Ransomware Group Claims Attack on US Telecom Companies          *

Mozilla Patches Critical Sandbox Escape Vulnerability in Firefox 136.0.4          *

Hijacked Microsoft Stream Domain Causes Spam Issues on SharePoint          *

Security Flaw in GitHub CodeQL Workflow Reveals Potential for Large-Scale Supply Chain Attack          *

Exim Use-After-Free Vulnerability Enables Privilege Escalation          *

CryptoLib Vulnerability: Heap Overflow Puts Space Communications at Risk          *

Severe CrushFTP Vulnerability Puts Servers at Risk of Unauthenticated Access          *

StreamElements Reveals Third-Party Data Breach Following Hacker Leak          *

YouTube Creators Targeted by Fake Brand Deals in ‘Clickflix’ Attack Scheme          *

Critical Vulnerabilities in Production Line Cameras Enable Attackers to Disable Recordings          *

Splunk RCE Vulnerability Enables Arbitrary Code Execution via File Upload          *

Google Chrome Zero-Day Vulnerability Under Active Exploitation          *

NetApp SnapCenter Vulnerability Enables Attackers to Gain Admin Privileges          *

UPI Service Outage Disrupts Financial Operations Across India          *

CISA Warns of ICS Vulnerabilities and Offers Essential Security Tips          *

New Malware Exploits Cross-Platform Framework to Evade Detection on Android          *

Apache VCL Vulnerable to SQL Injection (CVE-2024-53678) and XSS (CVE-2024-53679) Flaws          *

Multistage Info-Stealer Snake Keylogger Aims at Individuals and Businesses to Harvest Login Credentials          *

Banking Malware Targets 248,000 Mobile Users via Social Engineering Tactics          *

Hackers Leverage Windows MMC Zero-Day Flaw to Execute Malicious Code          *

VMware Tools for Windows Vulnerability Allows Attackers to Bypass Authentication          *

Huge Cyberattack Disrupts Ukrainian Railway's Online Services          *

Chrome and Edge Users Targeted by Rilide Malware Posing as Legitimate Browser Extension          *

ShibaCoin Ransomware Targets Developers Through Malicious VS Code Extensions          *

Specter Insight C2 Tool Enhances ClickFix-Driven Hacking Campaigns          *

Sophisticated Phishing Campaign Targets Pocket Card Users          *

Critical Ingress NGINX Vulnerabilities (CVE-2025-1974) Threaten Kubernetes Security          *

Hackers Deploying Fake Semrush Ads to Steal Google Account Credentials          *

New Phishing Attack Targets Gamers with Browser-in-the-Browser Technique          *

Next.js Flaw Allows Attackers to Bypass Middleware Auth Checks          *

Chrome Security Update Patches Critical Code Execution Vulnerability          *

Hackers Can Deliver Teams Malware Using Browser Cache Smuggling          *

Critical Remote Code Execution Vulnerability in vLLM via Mooncake (CVE-2025-29783) Patched          *

Chinese 'Web Shell Whisperer' Uses Shells and Tunnels for Stealthy Persistence          *

Critical WordPress Plugin Vulnerability Threatens Over 200,000 Sites with Potential Code Execution          *

Cybercriminals Leverage Gamma AI to Develop Advanced Microsoft-Themed Phishing Redirectors          *

Hacker Group Behind 90 Global Data Breaches Exposed, Four Members Identified          *

VanHelsingRaaS Targets Linux, BSD, ARM, and ESXi Systems          *

Revolutionary Browser-Based RDP Solution Redefines Secure Remote Access          *

Baidu Faces Data Breach, Compromising User Information          *

Apache Druid Vulnerability (CVE-2025-27888) Exposes Real-Time Analytics Systems to SSRF and XSS Threats          *

Steam Pulls Game Demo After Reports of Info-Stealing Malware on Windows          *

MacOS Vulnerability CVE-2024-54471: Critical Security Flaw Exposed and Patched          *

Kaspersky Links Head Mare to Twelve, Using Shared C2 Servers to Target Russian Entities          *

Albabat Ransomware Targets Windows, Linux, and macOS Through GitHub Exploitation          *

Cybercriminals Target Meta Users with Phishing Emails to Steal Ad Account Credentials          *

JumpServer Vulnerabilities Enable Attackers to Bypass Authentication and Seize Full Contro          *

Oracle Denies Data Breach After Hacker Says 6 Million Records Stolen          *

FBI Warning: Fake File Converters Are Spreading Malware          *

Coinbase Identified as Primary Target in Recent GitHub Actions Supply Chain Attack          *

Cloudflare Enforces Encryption, Blocking All Unsecured API Traffic          *

Microsoft Trust Signing Service Exploited to Code-Sign Malware          *

Researchers Discover FIN7’s Stealthy Python-Based Anubis Backdoor          *

UAT-5918 Threat Group Targets Taiwan's Critical Infrastructure with Web Shells and Open-Source Tools          *

Attackers Exploit CAPTCHAs to Trigger PowerShell and Deliver Malware          *

I-SOON’s ‘Chinese Fishmonger’ APT Targets Governments and NGOs          *

VanHelsing Ransomware Hits Windows with New Evasion Tactics          *

Infosys to Settle 2023 Data Breach for $17.5 Million          *

Pennsylvania Teachers Union Data Breach Exposes 500,000 Individuals          *

AI-Powered Phishing the Growing Threat to Browser Security          *

VSCode Extensions Discovered Distributing Early-Stage Ransomware          *

IBM AIX Vulnerability Allows Attackers to Execute Arbitrary Commands          *

Swiss Telecom Firm Ascom Confirms Cyberattack by HellCat Group          *

Dell SmartFabric OS10 Software Patches Multiple Security Vulnerabilities          *

CISA Warns U.S. Federal Agencies of Active Exploitation of NAKIVO Backup Vulnerability          *

Veeam Backup & Replication Vulnerability Allows Critical RCE          *

Signal Messenger Exploited in Targeted Attacks on Defense Sector Employees          *

Scareware-Phishing Campaign Targets macOS Users          *

Critical AMI BMC Vulnerability (CVE-2024-54085) Allows Remote Authentication Bypass          *

DollyWay Malware Campaign Compromises 20,000 WordPress Sites          *

Orion Security Secures $6M Funding to Combat Insider Threats with AI-Powered DLP          *

Cyber Threats Surge During March Madness as Scammers Exploit Fan Frenzy          *

Zero-Day Windows Vulnerability Under Active Exploitation by 11 State-Sponsored Groups Since 2017          *

VPN Vulnerabilities Become a Key Weapon for Cybercriminals Exploiting Organizations          *

ClearFake Infected 9,300 Sites with Impersonated reCAPTCHA and Turnstile to Distribute Malware          *

Critical PHP Vulnerability (CVE-2024-4577) Exposes Systems to Cryptocurrency Miners and RATs          *

Cybercriminals Steal 3.2 Billion Login Credentials and Compromise 23 Million Devices Globally          *

Critical Bug in AMI MegaRAC Allows Attackers to Hijack and Brick Servers          *

Exploitation of ChatGPT Vulnerability Targets US Government Organizations          *

Western Alliance Bank Alerts 21,899 Customers About Data Breach          *

Severe mySCADA myPRO Vulnerabilities Could Allow Attackers to Hijack Industrial Control Systems          *

Microsoft March Updates Unintentionally Remove Copilot          *

New 'Rules File Backdoor' Attack Allows Hackers to Inject Malicious Code Through AI Code Editors          *

New ClearFake Variant Uses Fake reCAPTCHA to Run Malicious PowerShell Code          *

Scammers Use Fake Coinbase Migration Messages to Steal Wallet Credentials          *

Ransomware Group Develops Tool to Automate VPN Brute-Force Attacks          *

Jaguar Land Rover Breached by HELLCAT Ransomware Using Stolen Jira Credentials          *

Millions of RSA Keys Expose Serious Vulnerabilities to Exploitation          *

Researchers Demonstrate Remote Hacking of Commercial Trucks & Buses          *

GitHub Action Breach Exposes CI-CD Secrets in 23,000+ Repositories          *

Apache Tomcat Vulnerability Exploited Within 30 Hours of Public Disclosure          *

Hospitality and Recreation Sectors See Rise in Cyberattacks, Warns ReliaQuest          *

Critical TP-Link Router Vulnerability Allows Hackers to Achieve Full System Takeover          *

AWS SNS Exploited by Cybercriminals for Data Exfiltration and Phishing Attacks          *

Fake 'Security Alert' on GitHub Exploits OAuth App to Hijack Accounts          *

Hackers Using CSS to Bypass Spam Filters and Monitor User Activity          *

Adobe Acrobat Reader Vulnerabilities Allow Attackers to Execute Arbitrary Code          *

Grafana Vulnerabilities Exploited in Widespread SSRF Attack Campaign          *

Critical Vulnerabilities in Bitdefender BOX v1 Expose Smart Homes to CyberAttacks          *

RedCurl APT Exploits Active Directory Explorer and 7-Zip for Data Exfiltration          *

Over 100 Auto Dealers Hacked via ClickFix Webpage, Leading to SectopRAT Malware Installation          *

Critical Memory Corruption Vulnerabilities Discovered in Delphi, Undermining Its Safety Claims          *

Critical ruby-saml Flaws Allow Attackers to Bypass Authentication          *

DeepSeek R1 Manipulated to Generate Malware, Including Keyloggers and Ransomware          *

Hackers Leverage Exposed Jupyter Notebooks to Launch Cryptominers          *

Hackers Apparently Selling 3.17 Million Honda Cars India Customer Records          *

PHP XXE Injection Vulnerability Exposes Config Files & Private Keys          *

Undetected Anubis Malware Allows Hackers to Execute Remote Commands          *

Hackers Exploit Microsoft Copilot in Advanced Phishing Scheme          *

Phishing Attacks Target Microsoft 365 Users Using OAuth Vulnerabilities          *

CISA Alerts About Apple WebKit Out-of-Bounds Write Vulnerability Being Actively Exploited          *

Apache NiFi Vulnerability Leaks MongoDB Credentials to Unauthorized Users          *

Cybercriminals Leveraging JSPSpy to Orchestrate Malicious Webshell Networks          *

Siemens SINAMICS S200 Bootloader Vulnerability Allows Attackers to Compromise Devices          *

GitLab Discovers Security Vulnerabilities Allowing Attacker Logins as Valid Users          *

Misconfigured AWS S3 Bucket Exposes Over 86,000 Healthcare Worker Records          *

Medusa Ransomware Strikes Over 300 Global Organizations, Targeting Critical Sectors          *

Cisco Reveals Critical Privilege Escalation Vulnerability in IOS XR Software          *

Fortinet Addresses Critical Vulnerabilities Across Multiple Products          *

Hackers Employ Advanced MFA-Bypassing Techniques to Compromise User Accounts          *

Massive Cyber Attack: Over 400 IPs Exploit Multiple SSRF Vulnerabilities in Coordinated Effort          *

Facebook Reveals Exploited FreeType 2 Vulnerability in Recent Attacks          *

Users Targeted by DCRat Malware Through YouTube to Steal Login Credentials          *

Chinese Hackers Compromise Juniper Networks Routers Using Custom Backdoors and Rootkits          *

NVIDIA Riva Security Flaws Allow Privilege Escalation          *

CISA Warns of Critical Windows NTFS Vulnerability (CVE-2025-24991)          *

MirrorFace APT Leverages Custom Malware to Target Windows Sandbox and Visual Studio Code          *

AI-Generated Fake GitHub Repositories Used to Steal Login Credentials          *

Apache Pinot Vulnerability Allows Attackers to Bypass Authentication          *

Critical FreeType Vulnerability Puts Millions of Devices at Risk          *

MassJacker Malware Uses 778,000 Wallets to Steal Cryptocurrency          *

North Korean Lazarus Group Hacks Hundreds Using NPM Packages          *

Zoom Patches Multiple High-Severity Vulnerabilities in Workplace Apps and SDKs          *

New Botnet 'Eleven11bot' Compromises 30,000 Webcams          *

Microsoft Patch Tuesday Security advisory- March 2025          *

Blind Eagle Hackers Utilizing Google Drive, Dropbox, and GitHub to Evade Security          *

Threat Actors Bypass Security Defenses to Execute SIM Swap Attacks          *

Severe Android Vulnerability CVE-2024-31317 Poses Risk of Privilege Escalation          *

Critical Apache Tomcat Vulnerability CVE-2025-24813 Exposes Servers to Remote Code Execution          *

Researcher Exploits Embedded Devices to Reveal Firmware Secrets          *

Microsoft Time Travel Debugging (TTD) Vulnerability Exposes Security Risks          *

North Korean Hackers Use Weaponized ZIP Files to Deploy Malicious PowerShell Script          *

CISA Adds Two VeraCore Vulnerabilities to Actively Exploited Vulnerability Catalog          *

CISA Warns of Actively Exploited Ivanti Endpoint Manager Vulnerabilities          *

Threat Actors Leverage EncryptHub for Multi-Stage Malware Attacks          *

Dark Storm Claims Responsibility as X Faces Massive Cyberattack          *

Hackers Exploit Misconfigured Cloud Settings to Host Malware          *

New 'Desert Dexter' Malware Compromises Over 900 Victims Worldwide          *

7 Malicious Go Packages Targeting Linux & macOS to Install Stealthy Malware Loaders          *

PrintSteal Cybercriminal Network Producing and Distributing Fake Aadhaar & PAN Cards at Large Scale          *

Critical Laravel Vulnerability Exposes Web Apps to XSS Exploits          *

Ransomware Attack on Retirement Services Firm Exposes Data of Thousands in US Schools          *

Severe Authorization Flaw Found in Moxa PT Series Switches          *

Hackers Register 10K Domains for Smishing Attack through iMessage          *

Hackers Exploit x86-64 Binaries on Apple Silicon to Distribute macOS Malware          *

Critical DrayTek Router Vulnerabilities Enable Remote Code Execution Attacks          *

Researchers Uncover Critical ESP32 Vulnerability Affecting Over a Billion IoT Devices          *

NTT Data Breach Exposes Sensitive Information of 18,000 Companies          *

Akira Ransomware Exploits Webcam to Evade EDR and Attack Windows Servers          *

Strela Stealer Malware Attacks Microsoft Outlook to Steal Credentials          *

LibreOffice Vulnerability Allows Attackers to Execute Arbitrary Scripts via Macro URL          *

Phantom Goblin Employs Social Engineering Tactics to Distribute Stealer Malware          *

Misconfigured Apache Airflow Servers Expose Login Credentials to Hackers          *

Threat Actors Impersonate Electronic Frontier Foundation to Target Gaming Community          *

Critical IDOR Vulnerability in ZITADEL's Admin Interface Puts Organizations at Risk          *

Critical Kibana Vulnerability Allows Attackers to Execute Arbitrary Code          *

Critical Sitecore 0-Day Vulnerability Enables Remote Code Execution          *

Cisco Secure Client for Windows Vulnerability (CVE-2025-20206) Allows SYSTEM Privilege Code Execution          *

BadBox Malware Targets Over 50,000 Android Devices Through 24 Google Play Apps          *

Cybercriminals Leverage Hacked Email Servers for Fraudulent Operations          *

Critical Vulnerability in Chaty Pro Plugin (CVE-2025-26776) Puts Thousands of WordPress Sites at Risk          *

Critical Code Execution Vulnerability (CVE-2025-25012) Patched in Elastic Kibana          *

Sophisticated Malware Campaign Targets Go Ecosystem Through Typosquatted Packages          *

Cybercriminals Target YouTubers to Distribute SilentCryptoMiner on Windows          *

Security Vulnerability in Cisco Webex for BroadWorks Exposes User Credentials to Potential Attacks          *

Over 41,500 VMware ESXi Instances Exposed to Critical Code Execution Vulnerability          *

US Charges Chinese Hackers for Breaching Critical Infrastructure          *

Android Devices Infected with Malware Drive Global Botnet Fraud          *

Stealthy LummaStealer Malware Spreads via Fake CAPTCHA          *

Vim Users Alerted: Malicious TAR Files May Lead to Code Execution (CVE-2025-27423)          *

Zoho Fixes Critical Account Takeover Vulnerability in ADSelfService Plus          *

PoC Exploit Released for CVE-2024-53676, Raising RCE Concerns          *

Tactics Used in Microsoft Teams to Connect Black Basta and Cactus Ransomware Malware          *

US CEOs Targeted in Postal Mail Scam with Fake BianLian Ransom Notes          *

Windows KDC Proxy RCE Vulnerability Enables Remote Server Compromise          *

CISA Alerts on Ongoing Exploitation of Microsoft Windows Win32k Vulnerability          *

Google Issues Urgent Warning About Critical Android Vulnerabilities Being Exploited          *

Cybercriminals Exploit PowerShell and Trusted Microsoft Apps to Spread Malware          *

Threat Actors Exploit Microsoft Teams and Quick Assist for Unauthorized Access          *

Hackers Exploit Google Ads and PayPal Links to Steal Users' Personal Data          *

North Korean IT Workers Conceal Their IP Addresses with Astrill VPN          *

Space Pirates Hackers Target IT Organizations With LuckyStrike Malware via OneDrive          *

Vulnerability in Substack Custom Domains Exposes Thousands to Potential Hijacking          *

Almost 12,000 API Keys and Passwords Exposed in AI Training Dataset          *

Critical XXE Vulnerability Discovered in HPE Insight Remote Support: CVE-2024-53675          *

Critical Vulnerability Discovered in ToDesktop Electron App Bundler          *

Android Phones Unlocked Using Cellebrite's Linux USB Zero-Day Exploit          *

Microsoft Identifies Hackers Exploiting Azure OpenAI Service for Malicious Content          *

Critical Vulnerability in Nakivo Backup & Replication Puts Sensitive Data at Risk          *

Ransomware Groups Leverage Paragon Partition Manager Vulnerability in BYOVD Attacks          *

ModSecurity Security Flaw Puts Web Applications at Risk          *

PingAM Java Agent Vulnerability Enables Security Bypass by Attackers          *

Hackers Can Take Over Car Cameras in Minutes by Exploiting Security Flaws          *

Angel One Data Breach Personal Information of 8 million Users Compromised          *

Hackers Exploit Pass-the-Cookie Attacks to Evade MFA and Hijack Accounts          *

Chinese Hackers Attack Belgium State Security Service          *

Chinese Hackers Exploit Check Point VPN Zero-Day in Global Cyber Attacks          *

Cybercriminals Exploit Unpatched Vulnerabilities Amid EDR Blind Spots          *

Wallbleed Exposes Memory Flaw in China’s Great Firewall DNS System          *

Lynx Ransomware Targets Global Organizations with Advanced Attack Techniques          *

VS Code Extension with 9 Million Installs Infects Developers with Malicious Code          *

DragonForce Targets Critical Infrastructure to Steal Data and Disrupt Operations          *

XSS Vulnerability in Krpano Framework Exploited to Inject Malicious Scripts on Hundreds of Websites          *

Squidoor: Advanced Malware Leveraging Outlook API, DNS, and ICMP Tunneling for Command-and-Control Communication          *

Lotus Blossom Hacker Group Uses Dropbox, Twitter, and Zimbra for C2 Communication          *

Massive Phishing Campaign Uses 5,000 Malicious PDFs Across 260 Domains to Steal Credit Card Data          *

1.5 Billion iPhones At Risk From nRootTag Attack          *

New Phishing Attacks Hit Yodobashi Camera Users, Credentials at Risk          *

Orange Communication Breach – Hackers Allegedly Leak 380,000 Emails          *

Genea IVF Provider Hit by Cyberattack, Sensitive Patient Data Exposed          *

Atomic macOS Info-Stealing Malware Targets 50 Cryptocurrency Wallets          *

Critical Cisco Nexus Switch Vulnerability Enables DoS Attacks          *

LibreOffice Vulnerabilities Enable Attackers to Execute Malicious Files on Windows          *

Security Flaws in GitLab Allow Attackers to Bypass Protections and Run Arbitrary Scripts          *

Critical Flaw Leaves 2,850+ Ivanti Connect Secure Devices Exposed to Attacks          *

Stealthy Batch Script Leveraging PowerShell and VBScript to Deploy XWorm          *

Have I Been Pwned (HIBP) Reports One of the Largest Data Breaches Linked to ALIEN TXTBASE          *

Chinese Botnet with 130,000 Devices Targets Microsoft 365 Accounts          *

Ghostwriter APT Targets Government Entities with Weaponized Excel Malware          *

Hackers Exploit Cisco Small Business Router RCE Flaw to Deploy Webshells          *

Sliver C2 Server Flaw Allows Attackers to Establish TCP Connections and Intercept Traffic          *

GRUB2 Vulnerability CVE-2025-0690 Poses Secure Boot Bypass Risk          *

CISA Flags Actively Exploited Vulnerabilities in Zimbra (CVE-2023-34192) and Microsoft (CVE-2024-49035)          *

Google Alerts Higher Education Institutions About Surge in Phishing Campaigns          *

Hackers Launch Devastating Cyber Attack on Critical Infrastructure          *

GitVenom Attack Exploits Thousands of GitHub Repositories to Spread Malware          *

KernelSnitch: Exposing a New Side-Channel Vulnerability in Kernel Data Structures          *

Hackers Trick Outlook Spam Filters to Spread Malicious ISO Files          *

Critical RCE Vulnerability Found in MITRE Caldera – Proof of Concept Released          *

CISA Issues Alert: Oracle Agile Vulnerability Being Actively Exploited          *

Moxa PT Switches Exposed to Denial-of-Service Attack via CVE-2024-9404          *

Libxml2 Vulnerabilities (CVE-2024-56171 & CVE-2025-24928) Could Allow Code Execution          *

GhostSocks Malware Uses SOCKS5 for Detection Evasion          *

Chinese Hackers Leverage FatalRAT to Target Industrial Organizations          *

Stablecoin Hit by Major Hack, $49.5M Stolen, Triggering Market Volatility          *

Hackers Leverage Confluence Server Vulnerability to Deploy LockBit Ransomware          *

Phishing Scam Targeting ChatGPT Premium Users Aims to Steal Login          *

Exim Mail Transfer Vulnerability Allows Attackers to Inject Malicious SQL          *

Parallels Desktop Zero-Day Vulnerability Exposes macOS to Root Privilege Escalation          *

Critical Command Injection Vulnerability Discovered in F5 BIG-IP TMSH          *

Bybit Suffers Largest Cryptocurrency Theft in History, Losing $1.46 Billion in Ethereum          *

Cybercriminals Exploit CS2 Tournaments to Hijack Steam Accounts and Cryptocurrency          *

Nagios XI Vulnerability Allows Unauthenticated Access to User Data and Emails          *

Sitevision Auto-Generated Password Flaw Exposes SAML Signing Key          *

Fluent Bit Security Flaw Leaves Cloud Services Vulnerable to Cyber Threats          *

MongoDB Library Vulnerabilities Enable Remote Code Execution on Node.js Servers          *

NSA Allegedly Breached Chinese University in Cyber Espionage Campaign          *

CISA Issues Alert on Ongoing Attacks Exploiting Craft CMS Vulnerability          *

CL0P Ransomware Targets Telecom and Healthcare Sectors in Massive Attacks          *

Pegasus Spyware Expands Scope, Infiltrating Corporate and Financial Sectors          *

Cybercriminals Exploit Eclipse Jarsigner to Deploy XLoader Malware via ZIP Archives          *

China Hackers Exploit Check Point Flaw to Deploy ShadowPad and Ransomware          *

North Korean Hackers Exploit Job Scams to Infect Freelance Developers with Malware          *

Internal Chat Logs of Black Basta Ransomware Gang Leaked Online          *

Venture Capital Firm Insight Partners Targeted in CyberAttack          *

Salt Typhoon Hackers Exploit Cisco Vulnerability to Access Devices on U.S. Telecom Networks          *

Cyber Threat Actors Using Exploits to Target Financial Sector with Sophisticated Malware          *

Critical Vulnerability in Popular WordPress Plugin Exposes 90,000 Sites to Attacks          *

Microsoft Patches Critical Privilege Escalation Vulnerability in Disk Cleanup Utility          *

Russian Phishing Campaigns Take Advantage of Signal's Device-Linking Feature          *

A Critical Microsoft Bing Vulnerability Allowed Remote Code Execution Attacks          *

Australian Fertility Giant Genea Hit by Cybersecurity Breach          *

FrigidStealer Infostealer Infects Macs Through Fake Browser Update Prompts          *

Phishing Attack Conceals JavaScript with Invisible Unicode Trick          *

Hundreds of US Military and Defense Credentials Leaked          *

Global Cyberattack: Ghost Ransomware Targets Organizations in 70 Countries, Warns CISA and FBI          *

Palo Alto Networks Identifies New Firewall Vulnerability Exploited in Attacks          *

Cybercriminals Exploit Apple & Google Wallets with Stolen Cards          *

Russian-Aligned Threat Groups Exploit Signal Messenger to Steal Sensitive Data          *

Citrix Issues Security Patch for NetScaler Console Privilege Escalation Flaw          *

Cracked Garry's Mod and BeamNG.drive Games Distribute Mining Malware to Gamers          *

New Evolving Snake Keylogger Variant Targets Windows Users          *

New OpenSSH Vulnerabilities Expose Systems to Man-in-the-Middle and DoS Attacks          *

Mustang Panda Uses MAVInject.exe to Evade Detection, ESET Disputes Findings          *

CISA Releases Two New ICS Advisories on Exploited Vulnerabilities and Patches          *

Chrome Buffer Overflow Vulnerabilities Allow Hackers to Execute Code & Gain System Access          *

Critical OpenSSH Vulnerabilities Expose Systems to Potential Attacks          *

Cybercriminals Trojanize Popular Games to Bypass Security and Compromise Systems          *

LibreOffice Vulnerabilities Allow Attackers to Modify Files and Access Sensitive Information          *

Zacks Investment Data Breach Leaks 12 Million Emails and Phone Numbers          *

Pro-Russian Hacker Group NoName057(16) Targets Italian Banks and Airports          *

Palo Alto Networks and SonicWall Firewalls Under Active Exploitation—Urgent Patching Advised          *

ChatGPT Prompt Injection Vulnerability Exposes Private Data          *

Earth Preta APT Exploits Microsoft Utility Tool to Evade AV Detection and Control Windows          *

RansomHub Now Threatens Windows, ESXi, Linux, and FreeBSD Systems          *

Malware on WordPress Sites Enables Remote Code Execution          *

Critical Vulnerabilities in Xerox Printers Enable Capture of LDAP & SMB Authentication Data          *

Indian Post Office Portal Exposed Thousands of KYC Records, Including Usernames and Mobile Numbers          *

New XCSSET Malware Infects Xcode Projects to Target macOS Users          *

ExHub IDOR Vulnerability Allows Attackers to Modify Web Hosting Configuration          *

New Microsoft Windows GUI 0-Day Vulnerability Under Active Attack          *

FinalDraft Malware Exploits Outlook Mail Service for Stealthy Communication          *

Hackers Leverage Microsoft Teams Invites for Unauthorized Access          *

Rapid7 Identifies New PostgreSQL Zero-Day Linked to BeyondTrust Attacks          *

Valve Removes PirateFi from Steam After Malware Discovery          *

Hackers Exploit Device Code Phishing to Steal Microsoft Emails          *

Google Chrome Deploys AI to Prevent Malicious Websites and Downloads          *

Lazarus Group Targets Global Developers with New Malware Strategy          *

Database Vulnerability on Elon Musk’s DOGE Website Allowed Unauthorized Entries          *

New Go-Based Malware Hijacks Telegram as a Covert Command-and-Control Channel          *

Chinese Hackers Exploit Unpatched Cisco Routers to Breach Multiple US Telecom Networks          *

Security Flaw in NVIDIA Container Toolkit Enables Code Execution Attacks          *

Sophisticated Phishing Attack Exploits Webflow CDN & CAPTCHAs to Steal Credit Card Data          *

New Malware Targets Japanese Organizations in Winnti Cyberattack          *

New Malware Exploits Microsoft Graph API for Outlook-Based Communication          *

RedNote App Security Flaw Leaks User Files on iOS and Android Devices          *

Security Flaw in CleanTalk Plugin Threatens 30,000 WordPress Sites – Immediate Update Required          *

Astaroth 2FA Phishing Kit Targets Gmail, Yahoo, Office 365, and Other Third-Party Logins          *

SQL Injection Vulnerability in Apache Fineract Enables Malicious Data Injection          *

WhoAMI Exploit Grants Hackers Remote Code Execution on Amazon EC2 Instances          *

Cybercriminals Exploiting ThinkPHP and OwnCloud Vulnerabilities on a Large Scale          *

Threat Actors Leverage DeepSeek’s Popularity to Distribute Malware          *

Critical Ivanti ICS Vulnerability Actively Exploited by SPAWNCHIMERA Malware          *

Exploitation of ZeroLogon Ransomware in Active Directory to Access Domain Controllers          *

WinZip Vulnerability Enables Remote Code Execution by Attackers          *

AMD Ryzen Vulnerability Allows Code Execution via DLL Hijacking          *

North Korean Threat Actor ‘Kimsuky’ Adopts ClickFix-Inspired Tactics for Cyber Espionage          *

Microsoft Alerts: Russian Seashell Blizzard Hackers Breach Critical Infrastructure          *

Palo Alto PAN-OS Zero-Day Vulnerability Lets Attackers Bypass Web Interface Authentication          *

Massive IoT Data Breach Leaks 2.7 Billion Records, Including Wi-Fi Passwords          *

APT43 Hackers Targeting Universities Through Exposed Credentials          *

Microsoft Identifies Sandworm Subgroup’s Global Cyber Attacks          *

Google Patches Major YouTube Privacy Flaw That Exposed User Emails          *

New Chinese Cyber Attack on Manufacturing Sector Aims to Steal Intellectual Property          *

Google Issues Urgent Chrome Update to Patch Critical Security Flaw          *

Amazon Machine Image Flaw Lets Hackers Publish Fake Resources          *

Critical Vulnerability in CrowdStrike Falcon Sensor for Linux Allows TLS MiTM Exploits          *

Critical OpenSSL Flaw Enables Attackers to Perform Man-in-the-Middle Attacks          *

Critical SonicWall Firewall Flaw Enables VPN Session Hijacking          *

Zero-Day Exploit in Fortinet FortiOS & FortiProxy Enables Firewall Hijacking and Super Admin Access          *

Intel Addresses 374 Security Vulnerabilities in 2024          *

Microsoft Patch Tuesday Security advisory- February 2025          *

Apple iOS Zero-Day Vulnerability Actively Exploited in Highly Sophisticated Attacks          *

Exploited RCE Vulnerability Exposes Over 12,000 KerioControl Firewalls          *

Cisco Data Breach – Ransomware Group Claims to Have Compromised Internal Network          *

Georgia Hospital Notifies 120,000 Individuals of Data Breach          *

New Report on 1M+ Malware Samples Exposes Application Layer Abuse for Stealthy C2          *

International Law Enforcement Seizes 8Base Ransomware Data Leak Sites in Major Operation          *

Lee Newspapers Hit by Cyberattack, Disrupting Operations Nationwide          *

Apple Patches Actively Exploited iOS Zero-Day CVE-2025-24200 in Emergency Update          *

Marvel Game Security Flaw Exposes PCs and PS5s to Remote Takeover Risks          *

Critical Zimbra Vulnerabilities Allow Attackers to Access Internal Resources Without Authorization          *

Autonomous LLMs in Pen Testing: AD Breaches & Cybersecurity Future          *

Cybercriminals Exploit IIS Servers to Spread BadIIS Malware: A Rising Cyber Threat          *

Zero-Day Vulnerability Found in Microsoft Sysinternals Tools Exposes Windows Systems to Security Risks          *

Amazon Enhances Redshift Security with New Features to Prevent Data Leaks          *

UK Reportedly Pressures Apple to Provide Backdoor Access to Encrypted iCloud Data          *

Kimsuky APT Group Utilizes Custom RDP Wrapper and ForceCopy Stealer          *

Global Brute Force Attack Targets Critical Networking Devices Across Multiple Countries          *

F5 Alerts Users to Critical TLS Session Resumption Flaw in NGINX – CVE-2025-23419          *

Critical Security Flaw Exposes Vitest to Remote Code Execution Attacks          *

IBM Cloud Pak Vulnerabilities Expose Sensitive Data to Cyber Threats          *

Apache James Mail Server Faces Dual Denial-of-Service Vulnerabilities          *

Critical Security Vulnerabilities Found in IBM Security Verify Directory          *

Hackers Exploit SimpleHelp RMM Vulnerabilities for Persistence and Ransomware          *

XE Hacker Group Exploits Veracode 0-Day to Deploy Malware and Steal Credit Card Data          *

Trimble Cityworks Hit by Active Exploits Targeting Critical CVE-2025-0994 Vulnerability          *

Critical Security Flaw Discovered in Logsign Unified SecOps Platform          *

Dell Issues Security Advisory for Update Manager Plugin Vulnerability          *

OpenAI Data Breach Allegedly Involves 20 Million Login Credentials for Sale          *

Hackers Exploit SVG Files in Phishing Attacks Targeting Gmail, Outlook, and Dropbox Users          *

Critical Vulnerabilities in HPE Aruba ClearPass Enable Arbitrary Code Execution          *

Splunk Launches DECEIVE, an AI-Powered Honeypot for Tracking Cyber Threats          *

Critical Cisco ISE Vulnerability Allows Attackers to Execute Commands as Root          *

50,000 Users Impacted by Mobile Malware Targeting Indian Banks          *

Malicious Android and iOS Apps with 242,000+ Downloads Target Crypto Recovery Keys          *

BADBOX Botnet Infected 190,000+ Android Devices, Including LED TVs and Smartphones          *

New DeepSeek Jailbreak Method Exposes Full System Prompt          *

Microsoft Releases Script to Update Windows Media with Bootkit Malware Fixes          *

AnyDesk Vulnerability Grants Admin Access via Malicious Windows Wallpapers          *

New SSH Backdoor Targets Linux Devices in Chinese Hacker Attack          *

Critical Veeam Backup Flaw Enables Remote Code Execution with Root Privileges          *

Hackers Exploit ADFS to Bypass MFA and Breach Critical Systems          *

Critical Netgear Flaws Expose Devices to Remote Code Execution          *

AMD Fixes Critical CPU Flaw Threatening Confidential Computing Security          *

CISA Issues New Guidelines for Securing Firewalls, Routers, and Internet-Exposed Servers          *

Hackers Target Six-Year-Old IIS Vulnerability to Gain Remote Access          *

PoC Released for Linux Kernel Vulnerability CVE-2024-36972 – Double Free Bug Allows Privilege Escalation and Container Escape          *

New Phishing Attack Hijacks X Accounts to Promote Scam Sites          *

New Attack Technique Enables Low-Privilege Users to Bypass EDR          *

Critical XSS Vulnerability in Roundcube Webmail Exposes Users to Malicious Attachments          *

GrubHub Data Breach Exposes Information of Customers, Drivers, and Merchants          *

Casio UK Online Store Breach Exposes Customer Credit Card Data          *

Multiple Dell PowerProtect Vulnerabilities Allow Attackers to Compromise Systems          *

Microsoft Accounts Authentication Bypass Vulnerability Allows Attackers to Gain Remote Access          *

Keir Starmer's Personal Email Reportedly Hacked by Russian Operatives          *

Hackers Leverage AWS and Microsoft Azure for Widespread Cyber Attacks          *

Lazarus Group Uses Trusted Apps to Steal Data via Dropbox          *

NVIDIA Releases Security Updates to Address Critical Vulnerabilities in GPU Drivers and vGPU Software          *

February 2025 MediaTek Security Bulletin Remote Attacks Enabled by Critical WLAN Vulnerabilities Affect Millions          *

Data Breach at Connecticut Healthcare Provider Affects 1 Million People          *

Security Flaw in Alibaba Cloud Storage Exposes Data to Unauthorized Uploads          *

Coyote Banking Malware Exploits Windows LNK Files to Run Malicious Scripts          *

CISA Issues Warning on Backdoor Vulnerability in Contec CMS8000 Patient Monitors          *

Devil-Traff: New SMS Phishing Platform Targeted by Cybercriminals          *

Critical Path Traversal Vulnerability Discovered in Deep Java Library          *

TAG-124 Breaches 1,000+ WordPress Sites to Inject Malicious Code          *

Gmail Confirms AI-Powered Hacking Threat, Issues Warning to 2.5 Billion Users          *

Zero-Day Breach in BeyondTrust Exposes 17 SaaS Customers Through Compromised API Key          *

One-Click RCE Vulnerability Discovered in Voyager Admin Panel with No Patch Available          *

Rockwell Automation Patches Critical FactoryTalk View ME Vulnerability          *

Israeli Firm Paragon Targets WhatsApp with New Zero-Click Spyware          *

WantToCry Ransomware Targets SMB Vulnerabilities to Remotely Encrypt NAS Devices          *

D-Link Router Vulnerability Allows Remote Attackers to Gain Full Control          *

Vulnerabilities in Cisco Webex Chat Expose Organization's Message Histories to Attackers          *

VMware Aria Operations Vulnerabilities Enable Attackers to Execute Admin-Level Actions          *

Critical Flaw in Yeti Forensic Platform Enables Remote Code Execution          *

Globe Life Data Breach Widens, Potentially Affecting 850,000 More Customers          *

GitHub Copilot Flaw Enables Training of Malicious AI Models          *

Hackers Send 40,000 Phishing Emails Impersonating Leading Tax Firm to Steal Credentials          *

Tata Technologies Hit by Ransomware Attack, IT Systems Compromised          *

Ransomware Attack Disrupts Operations at New York Blood Donation Center          *

Google Prevented 2.36 Million High-Risk Android Apps from Entering Play Store in 2024          *

Backdoor Vulnerability Found in Two Healthcare Patient Monitors, Linked to Chinese IP          *

Threat Actors Exploit Public-Facing IIS, Apache, and SQL Servers to Breach Government and Telecom Systems          *

New Android Malware Masquerades as Wedding Invitations to Steal WhatsApp Messages          *

RCE Vulnerability in AI Platform Allows Hackers to Gain Root Access          *

TeamViewer Client Flaw Exposes System to Privilege Escalation          *

Akamai SIRT Discovers Aquabotv3 Botnet Exploiting Critical Mitel SIP Phone Vulnerability          *

FleshStealer: New Infostealer Targeting Chrome and Mozilla Users          *

Researchers Reveal Advancements in SparkRAT Targeting macOS and Government Entities          *

DeepSeek Database Publicly Exposes Sensitive Information, Secret Keys, and Logs          *

Lynx Ransomware Framework Unveiled: Targeting Windows, Linux, and ESXi Systems          *

Lazarus Group Uses React-Based Admin Panel to Orchestrate Global Cyber Attacks          *

Hackers Exploit Critical Vulnerabilities to Compromise 3,000 Companies          *

Hacker Exploits Vulnerability in Airline Integration Service to Access User Accounts          *

PoC Exploit Released for XSS Vulnerability in TP-Link Router Web Interface          *

Google Researchers Analyze ScatterBrain Behind POISONPLUG Malware          *

New Phishing Scam Impersonates Amazon Prime to Steal Credit Card Details          *

PureCrypter Spreads Agent Tesla and TorNet Backdoor in Active Cyberattacks          *

Hackers Exploiting Vulnerabilities in SimpleHelp RMM to Infiltrate Networks          *

Apple Releases Patch for Actively Exploited Zero-Day Impacting iPhones, Macs, and More          *

Hackers Pose as USPS to Deliver Malicious PDF in Mobile Device Attack          *

Cybercriminals Use Hidden Text Salting to Bypass Email Filters and Stay Undetected          *

New Hacker Group Exploits 7z and UltraVNC to Stealthily Deploy Malware          *

Fortinet Authentication Flaw Exploited for Super-Admin Privileges          *

Critical Isolation Vulnerability in Intel Trust Domain Extensions Puts Sensitive Data at Risk          *

Microsoft Launches Phishing Protection for Teams Chat          *

Critical Apache Solr Vulnerability Allows Attackers to Gain Write Access on Windows          *

Critical Flaw in IBM Security Directory Exposes Session Cookies to Theft          *

DeepSeek Suspends New Registrations Following "Large-Scale" Cyberattack          *

Severe Fleet Server Vulnerability Reveals Sensitive Data          *

GitHub Vulnerability Exposed User Credentials Through Malicious Repositories          *

Critical Vulnerability in Podman and Buildah Enables Container Breakout          *

SCAVY Framework: Detecting Memory Corruption and Preventing Privilege Escalation in the Linux Kernel          *

Electron-Based Malware Used by Lazarus Group to Target Crypto Enthusiasts          *

Meta's Llama AI Framework Exposed to Critical Remote Code Execution Vulnerability          *

Exploitation of Windows Charset Conversion Feature Leads to Remote Code Execution          *

UnitedHealth Reports 2024 Data Breach Affecting 190 Million Individuals          *

Subaru Starlink Vulnerability Exposed Cars to Remote Attacks          *

TalkTalk Probes Data Breach Following Hacker Forum Listing          *

OSINT Analysis Unveils IntelBroker’s Cybercriminal Operations          *

PowerSchool Data Breach Exposes Millions of Student and Educator Records          *

Microsoft Entra ID Bug Lets Unprivileged Users Modify Their User Principal Names          *

Hackers Pose as Kremlin-Linked Group to Launch Attacks on Russian Organizations          *

Over 370 Ivanti Connect Secure Devices Compromised via Zero-Day Vulnerability          *

Critical Oracle WebLogic Server Vulnerability Enables Remote Code Execution          *

Critical Vulnerability in AdForest Theme Enables Full Site Takeover, Threatening Thousands          *

Government and University Websites Hijacked by New JavaScript Injection Attack          *

Vulnerability in Android Kiosk Tablets Allows Attackers to Control AC and Lighting Systems          *

Tycoon 2FA Phishing Kit Employs Custom Code to Bypass Detection          *

Hundreds of Fake Reddit Sites Used to Spread Lumma Stealer Malware          *

Malware Delivered to Windows Users Through Fake Microsoft Teams Page on Bing Ads          *

Subaru Vulnerability in STARLINK System Allows Hackers to Remotely Control Millions of Cars          *

phpMyAdmin Vulnerability Allows Hackers to Execute XSS Attacks via Malicious Tables          *

New Ransomware Targets VMware ESXi Hosts Using SSH Tunneling          *

GhostGPT Unrestricted ChatGPT Variant for Malware and Exploit Creation          *

FBI: North Korean IT Workers Exploit Source Code to Blackmail Employers          *

Custom Backdoor Leveraging Magic Packet Vulnerability in Juniper Routers          *

SonicWall Vulnerability Enables Arbitrary OS Command Execution in Active Attacks          *

Mercedes-Benz MBUX Vulnerabilities Expose User Data and Safety Risks          *

0-Click Deanonymization Attack Uncovers Vulnerabilities in Signal and Discord          *

Palo Alto Firewalls Exposed to Secure Boot Bypass and Firmware Vulnerabilities          *

ICICI Bank Data Breach: BASHE Ransomware Group Allegedly Leaks Customer Data          *

Critical Vulnerability in WordPress Plugin Puts Over 23,000 Websites at Risk of Hacking          *

New Cookie Sandwich Attack Technique Exposes HttpOnly Cookies to Theft          *

Cisco Alerts on Denial-of-Service Vulnerability with Available PoC Exploit          *

TRIPLESTRENGTH Targets Cloud Platforms with Cryptojacking and On-Premises Systems with Ransomware          *

Conduent Confirms Cybersecurity Incident Responsible for Recent Service Outage          *

IPany VPN Compromised in Supply-Chain Attack to Deliver Custom Malware          *

Hackers Target 16 Zero-Day Vulnerabilities on Day One of Pwn2Own Automotive 2025          *

Ransomware Groups Pretend to Be IT Support in Microsoft Teams Phishing Attacks          *

Major Worldwide Outage Causes Bitbucket Services to Go Completely Down          *

Botnet Hijacks 13,000 MikroTik Routers for Malspam and Cyberattacks          *

Murdoc Botnet Variant Exploits AVTECH IP Cameras and Huawei Routers          *

Fake Google Ads for Homebrew Target Mac Users with Malware          *

Fake SBI Reward App Spreading Android Malware          *

Brave Browser Flaw Lets Malicious Websites Appear as Trusted Domains          *

UK Brit High School Closes for Students Due to Ransomware Attack          *

Hackers Exploit MSI Packages and PNG Files for Multi-Stage Malware Delivery          *

DoNot Team Linked to Tanzeem Android Malware for Intelligence Gathering          *

HPE Investigates Alleged Source Code Theft in Cybersecurity Breach          *

Critical Vulnerabilities in QNX Software Development Platform's Image Codecs Expose Systems to Potential Attacks          *

Mongoose Vulnerability Exposes Millions of Downloads to Search Injection Attack          *

Researchers Use ChatGPT to Identify S3 Bucket Takeover Vulnerability in Red Bull          *

Hackers Use Malicious npm Packages to Steal Solana Wallet Keys via Gmail SMTP          *

Windows BitLocker Encryption Bypassed by Researchers Without Physical Disassembly of Laptop          *

NBI Data Leak Exposes Sensitive Information of Millions of Filipinos          *

Critical HPE Aruba Network Flaws Enable Remote Code Execution          *

Star Blizzard Hackers Leverage WhatsApp to Target High-Value Diplomats          *

Botnet Abuses Misconfigured DNS Records to Exploit 13,000 MikroTik Devices          *

Zoom Patches Multiple Security Vulnerabilities to Prevent Privilege Escalation and Denial-of-Service Risks          *

Critical Vulnerability in Windows LPD Service Allows Remote Code Execution          *

Multiple Security Flaws Found in PowerDNS Impacting Ubuntu Users          *

Critical Authorization Flaw in Moxa EDS-508A Series Ethernet Switches          *

North Korean Hackers Exposed in Crowdfunding Scam Operation          *

Phishing Campaign Exploiting FlowerStorm PaaS Targets Microsoft Users          *

CISA Issues Critical Alert on Aviatrix Controllers Vulnerability          *

U.S. Targets Chinese Cybersecurity Company and Actor for Involvement in Treasury Hack          *

Critical Security Vulnerabilities Discovered in AWS Clients for Amazon WorkSpaces, AppStream 2.0, and NICE DCV          *

Otelier Data Breach Compromises Millions of Hotel Guest Records and Reservations          *

Hackers Can Bypass Active Directory Policies to Enable Vulnerable NTLMv1 Authentication          *

Advanced Phishing Kit Bypasses 2FA to Compromise Microsoft 365 Accounts          *

Critical Vulnerabilities in WGS-804HPT Switches Lead to Remote Code Execution and Network Compromise          *

Yubico Patches Authentication Bypass Vulnerability in pam-u2f Package          *

Millions of Internet Hosts Exposed to Attacks Due to Tunneling Protocol Vulnerabilities          *

Hackers Exploit IIS Worker Using Web Shell for Data Exfiltration          *

Critical Flaws in SimpleHelp Remote Access Software Could Expose Systems to Compromise          *

Wolf Haldenstein Law Firm Reports 3.5 Million Affected by Data Breach          *

W3 Total Cache Vulnerability Exposes 1 Million WordPress Sites to Potential Attacks          *

Botnet Uses DNS Record Misconfigurations and Compromised Routers for Malware Distribution          *

AIRASHI Botnet Exploits Zero-Day Vulnerabilities for Large-Scale DDoS Attacks          *

European Privacy Group Takes Legal Action Against TikTok and AliExpress for Illegal Data Transfers to China          *

Nominet Confirms Breach Due to Ivanti Zero-Day          *

Russian Threat Group Star Blizzard Exploits WhatsApp Accounts Using QR Code Attacks          *

Malware Campaign Targets Thousands of PHP-Based Web Applications          *

Hackers Using California Wildfire Sparks to Launch Phishing Attacks          *

380,000 Impacted by Data Breach at Stiiizy Cannabis Retailer          *

Veeam Azure Backup Vulnerability Exposes Network to Attackers          *

Exploitable UEFI Secure Boot Flaw Could Facilitate Malicious Bootkit Installation          *

Malvertising Scam Targets Google Ads Users, Stealing Credentials and 2FA Codes          *

Hackers Exploit Fortinet Zero-Day to Gain Super-Admin Privileges          *

Widespread WP3.XYZ Malware Compromises 5,000 WordPress Sites          *

ShadowSyndicate Hackers Introduce RansomHub Ransomware to Their Arsenal          *

SAP Patches Critical Flaws in NetWeaver Application Servers          *

Hackers Leak VPN Credentials and Configurations of 15,000 FortiGate Devices          *

Vulnerability in Linux Rsync File Transfer Tool Allows Attackers to Execute Arbitrary Code          *

Critical FortiSwitch Vulnerability (CVE-2023-37936) Requires Immediate Patch          *

Critical Windows RD Gateway Vulnerability (CVE-2025-21225) Exposes Systems to Potential DoS Attacks.          *

OneBlood Discloses Personal Data Breach from July Ransomware Attack          *

Microsoft Patch Tuesday Security advisory- January 2025          *

Critical Flaw in Google’s Sign in with Google Puts Millions of Users at Risk          *

Hackers Exploit Zero-Day Vulnerability in Internet-Exposed Fortinet Firewalls          *

Microsoft Alerts Microsoft 365 Users to MFA Vulnerability          *

ZACROS Corporation Discloses Personal Information Leak Following Ransomware Attack          *

IBM Robotic Process Automation Vulnerability Exposes Sensitive Data to Attackers          *

Critical Vulnerabilities Discovered in Atheos Web-Based IDE          *

Cybercriminals Exploit YouTube to Spread Malware Through Hijacked Channels and Fake Software          *

Over 4,000 Backdoors on Compromised Systems Gained Control Through Expired Domains          *

Slovakia's Land Registry Suffers Unprecedented Cyber-Attack          *

Furry Hacker Compromises Scholastic, Exposing Data of 8 Million Individuals          *

LDAPNightmare PoC Exploit Disrupts LSASS and Forces Reboot of Windows Domain Controllers          *

Multi-Plugin Malware Framework Deploys Backdoor on Windows Systems          *

Phishing Texts Deceive Apple iMessage Users into Disabling Security Features          *

Critical Vulnerability Discovered in GiveWP Plugin Affecting 100,000 Websites          *

DoJ Charges Three Russians for Running Crypto Mixers Linked to Cybercrime Laundering          *

RedDelta Cyber Espionage Group Targets Southeast Asia, Expands Attacks Globally          *

AI-Powered Ransomware FunkSec Hits 85 Victims with Double Extortion          *

Microsoft Files Lawsuit Against Hacking Group Exploiting Azure AI for Malicious Content Creation          *

Juniper Networks Vulnerability Allows Remote Attackers to Execute Network Attack          *

Researchers Exploit Vulnerability in Apple’s New USB-C Controller          *

NonEuclid RAT Targets .NET Framework 4.8 Systems, Spreads via Phishing and Malicious Scripts          *

Proton Global Outage Linked to Kubernetes Migration and Software Update          *

Telefónica Confirms Breach of Internal Ticketing System Following Data Leak          *

Fraudulent CrowdStrike Job Offers Target Developers to Install Cryptominer          *

Samsung Patches Critical Vulnerabilities Allowing Arbitrary Code Execution          *

Sophisticated PayPal Phishing Campaign Uses Legitimate Links to Steal Accounts          *

Critical Vulnerabilities Found in Fancy Product Designer Plugin for WordPress          *

Banshee Stealer's New Variant Bypasses Antivirus with XProtect-Inspired Encryption          *

Phony CrowdStrike Job Offers Exploit Developers with Hidden Crypto Miners          *

Major U.S. Addiction Treatment Provider Alerts Patients to Data Breach          *

Critical Vulnerabilities Addressed in SonicWall, Palo Alto Expedition, and Aviatrix Controllers          *

Green Bay Packers Store Breach Exposes Thousands of Credit Card Details          *

Mirai Botnet Variant Targets Routers Using Zero-Day Vulnerabilities          *

Ivanti Alerts of New Connect Secure Vulnerability Exploited in Zero-Day Attacks          *

Critical RCE Vulnerability in GFI KerioControl Exposes Systems to Remote Code Execution via CRLF Injection          *

Palo Alto Networks Expedition Tool Vulnerability Exposes Cleartext Passwords to Attackers          *

GitLab Fixes Multiple Vulnerabilities Including Resource Exhaustion and User Manipulation          *

Gravy Analytics Targeted in Cyberattack, Sensitive Data Allegedly Stolen          *

Critical BIOS UEFI Vulnerabilities in Illumina iSeq 100 Expose Device to Remote Attacks          *

Washington State Sues T-Mobile Over Massive Data Breach          *

Chrome Update Addresses Multiple Security Vulnerabilities          *

New WordPress Plugin Exploits Legitimate Sites to Steal Customer Payment Data          *

CISA: Oracle WebLogic Vulnerability Actively Exploited in Cyberattacks          *

Casio confirms that the personal data of 8,500 individuals was compromised in a ransomware attack in October          *

PowerSchool Breach Exposes Student and Teacher Data from K-12 Districts          *

New EAGERBEE Variant Exploits ISPs and Governments with Sophisticated Backdoor Techniques          *

Critical RCE Vulnerabilities Addressed in Latest Android Security Update          *

Exploiting Misconfigurations in Argo Workflows for Kubernetes Cluster Compromise          *

Critical OpenVPN Connect Vulnerability (CVE-2024-8474) Exposes Private Keys: Update Now to Stay Protected          *

Chinese Hackers Targeted Charter and Windstream Networks as Well          *

Stealthy Steganography-Based Backdoor Attacks Target Android Applications          *

CISA Confirms Recent Government Hack Is Limited to U.S. Treasury Department          *

Malicious npm Packages Exfiltrating Developers' Sensitive Data          *

Critical CVE-2024-40766 Vulnerability Puts Global SonicWall NSA Devices at Risk          *

MediaTek Patches Critical Remote Code Execution Vulnerability          *

New SwaetRAT Malware Delivered Through Weaponized Python Scripts          *

Fake EditThisCookie Extension Found Stealing User Data          *

Bad Likert Judge: A New Technique for Jailbreaking AI by Exploiting LLM Vulnerabilities          *

Stealthy Steganographic Backdoor Attacks on Android Applications          *

Moxa Urges Immediate Security Measures for CVE-2024-9138 and CVE-2024-9140 Vulnerabilities          *

Weekly Threat: Users Targeted by Sophisticated Phishing Links          *

North Korean Hackers Drain Cryptocurrency Wallets Through Phony Job Interviews          *

PoC Released for Windows Registry Privilege Escalation Vulnerability          *

Windows 10 Users Advised to Upgrade to Avoid Serious Security Risks          *

Hikvision Camera Driver Vulnerability: CVE-2024-12569 - Critical Security Update for Milestone XProtect® Users          *

Vulnerabilities in Trend Micro Apex One Allow Privilege Escalation          *

Next.js Addresses Denial-of-Service Vulnerability (CVE-2024-56332) in Server Actions          *

Tenable Advises Manual Upgrade to Fix Offline Nessus Agents Caused by Faulty Plugin Update          *

Critical Vulnerability in UpdraftPlus Plugin Puts Millions of WordPress Sites at Risk          *

FireScam Android Malware Disguises as RuStore App to Steal User Data          *

Nuclei Vulnerability Allows Malicious Templates to Bypass Signature Verification          *

LegionLoader Exploits Chrome Extensions to Deploy Infostealer Malware          *

Thomas Cook Struck by Cyber Attack, Disrupting IT Systems          *

Nikki-Universal Cyber Attack - 761.8 GB of Data Stolen          *

Veritas Vulnerability Allows Attackers to Execute Arbitrary SQL Commands          *

Vulnerability in Karmada Allows Attackers to Take Control of Kubernetes Systems          *

India's VPN Crackdown: Popular Apps Removed from App Stores          *

French Contractor Atos Refutes Allegations of Space Bears Ransomware Attack          *

Siri Privacy Lawsuit Ends with $95M Settlement from Apple          *

SysBumps: A New Kernel Break Attack Bypassing macOS Security          *

New York Hospital Reports Data Breach Affecting 670,000 Due to Ransomware Attack          *

Massive DDoS Attack Disrupts NTT Docomo Services Across Multiple Sectors          *

ASUS Routers Exposed to Security Risks with CVE-2024-12912 and CVE-2024-13062          *

LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Servers          *

iTerm2 Patches Critical Vulnerability Exposing User Input and Output Data          *

Researchers Discover Phishing-as-a-Service Domains Linked to Tycoon 2FA          *

Critical Security Vulnerabilities Fixed in Microsoft Dynamics 365 and Power Apps Web API          *

Three Russian German Nationals Indicted for Espionage on Behalf of Russian Intelligence          *

Malicious NPM Package Posing as Ethereum Tool Drops Quasar RAT          *

Critical Vulnerability in Angular Expressions (CVE-2024-54152): Code Injection Risk and Full System Access          *

New PLAYFULGHOST Malware: Hacking Devices to Remotely Capture Audio Recordings          *

EC2 Grouper Hackers Leverage AWS Tools to Exploit Stolen Credentials          *

Cyberattack on State Health Benefits Website Exposes Rhode Islanders Data          *

Iranian and Russian Entities Sanctioned for Election Interference via AI and Cyber Operations          *

DoubleClickjacking Exploit Circumvents Clickjacking Defenses on Leading Websites          *

Security Flaw in DrayTek Devices Enables Remote Execution of Arbitrary Commands          *

Ukrainian Military Targeted by Stealthy Malware Leveraging SSH Over TOR          *

Microsoft Issues Critical Alert for Developers to Update .NET Installer Links          *

Critical Vulnerability in TrueNAS CORE Enables Remote Code Execution          *

Major Healthcare Breaches Drive Overhaul of U.S. Cybersecurity Regulations          *

Alleged 7-Zip Zero-Day Exploit Leaked Online Through Social Media Platform 'X'          *

SquareX Researchers Reveal OAuth Vulnerability in Chrome Extensions, Days Before Major Breach          *

NFS Protocol Security Bypassed to Access Remote Server Files          *

Hackers Exploit Websites to Deliver Malware via Weaponized LZH File Using LNK File          *

7-Zip Zero-Day Exploit: Alleged Vulnerability Sparks Cybersecurity Concerns          *

Global Cyber Alliance Successfully Dismantles PlugX Worm          *

Postman Security Flaw Exposes 30,000 Workspaces, Leaking API Keys and More          *

Security Flaw in GStreamer Exposes Linux Systems to Potential Exploits          *

Critical Vulnerability in Tabby Terminal Puts macOS User Privacy and Security at Risk          *

PoC Exploit Released for Linux Kernel Vulnerability CVE-2023-4147 Allowing Privilege Escalation          *

Proof of Concept Exploit Released for Oracle WebLogic Server Vulnerability          *

AT&T and Verizon Hacked by Salt Typhoon, Targeting High-Profile Networks          *

Four-Faith Industrial Router Vulnerability Exploited for Remote Access in the Wild          *

APT29 Espionage Campaign: Russian Hackers Exploit Red Team Tools for Stealthy Data Theft          *

Rspack Supply Chain Attack Injects Cryptojacking Malware into NPM Ecosystem          *

Cloud Atlas Uses VBCloud Backdoor in New Cyber Espionage Campaign          *

Webmin Security Flaw Exposes Servers to Command Injection Attacks          *

Hackers Compromise ZAGG Customer Credit Card Data in Third-Party Breach          *

NGate Trojan Exploits NFC to Loot Bank Accounts via ATMs          *

Nebraska Attorney General Sues Change Healthcare and UnitedHealth Over Data Theft in Ransomware Attack          *

Volkswagen Data Breach Exposes Personal Information of 800,000 Electric Car Owners          *

Ransomware Attack on Ascension Health Exposes Data of Nearly 6 Million People          *

Pittsburgh Regional Transit Links Recent Service Disruptions to Ransomware Attack          *

FBI Accuses North Korean Hackers of Stealing $308 Million in Cryptocurrency          *

General Dynamics Confirms Phishing Attack on Employees          *

Critical SSRF Vulnerability Discovered in Invoice Ninja          *

Fake Zoom Links Exploit Cryptocurrency Investors in Million-Dollar Heist          *

White House Attributes Ninth Telecom Breach to Chinese Cyber Espionage          *

FICORA and Kaiten Botnets Exploit Legacy D-Link Vulnerabilities in Global Cyberattacks          *

Japan Airlines Cyberattack Disrupts Flights During Year-End Holiday Rush          *

Palo Alto Networks Addresses PAN-OS DoS Vulnerability with Urgent Patch          *

Cyberhaven Chrome Extension Breached in Sophisticated Cyberattack          *

Flaws in Ruijie Networks Cloud Platform Could Have Exposed 50,000 Devices to Remote Attacks          *

Brazilian Hacker Threatened to Sell Stolen Data for $3.2M in Bitcoin After Breaching 300,000 Accounts          *

New OtterCookie Malware Exploits Fake Job Offers to Backdoor Developers          *

Data Breach at American Addiction Centers Exposes Information of 422,000 Individuals          *

Dark Web Scheme Exploits KYC Data to Bypass Identity Verification Systems          *

Araneida Scanner: Hackers Exploiting Cracked Version of Acunetix Vulnerability Scanner          *

Severe Apache MINA Vulnerability Enables Remote Code Execution          *

CISA Warns of Active Exploitation of Acclaim USAHERDS Vulnerability CVE-2021-44207          *

libxml2 Exposed to Critical XXE Attack Risk          *

Iran's Charming Kitten Unveils BellaCPP, a New C++ Variant of BellaCiao Malware          *

Urgent Security Patch for Critical SQL Injection Vulnerability in Apache Traffic Control          *

Massive Biometric Data Harvesting Operation Exposed          *

U.S. Allegedly Conducts Cyber Attacks on Chinese Tech Firms          *

Critical Authentication Flaw in Apache HugeGraph-Server Enables Unauthorized Access          *

IBM AIX TCP/IP Flaw Enables Denial of Service Attacks by Exploiting Vulnerability          *

Indonesia Government Data Leak Hackers Dump 82 GB of Confidential Information Online          *

PyPI Packages Exploiting Keystrokes and Hijacking Social Media Accounts Uncovered by Researchers          *

European Space Agency's Official Store Hacked to Steal Payment Card Information          *

WikiKit Phishing Kit Targets Key Industries Using Evasive Tactics          *

CrushFTP Vulnerability Puts Users at Risk of Account Takeover          *

ColdFusion Critical Flaw Exposed with PoC Exploit, Adobe Issues Advisory          *

Lazarus Group Deploys New VNC-Based Malware in Global Attacks on Organizations          *

Premium WPLMS WordPress Plugins Fix Seven Critical Vulnerabilities          *

Skuld Malware Exploits Weaponized Windows Utility Packages for Deployment          *

Ransomware Attack on Three California Hospitals Exposes 17 Million Patient Records          *

Critical Remote Code Execution Vulnerability Discovered in Craft CMS with PoC Released          *

Apache Tomcat Security Update Addresses Critical RCE Vulnerability          *

Hail Cock Botnet Exploits Vulnerability in DigiEver DVRs          *

CISA Urges U.S. Mobile Users to Adopt Encrypted Messaging After Salt Typhoon Hack          *

US Charges Alleged LockBit Coder with 41 Counts of Cybercrime          *

North Korean Hackers Steal $1.3 Billion in Cryptocurrency This Year          *

WhatsApp Secures Legal Victory Against NSO Group in Pegasus Spyware Case          *

LockBit Developer Rostislav Panev Charged with Causing Billions in Global Ransomware Damage          *

Juniper Alerts on Mirai Botnet Targeting Vulnerable Session Smart Routers          *

Windows 11 Alert Privilege Escalation Vulnerability Exposes Users to Attack          *

Critical Vulnerabilities in Foxit PDF Editor Enable Remote Code Execution          *

Fortinet Releases Critical Patch for FortiWLM Vulnerability          *

TA397 Utilizes Advanced Spearphishing Methods to Deliver Malware in the Defense Sector          *

Critical Vulnerability in Siemens UMC Allows for Remote Code          *

Diicot Threat Group Launches Advanced Malware Campaign Targeting Linux Systems          *

Critical Vulnerabilities Discovered in Rockwell Automation PowerMonitor 1000 Devices          *

Advanced Phishing Campaign Targets Users with Tax Lures and MSC File Backdoor          *

Hackers Publish Malicious Packages on NPM Using Stolen Tokens          *

Sophos Reveals Critical Remote Code Execution Vulnerability in Firewall          *

Hackers Leverage LNK Files to Create Scheduled Tasks and Deploy Malware Payloads          *

Malicious Supply Chain Attack Shifts From npm Community to VSCode Marketplace          *

Stay Alert for Malicious SharePoint Notifications Delivering XLoader Malware          *

BadBox Malware Botnet Infects 192,000 Android Devices Despite Interruption Efforts          *

Android malware disguised as a health app discovered on Amazon Appstore          *

Microsoft 365 Users Experience Unexpected Product Deactivation Issues          *

Iranian Hackers Targeting Global ICS Infrastructure with Massive Cyberattack          *

Authentication Bypass Vulnerability Discovered in Next.js Framework          *

VIPKeyLogger Unleashed Office Docs Turned into Credential-Stealing Malware          *

Russian Hackers Use RDP Proxies for Data Theft in Man-in-the-Middle Attacks          *

Severe Apache Struts Vulnerability Discovered with Exploitation Attempts Ongoing          *

Raccoon Stealer Operator Sentenced to 5 Years in Prison After Guilty Plea          *

HubPhish Exploits HubSpot Tools to Steal Credentials from 20,000 European Users          *

Active Phishing Campaign Exploits Google Calendar to Evade Spam Filters          *

Exploring the Advanced Techniques and Capabilities of Nova: A Fork of Snake Keylogger          *

Critical Vulnerabilities in SHARP Routers: Urgent Firmware Updates Required to Mitigate Security Risks          *

Critical Vulnerability in MinIO Allows Unauthorized Users to Gain Full Admin Access          *

Apache Tomcat Fixes RCE and DoS Security Issues          *

CISA Highlights Active Exploits Targeting Adobe ColdFusion and Windows Vulnerabilities          *

Cyber Criminals Use Windows Management Console to Deliver Backdoor Payloads          *

Exploitable CyberPanel Flaw Exposes Servers to Total Compromise, PoC Released          *

Data Exposure Incident in Cisco DevHub Environment          *

'Bitter' Cyberspies Launch Attacks on Defense Organizations Using MiyaRAT Malware          *

Hackers Target Hackers: MUT-1244 Steals Credentials Through GitHub Attack          *

Fake Ledger Data Breach Emails Aim to Steal Crypto Wallets          *

SADBRIDGE Loader Deploys GOSAR Backdoor in Cyber Attacks          *

Microsoft Teams Voice Phishing Enables DarkGate Malware Deployment          *

Severe XXE Vulnerability(CVE-2024-55875) Discovered in http4k Framework          *

ConnectOnCall Data Breach Exposes Personal and Medical Information of Over 900,000 Individuals          *

Exploitation of Undocumented DrayTek Vulnerabilities Affects Hundreds of Firms          *

Security Flaw in Laravel Pulse Allows Remote Code Execution          *

Severe Vulnerability in Windows LDAP Service Poses Remote Takeover Risk          *

DeceptionAds Generates Over 1M Daily Impressions Through 3,000 Websites and Fake CAPTCHA Pages          *

Amnesty International Links Cellebrite to Android Zero-Day Exploits in Spyware Campaigns          *

FBI Detects HiatusRAT Malware Attacks Targeting Web Cameras and DVRs          *

Data Breach at Texas Tech University System Compromises Data of 1.4 Million Patients          *

Dubai Police Draws Attention Amid Growing Mobile Attacks in the UAE          *

Tic TAC Alert Remote Code Execution Flaw in Medical Imaging Systems          *

Digital Prison: Serbian Authorities' Use of Spyware and Forensic Tools to Target Journalists and Activists          *

Critical GLPI Vulnerabilities Discovered, Putting User Accounts at Risk          *

Critical Vulnerabilities Found in Mullvad VPN App During Penetration Test          *

Spring Framework Path Traversal Vulnerability Exploited with PoC Release          *

Hackers Target YouTube Creators with Fake Collaboration Offers          *

Flaw in Golang Crypto Library Exposes Systems to Authorization Bypass          *

Thai Officials Targeted in Yokai Backdoor Campaign via DLL Side-Loading          *

Winnti Hackers Use New Glutton PHP Backdoor to Target Rival Threat Actors          *

Clop Ransomware Takes Responsibility for Cleo Data Breach Attacks          *

RepoJacking Vulnerability Exposes Over 300,000 Prometheus Servers to DoS Attacks          *

New Android Banking Trojan Aims at Indian Users via Fake Apps          *

Over 240,000 Affected in Cyberattack on SRP Federal Credit Union          *

Curl Vulnerability Risks User Credentials in Redirect Scenarios          *

Germany Takes Down BADBOX Malware Network on 30,000 Devices Using Sinkhole Operation          *

Medusa Claims to Have Stolen 852.4GB of Data from Ainsworth Game Technology          *

Citrix Warns of Global Password Spraying Attacks on NetScaler Appliances          *

Abusing Microsoft’s UI Automation Framework: A New Evasion Technique for Bypassing EDR          *

Careto APT Resurfaces A Decade-Old Threat with Increased Sophistication          *

LKQ Reports CyberAttack Disrupted Canadian Operations          *

Big Flaw in Ruijie Reyee Cloud Management Platform          *

Microsoft Addresses Security Flaws in Windows Defender and Update Catalog          *

Security Risks in Woffice WordPress Theme Prompt Immediate Updates          *

GitHub Repository Hosting PoC Exploits Compromises 390,000+ WordPress Accounts          *

Southeast Asia's High-Profile Organizations Targeted in Cyberattacks          *

Apache Superset Security Alert CVE-2024-55633 Vulnerability Exposes Sensitive Data          *

Citrix NetScaler Devices Targeted by Brute-Force Attacks Exploiting Zero-Day Vulnerabilities          *

AntiDot Malware Infecting Android Devices to Deliver Malicious Payloads to Employees          *

Center for Vein Restoration Notifies Over 446,000 Individuals of Data Breach          *

New Zealand Telecom Provider Compass Communications Confirms Ransomware Attack          *

CERT\CC Issues Advisory on PDQ Deploy Vulnerability Exposing Admin Credentials          *

Over 300K Exposed Prometheus Instances Leaking Credentials and API Keys Online          *

Dell Warns of High-Risk Security Flaws in Key Enterprise Solutions          *

Gamaredon Targets Former Soviet States with Android Spyware BoneSpy and PlainGnome          *

Researchers Discover Symlink Exploit Enabling TCC Bypass in iOS and macOS          *

Chinese Hackers Behind Triad Nexus Using 200,000 Domains in Extensive Cyberattack          *

New IOCONTROL Malware Targets Critical Infrastructure in Cyberattacks          *

New Pumakit Linux Rootkit Malware Discovered Using Stealth Techniques          *

Splunk Vulnerability Exposes Systems to Remote Code Execution          *

Cyberattack Halts Krispy Kreme’s Doughnut Delivery System          *

Critical Apache Struts Flaw Enables Remote Code Execution          *

ChatGPT Faces Global Outage, Service Restored After Several Hours          *

Global Meta Outage Disrupts Access to Instagram, Facebook, WhatsApp, and Threads          *

Two Australian Companies Reportedly Targeted by Funksec Ransomware Gang          *

Hackers Exploit Weaponized LNK Files for Delivering Malicious Payloads          *

ZLoader Malware Resurfaces, Using DNS Tunneling to Conceal C2 Communications          *

Blizzard Group Deploys Kazuar Backdoor in Ukraine via Amadey Malware-as-a-Service          *

New Malware Technique Exploits Windows UI Framework to Bypass EDR Tools          *

US Charges Chinese Hackers for Exploiting Thousands of Firewalls          *

Vulnerabilities in Hunk Companion WordPress Plugin Exploited to Install Malicious Plugins          *

Researchers Uncover New EagleMsgSpy Android Spyware Allegedly Used by Chinese Authorities          *

Siemens Healthineers Fixes Major Flaw in Medical Imaging Software          *

Apache Superset Addresses Multiple Security Flaws in Latest Update          *

Hackers Exploit HTML Functions to Evade Email Security Filters          *

Cisco Talos Exposes Unpatched Vulnerabilities in Industrial Routers and BGP Tool          *

Schneider Electric Alerts Users to Critical Vulnerability in Modicon Controllers          *

Critical Apple Flaw Exposed User Data on macOS and iOS          *

Adobe Addresses Over 160 Vulnerabilities Across 16 Products          *

Scottish Parliament TV Vulnerable to Deepfake Threats          *

RedLine Malware Exploits Pirated Corporate Software to Steal Login Credentials          *

Visual Studio Tunnels Exploited for Stealthy Remote Access          *

Phishing Scam Uses Fake Job Offers to Distribute Banking Trojan via Malicious Apps          *

Ivanti Releases Critical Security Patches for CSA and Connect Secure Vulnerabilities          *

Threat Actors Leverage AI to Launch Advanced Social Engineering Attacks          *

Google Unveils Vanir, an Open-Source Tool for Security Patch Validation          *

Ransomware Attack Targets U.S. Subsidiary of Japanese Water Treatment Firm          *

Phishing Attack Targets Ukrainian Defense Industry          *

Microsoft Patch Tuesday Security advisory- December 2024          *

Critical Vulnerability in CPython Exposes asyncio Applications to Memory Exhaustion Risks          *

Critical Vulnerability in WPForms Plugin Affects 6 Million WordPress Sites          *

Urgent SAP Patch Released for NetWeaver AS for JAVA Vulnerability          *

Deep Seek AI Chatbot Vulnerability Allows Account Takeover via Prompt Injection          *

Black Basta Ransomware Adopts New Tactics: Email Bombing, QR Codes, and Social Engineering          *

A Ransomware Attack Hits Romanian Energy Giant Electrica          *

Indusface Reports a 3000 Percent Increase in API Attacks, Analyzing 1.26 Billion Cyberattacks in Q3 2024          *

Cyberattacks on Indian Government Entities Rise by 138 Percent Between 2019 and 2023          *

Active Exploitation of Critical Vulnerability in Cleo Software Detected          *

OpenWrt Sysupgrade Vulnerability Enabled Hackers to Distribute Malicious Firmware          *

Ransomware Attack Targets Major Heart Surgery Device Manufacturer          *

Transaction-Relay Jamming Vulnerability Puts Bitcoin Lightning Network at Risk          *

Supply Chain Attack Targets Ultralytics AI Library, Impacting 60 Million Downloads          *

ABB ASPECT Vulnerabilities Leave Buildings Open to Cyberattacks          *

Google's December 2024 Update Resolves Critical RCE Vulnerabilities in Pixel Devices          *

QNAP Responds to Critical Vulnerabilities in License Center and Operating Systems          *

Mauri Ransomware Leverages Apache ActiveMQ Vulnerability for Attacks          *

Qlik Sense Faces Critical Vulnerabilities Impacting User Security          *

Deloitte Denies Breach, Confirms Only One System Was Impacted          *

Malicious C2 Communication Bypasses Browser Isolation Through QR Codes          *

Solana Library Supply Chain Attack Puts Cryptocurrency Wallets at Risk          *

DaMAgeCard Attack: New SD Card Exploit Enables Direct Access to System Memory by Hackers          *

Spyware Campaign Targets Chinese Minority Groups Through WeChat          *

CVE-2024-12209 (CVSS 9.8): WP Umbrella Plugin Flaw Endangers 30,000 Websites          *

Django Releases Security Patches for CVE-2024-53907 and CVE-2024-53908 to Address DoS and SQL Injection Vulnerabilities          *

Ransomware Incident Impacts 300,000 Patients at Anna Jaques Hospital          *

Chemonics International Discloses Data Breach Affecting Over 260,000 Individuals          *

Critical AsyncHttpClient Vulnerability CVE-2024-53990 Threatens Java Applications          *

Atrium Health Suffers Massive Data Breach, 585,000 Records Exposed          *

Critical Security Flaw Identified in SailPoint IdentityIQ          *

SonicWall SMA 100 Exposes Multiple Vulnerabilities That Could Enable Remote Code Execution          *

Critical Security Flaw in Sweet Date WordPress Theme Exposed Thousands of Sites Vulnerability          *

Major Zero-Day Vulnerability in Windows Compromises User Credentials          *

Crypto-Stealing Malware Disguised as Meeting App Targets Web3 Professionals          *

Russian Hackers Leverage Competitors' Infrastructure for Espionage          *

Researchers Discover Vulnerabilities in Widely Used Open-Source Machine Learning Frameworks          *

Cloudflare Exploited Hackers Hide GammaDrop Malware with Tunnels and Fast-Flux DNS          *

Critical Vulnerability in Thinkware Cloud APK Version 4.3.46          *

Mitel MiCollab Zero-Day Vulnerability Receives Proof-of-Concept Exploit          *

CISA Issues Alert on Exploited Vulnerabilities in Zyxel Firewalls, CyberPanel, North Grid, and ProjectSend          *

ChatGPT Next Web Vulnerability Allowed Attackers to Exploit Endpoint for SSRF          *

Android Spyware Uncovered on Device Seized by Russian FSB          *

U.S. Organization Targeted in Four-Month Intrusion by Chinese Hackers          *

Romania's Election Systems Hit by Over 85,000 Cyberattacks          *

MirrorFace Campaign Targets Japan Using ANEL and NOOPDOOR Backdoors          *

Hackers Target Docker Remote API Servers to Deploy Gafgyt Malware          *

Cloudflare Developer Platforms Exploited in Cyber Attacks          *

UK Disrupts Russian Money Laundering Networks Linked to Ransomware          *

Ransomware Causes $17bn in Downtime for Manufacturing Sector          *

Deloitte UK Falls Victim to Massive Hack 1 TB of Data Stolen          *

White House: Salt Typhoon Targeted Telecoms in Dozens of Countries          *

Cisco NX-OS Flaw Enables Bypass of Image Signature Verification          *

BT Unit Shuts Down Servers After Black Basta Ransomware Breach          *

760,000 Employee Records from Leading Companies Leaked Online          *

Marin Housing Authority Cyberattack: $950,000 Stolen from City Housing Project          *

MobSF XSS Flaw Allows Attackers to Inject Malicious Scripts          *

Critical Vulnerability Found in I-O DATA Routers          *

Zyxel Releases Firmware Updates to Secure Your Network          *

Google Chrome Updates to Address High-Risk Vulnerability in V8 JavaScript Engine          *

Ransomware Attack Disrupts Operations of Energy Sector Contractor ENGlobal          *

Hackers Clone Websites and Exploit RCE Vulnerabilities to Target Shopping Platforms          *

Veeam Issues Warning About Critical RCE Vulnerability in Service Provider Console          *

Critical Remote Code Execution Vulnerability in Progress Whats Up Gold          *

Threat Actors Increasingly Exploit Cloudflare’s Developer Domains          *

Stoli Vodka Maker Files for Bankruptcy in the US Following Ransomware Attack          *

Severe Security Flaw Discovered in Zabbix Network Monitoring Tool          *

TP-Link HomeShield Vulnerability Allows Attackers to Inject Malicious Commands          *

Cisco Confirms Ongoing Exploitation of 10-Year-Old WebVPN Vulnerability in ASA Software          *

Critical Vulnerabilities in mySCADA myPRO Software Threaten Industrial Control Systems Security          *

Over 600,000 Background Checks were Exposed in a Publicly Accessible Database          *

ProFTPD Vulnerability Allows Attackers to Gain Root Access          *

Major Cyberattacks Hit UK Hospitals, Disrupting Patient Care          *

Horns&Hooves Campaign Deploys RATs Using Fake Emails and JavaScript Payloads          *

Azerbaijan's Digital Influence Campaign Targeting France's Overseas Territories and Corsica          *

SmokeLoader Malware Strikes Taiwan’s Manufacturing and IT Industries          *

HPE IceWall Vulnerability Enables Unauthorized Data Modification          *

CleverSoar Malware Targets Windows Users, Evades Security Mechanisms          *

Security Alert: Bootkitty Bootkit Exploits UEFI Vulnerability (CVE-2023-40238) to Target Linux Systems          *

CVE-2024-11980 (CVSS 10): Critical Vulnerability Discovered in Billion Electric Routers          *

MediaTek Resolves Critical Vulnerability in Smartphone Chipsets (CVE-2024-20125)          *

Bologna FC Faces Major Data Breach Following Ransomware Attack          *

Operation Code on Toast TA-RedAnt Targets Internet Explorer with Zero-Day Exploit          *

Trellix Patches Critical Vulnerabilities in Enterprise Security Manager          *

New Phishing Campaign Exploits Corrupted Word Documents to Bypass Security          *

Critical Vulnerabilities Discovered in Linux Tuned Daemon          *

AI-Driven Fake News Targets Western Support for Ukraine and U.S. Elections          *

SpyLoan Malware Infects 8 Million Android Devices via Google Play          *

Industrial Networks at Risk Due to Over-the-Air Vulnerabilities in Advantech EKI Access Points          *

Critical Security Flaw in Widget Options Plugin Affects 100,000+ Websites          *

Hackers Can Stealthily Access ThinkPad Webcams by Disabling LED Indicators          *

T-Mobile Reveals New Details About China-Linked Cyberattack          *

Over 600,000 Sensitive Records Exposed by Background Check Service Provider          *

Bologna FC Hit by RansomHub Ransomware and Confirms a Data Breach          *

Cyberattack on UK Hospital Disrupts Operations, Interruptions Expected to Continue          *

Critical Flaw in Apache Arrow R Package Enables Arbitrary Code Execution          *

New Rockstar 2FA Phishing Service Aims at Microsoft 365 Accounts          *

Critical Security Flaws in Contiki-NG IoT OS          *

HPE Insight Remote Support Hit with Severe Vulnerabilities          *

Researchers Discover 20 Vulnerabilities in Advantech Wi-Fi Access Point          *

Critical Zyxel Firewall Vulnerability Under Active Exploitation          *

New Skimmer Malware Harvests Credit Card Data from Online Checkout Pages          *

XML-RPC npm Library Compromised: Data Theft and Crypto Mining Detected          *

Malicious PyPI Package Targets Crypto Wallets with Infostealing Code          *

Researchers Uncover Advanced Data Exfiltration Techniques Used by Ransomware Groups          *

TIBCO Hawk Under Attack Mitigate Critical Security Risks (CVE-2024-10217 & CVE-2024-10218)          *

Microsoft Fixes Exploited Vulnerability in Partner Network Website          *

ProjectSend Vulnerability Actively Exploited in the Wild          *

Zabbix Releases Patch for Critical Remote Code Execution Vulnerability          *

Cybercriminals Exploit Popular Godot Game Engine to Infect Thousands of Computers          *

APT-C-60 Leverages Trusted Platforms to Launch Attacks on Japan          *

Lazarus Group Exploits macOS Extended Attributes to Bypass Detection          *

Bootkitty: Researchers Uncover the First UEFI Bootkit Targeting Linux Kernels          *

IBM Fixes RCE Vulnerabilities in Data Virtualization Manager and Security SOAR          *

VMware Addresses High-Severity Vulnerabilities in Aria Operations with New Patches          *

Critical GitLab Vulnerability Allows Attackers to Escalate Privileges          *

NVIDIA UFM Vulnerability Exposes Systems to Privilege Escalation and Data Tampering          *

New DDoS Campaign Targets IoT Devices and Server Misconfigurations          *

Critical Flaws in WordPress Anti-Spam Plugin Put Over 200,000 Sites at Risk of Remote Attacks          *

Chinese Hackers Exploit GHOSTSPIDER Malware to Target Telecoms in Over 12 Countries          *

Keycloak Releases Critical Security Updates to Fix Multiple Vulnerabilities          *

Palo Alto Networks Alerts to GlobalProtect App Vulnerability with Public Exploit Code (CVE-2024-5921)          *

Starbucks and Grocery Stores Targeted in Blue Yonder Ransomware Attack          *

RomCom Leverages Zero-Day Firefox and Windows Vulnerabilities in Advanced Cyberattacks          *

SpyLoan Apps Exploit Social Engineering to Steal User Data          *

Bingcom XSS Vulnerability Exposed: Attackers Could Send Malicious Crafted Requests          *

The Face of Deception Phishing Scams Using Government IDs and Facial Recognition          *

Hidden Risk in the Fortune 1000: 30,000 Exposed APIs and 100,000 Vulnerabilities Discovered          *

Microsoft 365 Outage Disrupts Exchange, Teams, and SharePoint Services          *

Massive Credit Card Database of 1,221,551 Records Leaked on Dark Web          *

7-Zip Flaw Exposes Systems to Remote Code Execution          *

Team Software Breach: Hackers Gain Unauthorized Access to Network Infrastructure          *

New Phishing Scheme Exploits Google Docs and Weebly          *

North Korean Hackers Exploit AI-Driven Scams and Malware on LinkedIn to Steal $10M          *

Nearest Neighbor Attacks: Russian APT Infiltrates Targets via Exploited Nearby Wi-Fi Networks          *

Critical Veritas Enterprise Vault Vulnerability Enables Remote Code Execution          *

Malicious Python Crypto Library Update Steals Private Keys Through Telegram          *

Critical Vulnerability in FluentSMTP Plugin Exposes Over 300,000 WordPress Sites to Potential Takeover          *

Yakuza Victim Data Exposed in Cyberattack on Japanese Agency          *

Hackers Exploit Avast Anti-Rootkit Driver to Bypass Security Defenses          *

Google Uncovers GLASSBRIDGE Pro-China Influence Network Using Fake News Sites          *

Multiple Vulnerabilities in D-Link End-of-Life Routers Allow Remote Code Execution          *

Faux ChatGPT and Claude API Packages Deliver JarkaStealer Malware          *

NodeStealer Malware The Latest Cyber Threat to Facebook Advertisers and Credit Card Holders          *

APT-K-47 Leverages Hajj-Themed Lures to Deploy Advanced Asyncshell Malware          *

Wowza Streaming Engine Flaws Expose Thousands of Servers to Security Risks          *

Cyberattack Takes Down Systems of Gambling Giant IGT          *

WinZip Vulnerability Allows Execution of Malicious Code          *

Meta Removes 2 Million Accounts Tied to Pig Butchering Scams          *

US Firm Breached by Hackers via Russian Wi-Fi in Nearest Neighbor Attack          *

Citrix Session Recording Vulnerabilities Being Actively Exploited by Threat Actors          *

Russian Cyber Spies Unleash HatVibe and CherrySpy Malware          *

Over 2,000 Palo Alto Firewalls Compromised by Newly Discovered Vulnerabilities          *

Pro-Trans Rights Hackers Breach Andrew Tate’s The RealWorld Website          *

Sensitive Data Leaked Through Apache NiFi Debug Logs          *

Snow Brand Australia Confirms Ransomware Attack by SafePay          *

New Zealand Importer Triton Sourcing & Distribution Confirms Ransomware Attack          *

M-Files Releases Fixes for File Inclusion and Authentication Bypass Vulnerabilities          *

Vietnam Cracks Down on Infostealers: VietCredCare and DuckTail Uncovered          *

Chinese Hackers Deploy WolfsBane Malware to Target Linux Systems          *

Researchers Unveil FrostyGoop Malware Targeting ICS Devices          *

AnyDesk Security Flaw CVE-2024-52940 Allows IP Address Exposure - Patch Immediately          *

Versa Director Under Attack Critical CVE-2024-42450 Vulnerability Exposes Networks to Risk          *

Volt Typhoon Targeting U.S. Critical Infrastructure to Establish Persistent Access          *

Fintech Leader Finastra Probes Data Breach Following SFTP Hack          *

Hackers Exploit Misconfigured Servers to Hijack Live Sports Streaming          *

Cyberattack on French Hospital Compromises Health Data of 750,000 Patients          *

Decades-Old Vulnerabilities Identified in Ubuntu's Needrestart Tool          *

Unsecured Jupyter Notebooks Hijacked by Hackers for Illegal Sports Streams          *

Oracle Agile PLM Zero-Day Exploited in Attacks          *

Apple Issues Critical Security Patches for Exploited Vulnerabilities in macOS and iOS          *

Ngioweb Botnet Exploits IoT Devices to Power NSOCKS Residential Proxy Network          *

CISA Flags Progress Kemp LoadMaster Vulnerability as Actively Exploited in Attacks          *

Chinese Hackers Target T-Mobile and U.S. Telecoms in Expanded Espionage Campaign          *

Palo Alto Networks Patches Exploited Zero-Day Vulnerabilities in Operation Lunar Peek          *

Helldown Ransomware Variant Now Targeting VMware and Linux Platforms          *

Ford Investigates Possible Data Breach After Hackers Claim to Have Stolen Information          *

Apache Kafka Vulnerability Exposes Systems to Privilege Escalation Attacks          *

Swiss Cyber Agency Issues Warning on QR Code Malware in Email Scams          *

US Space Tech Leader Maxar Reveals Employee Data Breach          *

AnnieMac Home Mortgage Reports Data Breach Impacting Over 171,000 Individuals          *

Cybercriminals Use SEO Poisoning Attack to Redirect Shoppers to Fake Online Stores          *

SQL Injection Vulnerability Exposed in Zoho Corp's ManageEngine ADAudit Plus          *

Ransomware Attack Hits Oklahoma Medical Center, Affecting 133,000          *

Sitting Ducks DNS Attacks Expose Global Domains to Threats          *

Phishing Attacks Surge with SVG Attachments to Bypass Detection          *

Critical Flaw in WordPress Security Plugin Grants Admin Access          *

SilkSpecter Targets Black Friday Shoppers with Sophisticated Phishing Campaign          *

OpenBSD Double-Free Vulnerability Enables Exploitation of NFS Client and Server          *

Tibetan Community Under Siege TAG-112's Waterholing Attack Exposed          *

Icinga 2 Vulnerability Enables Impersonation and Remote Code Execution          *

Researchers Expose Two-Step Phishing Attack Using Microsoft Visio Files          *

Apache Airflow Flaw Puts Sensitive Configuration Data at Risk          *

WP Time Capsule Plugin Flaw Puts Over 20,000 Websites at Risk of Takeover          *

T-Mobile Confirms Breach in Latest Wave of Telecom Cyberattacks          *

Fake AI Video Generators Spread Infostealers on Windows and macOS          *

GitHub Repositories Exploited with Malicious Commits to Frame Security Researcher          *

Laravel Security Alert Critical Vulnerability Exposes Unauthorized Access Risk          *

Melofee Backdoor Evolves New Variant Targets Linux Systems with Enhanced Stealth Capabilities          *

BrazenBamboo APT Exploits Zero-Day Vulnerability in FortiClient VPN          *

Micon Office National Confirms Ransomware Attack in Wollongong          *

GeoVision Zero-Day Exploited by Botnet to Deploy Mirai Malware          *

Windows Users at Risk Russian Hackers Exploit Zero-Day Vulnerability with Simple File Actions          *

Sitting Ducks Attacks Hijacking Known Brands and Government Domains          *

Palo Alto Networks Confirms Exploitation of New Firewall Zero-Day Vulnerability          *

Iranian Hackers Exploit Fake Job Offers to Target Aerospace Industry          *

Cybercriminals Operate 4,700 Fake Shopping Sites to Steal Credit Card Information          *

Data Breach at JewishCare NSW Affects Sensitive Personal Information          *

Hive0145 Intensifies European Attacks with Strela Stealer Malware          *

Hamas-Linked WIRTE Deploys SameCoin Wiper in Aggressive Attacks on Israel          *

B2B Data Aggregator Breach Exposes Information of 122 Million Users          *

Communications of U.S. Government Officials Exposed in Recent Telecom Breach          *

Chrome 131 Released with Improved Security and Enhanced Performance          *

Amazon Acknowledges Employee Data Breach Through Third-Party Vendor          *

Halliburton Discloses $35M Loss Due to Ransomware Attack          *

Microsoft Patch Tuesday Security advisory- November 2024          *

GitHub Developers are Targeted by GoIssue, a Phishing Tool          *

Citrix and Fortinet Address Critical Vulnerabilities with Security Patches          *

TA455s Iranian Dream Job Campaign Targets Aerospace Sector with Malware          *

North Korean Hackers Use Flutter Apps to Evade macOS Security          *

Siemens Issues Emergency Patch for Critical TeleControl Server Vulnerability          *

Schneider Electric Alerts on Several Vulnerabilities in Modicon Controllers          *

FBI Alerts U.S. Organizations to Fake Emergency Data Requests from Cybercriminals          *

Ymir Ransomware Teams Up with RustyStealer in New Attacks          *

New Android Malware SpyAgent Captures Screenshots of Users Devices          *

Tor Network Hit by IP Spoofing Attack Through Non-Exit Relays          *

Threat Actors Allegedly Announce Leak of 489 Million Records from Instagram          *

Cyber Attack on Western Sydney University Compromises Personal Data          *

Fake Antivirus App Launches Sophisticated SpyNote Malware Attack on Android Users          *

Australian Non-Profit ANU Enterprise Confirms Ransomware Attack          *

Silent Skimmer Resurfaces with New Tactics Targeting Payment Gateways          *

FakeBat Loader Resurfaces, Using Malicious Google Ads to Target Notion Users          *

Machine Learning Toolkit Vulnerabilities Expose Servers to Hijacking and Privilege Escalation          *

HPE Releases Critical Security Patches for Vulnerabilities in Aruba Access Points          *

Pro-Russian Hacktivists Attack South Korea Amid North Korea’s Entry into Ukraine War          *

Hackers Exploit Excel Files to Deploy Remcos RAT on Windows Systems          *

Australian Firm Goodline Hit by RansomHub Ransomware Attack          *

DDoS Attack Targets South Korean Defense Ministry          *

Scammers Target UK Seniors with Fake Winter Fuel Payment Texts          *

US Agency Warns Employees to Limit Phone Use After China’s ‘Salt Typhoon’ Hack          *

GodFather Malware Expands to Over 500 Banking and Crypto Applications          *

IcePeony and Transparent Tribe Leverage Cloud-Based Tools          *

Unpatched Vulnerabilities in Mazda Connect Allow Hackers to Install Persistent Malware          *

Ethereum Smart Contracts Facilitate Evasive C2 in New Supply Chain Attack          *

High-Risk Flaw in Popular WordPress Theme Threatens Thousands of Sites          *

AndroxGh0st Malware Uses Mozi Botnet to Exploit IoT Devices and Cloud Services          *

CISA Issues Alert on Active Exploitation of Critical Vulnerability in Palo Alto Networks Systems          *

Remote Attackers Could Exploit Cisco Desk Phone Vulnerability to Access Sensitive Data          *

Apache ZooKeeper Security Alert Critical Vulnerability Exposes Admin Server (CVE-2024-51504)          *

D-Link NAS Devices Under Threat CVE-2024-10914 Command Injection Flaw Puts 61,000+ Devices at Risk          *

Malicious npm Packages Deploy Data-Stealing Malware Targeting Roblox Users          *

Texas Oilfield Supplier Newpark Disrupted by Ransomware Attack          *

New CRONTRAP Malware Campaign Targets Windows Systems with Linux Backdoor          *

SteelFox and Rhadamanthys Malware Leverage Copyright Scams and Driver Exploits to Attack Victims          *

North Korean Hackers Deploy New macOS Malware Targeting Cryptocurrency Firms          *

North Korean Hackers Adopting New Tactics to Secure Remote Jobs          *

Interlock Ransomware Strikes US Healthcare, IT, and Government Sectors          *

Aruba Access Points Vulnerable to Critical Attack CVE-2024-42509 (CVSS 9.8)          *

Cisco NDFC Vulnerability Attackers Gain Unfettered Access to Networks (CVE-2024-20536)          *

Gootloader Malware Campaign Targets Bengal Cat Owners in Australia          *

Privilege Escalation Vulnerability Discovered in Veritas NetBackup for Windows          *

Authentication Bypass Vulnerability Discovered in Veeam Backup Enterprise Manager          *

Researcher Reveals 36 Vulnerabilities in IBM Security Verify Access          *

VEILDrive Attack Leverages Microsoft Services for Stealthy Malware Distribution          *

Hackers Intensify Use of Winos4.0 Post-Exploitation Kit in Cyber Attacks          *

Cyberattack on Microlise Disrupts Tracking Services for DHL and Serco          *

Proof-of-Concept Exploits Released for Critical Symlink Vulnerability in Apple’s iOS CVE-2024-44258          *

Critical Vulnerability in Cisco URWB Access Points (CVE-2024-20418, CVSS 10) Enables Remote Takeover          *

Hackers Exploit AV EDR Bypass Tool from Cybercrime Forums to Compromise Endpoints          *

APT36 Hackers Exploit Windows Devices with ElizaRAT Malware          *

ClickFix Deceives Users with Fake Error Messages to Deploy Malicious Code          *

New 'ToxicPanda' Android Malware Targets Users with Fraudulent Bank Transfers          *

Synology Alerts Users to Critical Zero-Click RCE Vulnerability Affecting Millions of NAS Devices          *

Ransomware Attack Exposes Personal Data of 500,000 Columbus Residents          *

Critical Remote Exploitation Vulnerability in Century Systems Routers          *

Critical Vulnerability in ZoneMinder (CVE-2024-51482) Exposes SQL Databases          *

Nokia Probes Potential Breach Following Hacker’s Claim of Stolen Source Code          *

DocuSign Envelopes API Exploited to Send Realistic Phishing Invoices          *

Google Issues Warning on Actively Exploited CVE-2024-43093 Vulnerability in Android System          *

Saint Xavier University Data Breach Impacts 210,000 Individuals          *

Okta Verify Agent for Windows Vulnerability Exposes User Passwords to Attackers          *

U.S. Soccer Federation Experiences Data Security Incident          *

New FakeCall Malware Variant Exploits Android Devices to Impersonate Banking Calls          *

Unpatched XSS Vulnerability in pfSense Allows Remote Exploits, PoC Published          *

Phishing Campaign Targets ChatGPT Users Across the Globe          *

LightSpy iOS Malware Updated with 28 New Malicious Plugins          *

MediaTek Security Bulletin Exposes High-Risk Vulnerabilities in Mobile Chipsets          *

LastPass Warns Users of Scam Support Centers Seeking to Capture Personal Data          *

Unveiling Interlock: The New Ransomware Targeting FreeBSD Servers          *

LiteSpeed Cache Plugin Vulnerability Could Grant Unauthorized Admin Access          *

Google’s AI Tool Big Sleep has identified a zero-day vulnerability in the SQLite Database Engine          *

Critical Remote Code Execution Vulnerability in qBittorrent Allows Attackers to Inject Malicious Scripts          *

Chinese Hackers Breach Canadian Government Systems, Steal Sensitive Data          *

North Korean Group Jumpy Pisces Tied to Play Ransomware Operation          *

Emeraldwhale Attack Targets Misconfigured Git Configurations          *

SYS01 Infostealer Campaign Leverages Meta Ads to Target Millions Globally          *

CrossBarking Vulnerability in Opera Browser Enables Account Hijacking by Malicious Extensions          *

Okta Reveals AD/LDAP DelAuth Authentication Vulnerability, Advises Customer Log Review          *

18 Year Old Vulnerability in X.Org Server Exposes Systems to Potential Attacks          *

Supply Chain Attack on Widely Used Lottie Player Library Targets Web3 Wallets          *

A Sophisticated Vishing Attack Threatening Mobile Banking Security          *

LA Housing Authority Confirms Cactus Ransomware Breach          *

Safeguarding the Healthcare Supply Chain from Russian Ransomware Threats          *

CISA Alerts on Major Software Vulnerabilities in Industrial Devices          *

PoC Exploit Released for Spring WebFlux Authorization Bypass          *

Critical Vulnerability in Apache Lucene.NET Exposes Users to Remote Code Execution          *

Hikvision Network Cameras Vulnerable to Credential Exposure Patch Released          *

Over One Thousand Online Shops Compromised with Fake Product Listings          *

Yahoo Reveals NetIQ iManager Vulnerabilities Enabling Remote Code Execution          *

Data Breach at Mystic Valley Elder Services Affects 87,000 Individuals          *

Iranian Hackers Target Olympics and Surveillance Cameras, Warn US and Israel          *

Sophos Reveals Ongoing Cyber Attacks by Chinese Threat Groups on Network Devices          *

Microsoft: Chinese Hackers Exploit Quad7 Botnet to Steal Credentials          *

Hackers Exploit Critical Zero-Day Vulnerability in PTZ Cameras          *

Interbank Confirms Data Breach Following Unauthorized Data Leak of Customer Information          *

QNAP Releases Patch for Second Zero-Day Vulnerability Exploited at Pwn2Own for Root Access          *

Critical Denial-of-Service Vulnerability in Squid Proxy Server          *

A Critical 9.8 Severity Vulnerability in IBM Power Systems          *

Urgent Chrome Security Update Addresses Critical CVE-2024-10487 and 10488 Vulnerabilities          *

Notorious WrnRAT Spread as Gambling Games          *

Free Unofficial Patches Released for New Windows Themes Zero-Day Vulnerability          *

PSAUX Ransomware Strikes 22,000 CyberPanel Servers in Widespread Attack          *

Open-Source AI and Machine Learning Models Exposed to Vulnerabilities          *

Apple Addresses More Than 70 Vulnerabilities in iOS, macOS, and Other Products          *

Dutch Police Disrupt RedLine and MetaStealer Info Stealers in Operation Magnus          *

New Tool Circumvents Google Chrome's Latest Cookie Encryption System          *

Russia Deploys Windows and Android Malware to Target Ukrainian Conscripts          *

Chinese Hackers Exploit CloudScout Toolset to Steal Session Cookies from Cloud Services          *

Microsoft Windows Kernel Vulnerability OS Downgrade Exploit Puts Users at Risk          *

France’s Second-Largest Telecom Company, Free, has Confirmed it was Targeted in a Cyberattack          *

Critical Vulnerability in HashiCorp Vault (CVE-2024-7594) Unrestricted SSH Access Poses Security Risks          *

Critical Vulnerability in Rancher Exposes vSphere Credentials in Plaintext          *

Change Healthcare Data Breach Impacts 100 Million Americans          *

HeptaX Campaign Exposes Healthcare Sector to Data Theft and Manipulation          *

Critical Authentication Bypass Flaw Exposed for WhatsUp Gold Users          *

Delta Sues CrowdStrike Following Tech Outage That Led to Flight Cancellations          *

Critical RKE2 Vulnerability Allows Privilege Escalation on Windows Nodes          *

Senator Claims Lax Domain Registrars Enable Russian Disinformation Campaigns          *

LinkedIn Bots and Spear Phishing Campaigns Target Job Seekers          *

LockBit Ransomware Campaign Targets macOS Systems          *

Fog Ransomware Exploits SonicWall VPN Vulnerabilities to Infiltrate Corporate Networks          *

OPA Vulnerability on Windows Exposes NTLM Hashes          *

Mallox Ransomware Vulnerability Allows Victims to Recover Files          *

New Trojan Framework Poses Significant Threat to Brazilian Banking Customers          *

Critical Authentication Bypass Vulnerability in wpDiscuz Plugin Poses Risk to Over 80,000 Websites          *

New Cisco ASA and FTD Features Mitigate VPN Brute-Force Password Attacks          *

APT29 Emulates AWS Domains to Harvest Windows Credentials          *

Advanced Rust-Based Embargo Ransomware Emerges as a New Threat to US Companies          *

Threat Actors Reportedly Selling Database of 1,000 NHS Email Accounts          *

The Prometei Botnet A Growing Menace in the World of Cryptojacking          *

Notorious Hacker Group Launches New Cloud-Based Crypto Mining Attacks          *

Authentication Bypass Vulnerability Found in One Identity Safeguard for Privileged Sessions          *

Security Researchers Find Command Injection Vulnerability in Wi-Fi Alliance Testing Suite          *

Apple Unveils PCC Source Code for Researchers to Uncover Cloud AI Security Bugs          *

Okta Verify for iOS Vulnerability Could Lead to Unauthorized Access          *

Amazon Seizes Domains Tied to Data Theft via Rogue Remote Desktop Campaign          *

Black Basta Ransomware Masquerades as IT Support on Microsoft Teams to Breach Networks          *

Critical Security Vulnerabilities Discovered in Siemens InterMesh          *

Xerox Printers Exposed to Remote Code Execution Vulnerabilities          *

North Korean Cyber Group Pungsan Infiltrates Open-Source Repositories with Backdoored npm Packages          *

OnePoint Patient Care Data Breach Affects Nearly 800,000 Individuals          *

UnitedHealth Reports Data Breach at Change Healthcare Exposing 100 Million Records          *

Landmark Insurance Administrator Reports Data Breach Affecting 800,000 Individuals          *

Henry Schein Reports Data Breach One Year After Ransomware Attack          *

GitLab Fixes HTML Injection Vulnerability Enabling XSS Attacks          *

Cisco Fixes Vulnerability Exploited in Widespread Brute-Force Attacks          *

New WarmCookie Malware Targets Organizations Across Sectors          *

Nvidia Releases Security Patches for Windows and Linux Graphics Drivers          *

AWS CDK Vulnerability Exposes Users to Account Takeover Threats          *

Samsung Galaxy S24 Exploited at Pwn2Own Ireland 2024          *

CISA Alerts on Active Attacks Targeting Microsoft SharePoint Vulnerability (CVE-2024-38094)          *

WhatsApp Introduces Encrypted Contact Databases for Secure Syncing Across Devices          *

Lazarus Hackers Exploit Google Chrome Zero-Day Through Fake DeFi Game          *

Chrome Patches High-Risk Vulnerabilities in Latest Stable Release          *

Fortinet Alerts on Actively Exploited Vulnerability in FortiManager          *

IcePeony Hackers Target Public Web Servers to Deploy Webshells          *

Grayscale Investments Suffers Data Breach, Exposing Records of Approximately 693,000 Users          *

Threat Actors Abusing Docker API Servers for SRBMiner Cryptomining Attacks          *

Gophish Framework Leveraged in Phishing Campaigns to Deliver Remote Access Trojans          *

VMware Releases vCenter Server Update to Address Critical Remote Code Execution Vulnerability          *

Critical Vulnerabilities Found in mbNET.mini and Helmholz Industrial Routers          *

Johnson & Johnson Insurance Firm Hit by Data Breach          *

Cyberattack Disrupts Winnebago Public Schools, Forcing Service Shutdowns          *

Chinese Nation-State Group APT41 Targets Gambling Industry for Financial Gains          *

Over 6,000 WordPress Sites Hacked to Deploy Plugins Distributing Infostealers          *

Bumblebee Malware Resurfaces Following Recent Law Enforcement Crackdown          *

Microsoft Patches Critical Kernel Streaming Flaw          *

Red Barrels Hit by Cyberattack, Outlast Trials Delayed          *

Atlassian Issues Patches for Bitbucket, Confluence, and Jira          *

Critical Security Flaw in Synology Camera Firmware Puts Devices at Risk of RCE and DoS Attacks          *

Beast Ransomware RaaS Service Platform Targets Windows, Linux, and VMware ESXi          *

Critical File Reading Vulnerability Found in Vendure E-commerce Platform          *

Spring Framework Vulnerability Poses Path Traversal Risk in Web Applications          *

Critical Vulnerability in SICK Products Opens Systems to Remote Attacks          *

Internet Archive Restores Services After Website Defacement and DDoS Attack          *

Cyprus Prevents Cyberattack on Government's Main Online Portal          *

Brazil Arrests ‘USDoD,’ Hacker Involved in FBI InfraGard Breach          *

Internet Archive Hit by Another Breach Caused by Stolen Access Tokens          *

Severe Flaws in E2EE Cloud Storage Put Millions of Users at Risk          *

Hackers Exploit Roundcube Webmail Vulnerability to Steal User Logins          *

Vietnamese Threat Actor’s Complex Strategy Targeting Digital Marketing Professionals          *

Radiant Capital Reports $50 Million in Digital Coins Stolen After Account Breaches          *

Hackers Target Ukrainian Conscripts with MeduzaStealer Malware          *

New Spectre Bypass Impacts Intel and AMD CPUs on Linux          *

Fortigate SSLVPN Vulnerability Actively Exploited by Hackers          *

ESET Partner Breached to Deliver Data Wipers to Israeli Organizations          *

SolarWinds Web Help Desk Vulnerability Enables Remote Code Execution          *

Nidec Confirms Data Breach After Ransomware Attack          *

Cisco Takes DevHub Portal Offline After Data Leak          *

Omni Family Health Data Breach 470,000 Individuals' Personal Data Compromised          *

F5 BIG-IP Security Alert High-Severity Elevation of Privilege Vulnerability Patched          *

Undercover North Korean IT Workers Engaging in Data Theft and Extortion          *

Patch Grafana Now to Mitigate 9.9 Severity RCE Vulnerability          *

Hybrid Work Uncovers Emerging Print Security Vulnerabilities          *

Microsoft Discloses macOS Vulnerability Allowing Bypass of Safari's Privacy Controls          *

BianLian Ransomware Group Targets Boston Children's Health Physicians in Alleged Attack          *

Researchers Expose Cicada3301 Ransomware Operations and Affiliate Network          *

Microsoft Alerts Customers to Month-Long Security Log Loss          *

Fake Google Meet Errors Deliver Info-Stealing Malware          *

Russian RomCom Attacks Unleash New SingleCamper RAT Variant on Ukrainian Government          *

Ragic Enterprise Cloud Database Patches Critical Vulnerabilities          *

Varsity Brands Hit by Data Breach, Leaving 65,000 Vulnerable to Identity Theft          *

Cisco Releases Patches for High-Severity Vulnerabilities in Analog Telephone Adapters          *

Apache Solr Addresses Critical Authentication Bypass Vulnerability with New Patch          *

VMware Issues Patch for High-Severity SQL Injection Vulnerability in HCX Platform          *

Critical Vulnerability in Kubernetes Image Builder Exposes Nodes to Root Access          *

SolarWinds Web Help Desk Flaw Actively Exploited in Attacks          *

Astaroth Banking Malware Reappears in Brazil Through Spear-Phishing Attacks          *

Google Reports 70 Percent of Vulnerabilities Exploited in 2023 Were Zero Day Bugs          *

Iranian Hackers Selling Access to Critical Infrastructure as Brokers          *

ScarCruft a North Korean Group Exploits Windows Zero-Day to Spread RokRAT Malware          *

Google Chrome Patches Critical Security Flaws          *

New Malware Campaign Uses PureCrypter to Distribute DarkVision RAT          *

EDRSilencer: Red Team Tool Exploited to Bypass Security Defenses          *

WordPress Jetpack Plugin Patches Critical Vulnerability in 101 Updates          *

Splunk Enterprise Update Addresses High-Severity Remote Code Execution Vulnerabilities          *

Critical Vulnerability Patched in GitHub Enterprise Server          *

Nation-State Actors Exploit Ivanti CSA Vulnerabilities for Network Breaches          *

New Linux Variant of FASTCash Malware Targeting Financial Sector          *

Cisco Probes Potential Breach Following Sale of Stolen Data on Hacking Forum          *

Entry Points in Python, npm, and Open-Source Ecosystems Vulnerable to Supply Chain Attacks          *

TrickMo Malware A Sneaky Threat to Android Users' PIN Security          *

Gryphon Healthcare and Tri-City Medical Center Announce Major Data Breaches          *

Keycloak Patches CVE-2024-3656 Allowing Low-Privilege User Access to Admin Rights          *

Australian Owner of Strike Bowling and Other Venues Acknowledges Ransomware Attack          *

Google has alerted users that uBlock Origin and other extensions might be disabled shortly          *

Progress Fixes Critical Security Vulnerability CVE-2024-8015 (CVSS 9.1) in Telerik Report Server          *

FBI Introduces Fake Cryptocurrency to Reveal Extensive Manipulation in the Crypto Market          *

Pokémon Developer Confirms Data Breach Leaking Employee and Game Data          *

HashiCorp Vault Vulnerability (CVE-2024-9180) May Lead to Privilege Escalation          *

OilRig Strikes Again Windows Kernel Flaw Exploited in UAE and Gulf Espionage Campaign          *

Researchers Identify Critical Security Flaws in Industrial MMS Protocol Libraries          *

GitLab Releases Critical Patches for Pipeline Execution, SSRF, and XSS Vulnerabilities          *

Casio Confirms Customer Data Compromised in Ransomware Attack          *

CreditRiskMonitor Data Breach Exposes Employee Information          *

SonicWall SSL-VPN SMA1000 and Connect Tunnel Windows Client Vulnerabilities Exposed          *

Unpatched MiCollab Vulnerability Exposes Systems to Unauthorized Access          *

Fidelity Investments Announces Data Breach Affecting Over 77,000 Customers          *

Experts Warn of Critical Unpatched Vulnerability in Linear eMerge E3 Security Systems          *

U.S. and U.K. Warn of Russian APT29 Hackers Targeting Zimbra and TeamCity Servers          *

Akira and Fog ransomware now exploit critical Veeam RCE flaw          *

Ukraine Arrests Operator of Illegal VPN Service Enabling Access to Runet          *

Firefox 131 Update Fixes Actively Exploited Zero-Day Vulnerability          *

Schneider Electric Warns of Serious Security Vulnerability in Industrial PCs          *

Code Execution Flaw in Apache Subversion for Windows          *

Internet Archive Faces Data Breach, Exposing 31 Million Accounts          *

Crypto-Stealing Malware Campaign Affects 28,000 Victims          *

CISA Reports Active Exploitation of Critical Fortinet RCE Vulnerability          *

Mamba Service Exploits 2FA Weaknesses to Target Microsoft 365 Accounts          *

Palo Alto Networks Issues Warning on Firewall Hijacking Vulnerabilities with Public Exploit          *

Zero-Day Alert: Three Ivanti CSA Vulnerabilities Actively Being Exploited          *

Microsoft Announces End of Servicing for Windows 11 22H2 Home and Pro Editions          *

New Tool Identifies Linux and UNIX Servers Vulnerable to CUPS RCE Exploits          *

The Gorilla Botnet has Attacked over 100 Countries With More Than 300,000 DDoS Attacks          *

Microsoft and DOJ Take Down Hundreds of Websites Operated by Russian Hackers          *

Microsoft Patch Tuesday Security advisory- October 2024          *

ADT Reports Second Data Breach in Two Months, Hacked Through Stolen Credentials          *

MoneyGram Confirms Cyberattack Resulted in Stolen Customer Data          *

American Water Halts Online Services Following Cyberattack          *

Data Breach at FBCS Impacts Comcast and Truist Bank Customers          *

MediaTek Releases Security Updates for Smartphone, Tablet, and IoT Devices          *

Qualcomm Issues Patch for Critical Vulnerabilities Affecting Snapdragon, FastConnect          *

High-Severity Vulnerabilities Patched in Latest Chrome and Firefox Updates          *

Ransomware Group Releases Allegedly Stolen Data from Kawasaki Motors          *

Data Breach at Patelco Credit Union Affects Over 1 Million Individuals          *

Vesta Control Panel Vulnerability Compromises Admin Accounts          *

Hawaii Health Center Reports Data Breach Following Ransomware Attack          *

Apple Issues Critical iOS and iPadOS Updates to Fix VoiceOver Password Exposure Vulnerability          *

Northern Ireland Police Fined £750,000 for Data Breach          *

WordPress LiteSpeed Cache Plugin Vulnerability XSS Attack Risk Alert          *

UMC Health System Redirects Patients After Ransomware Attack          *

Highline Public Schools Confirms Ransomware Attack Led to Shutdown          *

MoneyGram Denies Ransomware Involvement in Recent Cyber Incident          *

Hacking Group Targets U.S. Organizations through Spear-Phishing          *

Cisco Addresses Critical Vulnerability in Data Center Management Software          *

Dutch Police Suspect State Actor Involvement in Recent Data Breach          *

Over 4,000 Adobe Commerce and Magento Stores Compromised in CosmicSting Attacks          *

Jenkins Addresses Critical Vulnerabilities in Server and Plugins          *

FIN7 Hackers Use Deepfake Nude "Generator" Websites to Distribute Malware          *

North Korean Hackers Deploy VeilShell Backdoor in Covert Cyber Operations          *

Perfctl Malware Targets Linux Servers for Cryptocurrency Mining and Proxyjacking          *

Critical Vulnerability in Ivanti Endpoint Manager          *

14 Newly Discovered Vulnerabilities Expose 700,000+ Devices to Cyber Threats          *

China-Linked CeranaKeeper Targets Southeast Asia for Data Exfiltration          *

Fake Job Applications Deliver Dangerous More_Eggs Malware Targeting HR Professionals          *

Fake Browser Update Campaign Distributes Updated WarmCookie Malware          *

Critical Zimbra Vulnerability Poses Serious Security Risk          *

Rhadamanthys Stealer Uses AI-Driven Image Recognition to Target Crypto Wallets          *

New Cryptojacking Attack Exploits Docker API to Build Malicious Swarm Botnet          *

Data Breach at Rackspace Due to ScienceLogic Zero-Day Vulnerability          *

Israeli Cyberattack on Beirut Air Traffic Control Aims to Warn Off Iranian Planes          *

North Korean Hackers Tried to Steal Sensitive Military Data          *

Ransomware attackers are moving from on-premises systems to the cloud in order to compromise Microsoft 365 accounts          *

Three Iranian Hackers Charged in Election Interference Hack-and-Leak Campaign          *

UK Hacker Accused of $3.75 Million Insider Trading Scheme Through Hacked Executive Emails          *

Critical WordPress Plugin TI WooCommerce Wishlist Vulnerability Exposes Thousands of Sites          *

Two Critical Vulnerabilities Discovered in WatchGuard Authentication Gateway and Single Sign-On Client          *

A Data Breach Disclosed by Accounting Firm which Impacted 127,000 Individuals          *

VLC Player Vulnerability Allows Attackers to Execute Malicious Code          *

Microsoft Audio Bus Vulnerability Allows Attackers to Execute Remote Code          *

Google’s Gemini for Workspace Susceptible to Prompt Injection Attacks          *

Hackers Leverage HTML Smuggling to Deliver Sophisticated Phishing Sites          *

Russian Hackers Breach Ukrainian Security Service          *

Indian-Linked Hackers Target South and East Asian Entities, Warns Cloudflare          *

MoneyGram Confirms Cyberattack Behind Prolonged System Outage          *

Hackers Use AI-Generated Malware in Targeted Attacks          *

HPE Fixes Three Critical Vulnerabilities in Aruba Access Points          *

Critical Vulnerabilities Found in OpenPLC          *

Microsoft Flags Storm-0501 as Significant Threat in Hybrid Cloud Ransomware Campaigns          *

Millions of Kia Vehicles Exposed to Remote Hacking Vulnerabilities          *

Progress Urges Administrators to Immediately Patch Critical WhatsUp Gold Vulnerabilities          *

Critical SQL Injection Vulnerability in The WordPress Events Calendar Plugin          *

Critical Vulnerabilities Discovered in NVIDIA Container Toolkit          *

North Korean Hackers Launch New KLogEXE and FPSpy Malware in Targeted Operations          *

New RomCom Malware Variant SnipBot Discovered in Data Theft Campaigns          *

RansomHub Ransomware Employs Multiple Tactics to Bypass EDR and Antivirus Protections          *

Octo2 Android Malware Targets Banking Credentials Theft          *

CUPS Vulnerabilities Allow Remote Code Execution on Linux, With Important Limitations          *

Cisco Releases Patches for Multiple High-Severity Vulnerabilities          *

Valencia Ransomware Group Strikes Again Businesses Warned of Data Leaks and Cyber Threats          *

Researchers Warn of New Rust-Based Splinter Post-Exploitation Tool          *

macOS ChatGPT Vulnerability Could Have Allowed Persistent Spyware via Memory Feature          *

The SolarWinds Web Help Desk Vulnerability has been Demonstrated (CVE-2024-2987)          *

Mozilla Accused of Tracking Firefox Users Without Consent          *

Massive MC2 Data Leak 100M+ US Citizens' Personal Data Exposed          *

CISA Warns Hackers Use Unsophisticated Methods to Breach Industrial Systems          *

Taiwan is Accused of Waging Cyberwarfare by China          *

Researcher Reveals Cisco Smart Licensing Vulnerability Allowing Device Control by Attackers          *

Infostealer Malware Evades Chrome’s Latest Cookie Theft Defenses          *

Data Breach at U.S. Government Agency CMS Affects 3.1 Million People          *

Cyberattack on Kansas Water Plant Forces Shift to Manual Operations          *

AutoCanada Hit by Ransomware Attack: Employee Data at Risk          *

Deloitte Denies Data Breach Despite Hacker's Claims of Server Compromise          *

The New Version of Windows Server 2025 offers Hotpatching without Rebooting          *

A Android Banking Trojan New Octo2 Emerges with Device Takeover Capablities          *

FreeBSD Releases Critical Security Advisory for CVE-2024-41721 (CVSS 9.8)          *

Mandiant Provides Insights on Detecting and Preventing North Korean Fake IT Workers          *

Hackers Pose as Company HR to Deceive Employees          *

Necro Trojan Targets Popular Google Play Apps with Millions of Downloads          *

Critical Vulnerability Alert Dragonfly2's Hardcoded Key Exposes Admin Access          *

Grafana Plugin SDK Vulnerability CVE-2024-8986 Allows Unauthorized Access to Sensitive Information          *

ESET Releases Patches for Two Local Privilege Escalation Vulnerabilities in Windows and macOS Products          *

Critical Vulnerabilities Disclosed in Microchip ASF and MediaTek Wi-Fi Chipsets, Enabling Remote Code Execution          *

Hackers Claim Responsibility for Breach of Dell Employee Database          *

CISA Issues Critical Advisories for Industrial Control Systems          *

Cyber Attackers Leverage GitHub Repositories to Spread Malware          *

Chinese Hackers Leverage GeoServer Vulnerability to Spread EAGLEDOOR Malware in APAC Region          *

Telegram Banned for Ukrainian Officials Over Security Concerns          *

Update Required: Critical Authentication Bypass Vulnerability in Safeguard for Privileged Passwords (CVE-2024-45488)          *

Hertz Car Rental Platform Exposes 60,000 Insurance Claim Reports          *

Worldwide Infostealer Malware Campaign Targets Cryptocurrency Users and Gamers          *

Critical API Vulnerability Discovered in Versa Director by Versa Networks          *

High-Severity Acronis Plugin Vulnerability Poses Significant Risk          *

Chinese-Originated Noise Storms: A Surge in Spoofed Web Traffic          *

Ivanti Cloud Appliance Vulnerability Under Active Exploitation          *

Microsoft Identifies CVE-2024-37985 as Zero-Day Vulnerability in Windows          *

New SambaSpy Malware Connected to Brazil Targets Italian Users via Phishing Emails          *

Miami Authorities Arrest Suspects in $230 Million Cryptocurrency Theft          *

CISA Adds Critical Apache HugeGraph-Server RCE Flaw and Four Other Vulnerabilities to KEV Catalog          *

Microsoft Alerts on New INC Ransomware Threatening U.S. Healthcare Sector          *

Chrome 129 Patches High-Risk V8 Engine Vulnerability          *

Critical GitLab Vulnerability Exposes Users to Authentication Bypass Attacks          *

Europol Takes Down 'Ghost' Encrypted Messaging Platform Used for Criminal Activities          *

"Raptor Train" IoT Botnet Compromises More Than 200,000 Devices Globally          *

Severe Vulnerabilities in Red Hat OpenShift: CVE-2024-45496 (CVSS 9.9) and CVE-2024-7387 (CVSS 9.1)          *

Discord Introduces End-to-End Encryption for Audio and Video Calls          *

New MISTPEN Malware Deployed by North Korean Hackers to Attack Energy and Aerospace Sectors          *

WhatsUp Gold Users Beware Recent Vulnerabilities Linked to Ransomware Attacks          *

Azure Storage Explorer Exploited: Ransomware Groups Steal Sensitive Data          *

Brute Force Attacks on Accounting Software Compromise Construction Firms          *

Hackers Exploiting Selenium Grid for Deploying Exploit Kits and Proxyjackers          *

Google Chrome Adopts ML-KEM for Post-Quantum Cryptography Protection          *

Temu Denies Breach Following Hacker's Claim of Stealing 87 Million Data Records          *

Malware Attacks Targeting Cryptocurrency Users are on the Rise, According to Binance          *

VMware Plugs Critical RCE Flaw Exploited by Chinese Hackers          *

Russian Hacker Group Unleashes .NET Built Ransomware Attacks          *

Data from over 1,000 ServiceNow Instances has been found to be Leaking          *

Health and Government Sectors Report Highest Data Breaches in Early 2024          *

Rhysida Ransomware Group Demands $5.8M Ransom for Seattle-Tacoma Data          *

Microsoft Resolves Bug Causing Microsoft 365 Apps to Crash While Typing          *

D-Link WiFi Routers Under Attack Critical Vulnerabilities Exposed          *

NixOS Package Manager Flaw Exposes Critical Vulnerability          *

Access Sports Data Breach Affects 88,000 Due to Ransomware Attack          *

Cryptocurrency Users on LinkedIn are Targeted by North Korean Hackers with RustDoor Malware          *

Remote Code Execution Flaw Fixed in Google Cloud Platform Composer          *

Hackers Deploy Supershell Malware in Attacks Targeting Linux SSH Servers          *

Attackers Exploit HTTP Headers in Massive Phishing Attacks to Steal Credentials          *

Increased OT Risks Due to Remote Access Tool Sprawl          *

Windows Vulnerability Exploited Through Braille 'Spaces' in Zero-Day Attacks          *

Critical Vulnerabilities Patched in Citrix Workspace App          *

Critical Remote Code Execution Vulnerability in SolarWinds Access Rights Manager          *

Critical Docker Desktop Flaws Allow Remote Code Execution          *

A New Malware Campaign Targeting Microsoft Office          *

Ivanti Alerts on Active Exploitation of Recently Patched Vulnerability in Cloud Appliance          *

"Hadooken" Linux Malware Targets Oracle WebLogic Servers          *

Palo Alto Networks Releases Security Updates to Fix Multiple Vulnerabilities          *

Apple Fixes Critical Vision Pro Vulnerability to Thwart GAZEploit Attacks          *

Fraudulent TrickMo Android Trojan Exploits Accessibility Services          *

Fortinet Confirms Data Breach Following Hacker Leak of 440 GB          *

Warning: Vo1d Malware Infects 1.3 Million Android TV Boxes Globally          *

Urgent: GitLab Issues Patch for Critical Flaw Enabling Unauthorized Pipeline Execution          *

New Android Malware 'Ajina.Banker' Targets Financial Data and Circumvents 2FA Through Telegram          *

Hackers Actively Targeting Progress WhatsUp RCE Vulnerability in the Wild          *

Adobe Issues Critical Patches for Multiple Products          *

Cisco Releases Patches for High-Risk Vulnerabilities in Network Operating System          *

Systemic vulnerability has emerged from tech stack uniformity          *

The Quad7 Botnet has Expanded to Target SOHO Routers and VPN Appliances          *

DragonRank Black Hat SEO Campaign Targets IIS Servers in Asia and Europe          *

DDoS Attacks Surge, Governments Become Prime Targets          *

Malicious Fake Password Manager Targets Python Developers in Coding Test Scam          *

Chrome 128 Update Addresses High-Severity Security Vulnerabilities          *

Data Breach Alert 1.7 Million Affected in Slim CD Security Incident          *

Microsoft Patch Tuesday Security advisory- September 2024          *

Microsoft Resolves Windows Server 2019 Boot and Performance Issues in September 2024 Update          *

CosmicBeetle Launches Custom ScRansom Ransomware, Partnering with RansomHub          *

Ivanti Resolves Critical RCE Vulnerability in Endpoint Management Software          *

Ransomware Strikes London High School Students Dismissed as Authorities Investigate          *

Chinese Hackers Leverage Open-Source Tools in Sophisticated Cyber Attacks          *

Cryptocurrency Scams Surged in 2023 says FBI Report          *

Young Gamers at Risk: Top Games Targeted by Cyber Attacks          *

Ransomware Campaigns Actively Exploiting Critical Flaw in SonicWall SSLVPN          *

Windows Elevation of Privilege Vulnerability CVE-2024-26230 PoC Exploit Released          *

Red Hat Patches Pulpcore Authentication Bypass Vulnerability          *

RAMBO Attack Exploits RAM to Steal Data from Air-Gapped Systems          *

IBM Product Vulnerabilities Enable Attackers to Exploit and Launch DOS Attacks          *

BlindEagle Targets Colombian Insurance Sector with BlotchyQuasar Attack          *

BBTok Misuses Windows Utility Tool to Avoid Detection          *

SpyAgent Android Malware Targets and Steals Crypto Recovery Phrases from Images          *

Critical Vulnerability CVE-2024-7591 Identified in Progress LoadMaster          *

A Critical Flaw in IBM webMethods Integration Fixed Immediately          *

Car Rental Giant Avis Reveals Data Breach Affecting Customer Information          *

North Korean Hackers Use LinkedIn Job Scams to Spread COVERTCATCH Malware          *

Cyberwar on Malaysian Politicians Unleashed by Babylon RAT          *

A Critical Vulnerability in OpenStack Ironic (CVE-2024-44082) should be Patched by Users          *

Veeam Releases Patches for High-Severity Vulnerabilities in Enterprise Software          *

VMware Fusion Patch Released to Fix High-Severity Code Execution Vulnerability          *

Pavel Durov Condemns Outdated Laws Following Arrest Linked to Telegram Criminal Activity          *

LiteSpeed Cache Vulnerability Puts 6 Million WordPress Sites at Risk of Takeover Attacks          *

Russian Military Hackers Involved in Critical Infrastructure Attacks          *

Apache Addresses Critical Remote Code Execution Vulnerability in OFBiz          *

Fake OnlyFans Checker Tool Spreads Lummac Stealer Malware to Hackers          *

D-Link Alerts Users to Critical Code Execution Vulnerabilities in Legacy Router Model          *

Cisco Addresses Critical Security Flaws in Smart Licensing Utility          *

Android Users Advised to Install Latest Security Updates to Patch Actively Exploited Vulnerability          *

Hackers Inject Malicious JavaScript into Cisco Store to Steal Credit Card Details and Credentials          *

Hackers Abuse Red Team Tool 'MacroPack' to Deploy Brute Ratel in Attacks          *

Crypto Flaw Enables Cloning of YubiKey Security Keys          *

Emerging Supply Chain Attack: 'Revival Hijack' Threatens Large-Scale PyPI Takeovers          *

Emansrepo Malware A New Threat to Windows Users, Delivered via HTML Files          *

Cisco Addresses Root Escalation Vulnerability in Latest Patch          *

WinRAR vulnerability exploited by hackers in attack on Russia and Belarus          *

Critical Vulnerability in Zyxel Secure Routers Allows OS Command Execution via Cookie (CVE-2024-7261)          *

Canonical Releases New Patches to Address Critical Linux Kernel Vulnerabilities in AWS          *

Hackers Deploy Fake GlobalProtect VPN Software in Latest WikiLoader Malware Attack          *

Verkada Pays $2.95 Million for Failing to Secure Data, Leading to Massive Breach          *

Login Passwords at Risk Fury Stealer Malware Spreads Globally          *

Customer Data Breach Disclosed by Business Services Ginat CBIZ          *

Ongoing Cyber Security Incident Disclosed by Transport for London          *

Hacker Exposes Data of 390 Million Users from VK, Russia's Leading Social Network          *

RansomHub Ransomware Group Strikes 210 Victims in Critical Sectors          *

Global Phishing Scam Targets Canadian Pizza Chains, Stealing Credit Card Information          *

LockBit Claims Breach of Toronto School Board, Student Information Stolen          *

Air Traffic Control Agency in Germany Suffers Cyberattack, Operations Continue Uninterrupted          *

The Sarawak Campus of Swinburne University has been hacked, Swinburne University confirms          *

Vietnamese Human Rights Defenders Targeted by Advanced Persistent Threat          *

Cicada3301 Ransomware's Linux Encryptor Targets VMware ESXi Servers          *

New Windows Vulnerability Exploited in Phishing Campaign Targeting and Originating in China          *

Fake 'noblox.js' npm Packages Target Roblox Developers, Compromising Systems          *

A silent intrusion: Godzilla Fileless Backdoors exploiting Atlassian Confluence          *

Iranian Hackers Launch Spear Phishing Attacks on WhatsApp Users          *

Severe Security Risks Exposed in Progress Software's WhatsUp Gold          *

An attack on Dick's Sporting Goods Exposed Sensitive Data          *

Researcher Faces Lawsuit for Sharing Ransomware Stolen Data with Media          *

Researchers Discover SQL Injection Vulnerability Allowing Bypass of TSA Airport Security Checks          *

Windows is Attacked by a .NET-Based Keylogger Using Weaponized Excel Documents          *

Hackers in North Korea Target Developers With Malicious NPM Packages          *

Malware Impersonates Palo Alto VPN to Target Middle East Organizations          *

Voldemort Malware Misuses Google Sheets for Data Exfiltration          *

WPS Office Patch Addresses Zero-Day Vulnerability Exploited by South Korean Hacker Group          *

FBI: RansomHub Ransomware Hits 210 Victims Since February          *

Vietnamese Human Rights Group Targeted by Ongoing Cyberattack from APT32          *

Russian Hackers Leverage Safari and Chrome Vulnerabilities in Major Cyberattack          *

Fortra Releases Critical Patch for High-Risk FileCatalyst Workflow Vulnerability          *

Cisco Fixes Multiple NX-OS Software Vulnerabilities          *

New Unicode QR Code Scam Evades Traditional Security Measures          *

BlackByte Ransomware Exploits New VMware Vulnerability in VPN Attacks          *

CrowdStrike Implements Safeguards to Mitigate Impact of Recent Outage          *

Employee Arrested for Locking Out Admins from 254 Servers in Extortion Scheme          *

TDECU MOVEit Data Breach Exposes Sensitive Info of 500,000+ Members          *

Microsoft Sway Exploits by a New QR Code Phishing Campaign to Steal Credentials.          *

Pidgin Messenger’s Official Plugin Repository Infiltrates by Malware          *

Park'N Fly Informs 1 Million Customers of Data Breach          *

U.S. Marshals Service Rejects Ransomware Gang's Breach Allegations          *

macOS HZ RAT Backdoor Targets Users of Chinese Messaging Apps          *

Volt Typhoon Hackers Exploit Versa Zero-Day Vulnerability to Compromise ISPs and MSPs          *

Major WPML Plugin Flaw Puts WordPress Sites at Risk of Remote Code Execution          *

New Chrome 0-Day Vulnerability (CVE-2024-7965) Exploited in the Wild`          *

365 Copilot Data Theft Caused by an ASCII Smuggling Flaw is Fixed by Microsoft          *

A Data Breach Involving Ransomware has been Reported by Patelco to 726,000 Customers          *

“FreeDurov” Hacktivist Campaign Launches After Telegram CEO’s Arrest          *

Dutch Regulator Hits Uber with €290 Million Fine for GDPR Breaches in U.S. Data Transfers          *

Cheana Stealer Targets Windows and macOS VPN Users with Malware Payloads          *

Small Rural Alabama Hospital Reports Major 2023 Hacking Breach          *

Microsoft Exchange Online error incorrectly flags emails as malware          *

Seattle-Tacoma Airport IT Systems Disrupted due to a cyberattack          *

SonicWall Fixes Critical SonicOS Vulnerability          *

Hundreds of Online Stores Targeted in Widespread Cyberattack          *

Critical Vulnerabilities in Traccar GPS Tracking System Could Lead to Remote Code Execution          *

Halliburton Confirms Cyberattack Leading to Systems Shutdown          *

Slack Fixes AI Vulnerability That Allowed Data Theft from Private Channels          *

Crypto Scammers Exploit McDonald's Instagram to Promote Grimace Coin          *

CISA Mandates Urgent Patch for Versa Director Vulnerability          *

A new Linux malware called 'sedexp' hides credit card skimmers using Udev rules          *

Meta exposes an Iranian hacker group targeting global political figures using WhatsApp          *

One million Dollars has been Paid as Ransom by the American Radio Relay League          *

PEAKLIGHT Downloader Used in Windows Attacks via Malicious Movie Downloads          *

Qilin Ransomware Targets VPN Credentials and Extracts Chrome Data          *

New Cthulhu Stealer Targets macOS, Exploits User Credentials and Cryptocurrency Wallets          *

Ongoing Log4j Exploits Continue to Target Unpatched Systems Two Years Later          *

CISA Warns of Active Exploitation of Dahua Vulnerabilities          *

Atlassian Releases Patches for High-Severity Vulnerabilities in Bamboo, Confluence, Crowd, and Jira          *

China-Nexus ‘Velvet Ant’ Hackers Leveraged Zero-Day Exploit to Install Malware on Cisco Nexus Switches          *

SolarWinds Patches High-Severity Vulnerability in Web Help Desk Software          *

Critical Hardware Backdoor Found in MIFARE Classic Cards, Threatens Hotel and Office Security          *

Caching Plugin Flaw Could Lead to Mass WordPress Site Exploitations          *

Cisco Fixes High-Severity Vulnerability Reported by the NSA          *

High Severity Chrome Flaw Actively Exploited in Wild fixed by Google          *

India’s Zee Media Website for Mocking floods Defaced by Bangladesh Hackers          *

MoonPeak Trojan is Used by North Korean Hackers in Cyber Attack Campaign          *

Microsoft Fixes Critical Copilot Studio Flaw Exposing Sensitive Data          *

Cryptojacking Hackers are Targteing Poorly Configured PostgreSQL Databases          *

QNAP Boosts NAS Security with New Ransomware Protection          *

Arden Clients Impacted by Data Breach: 139,000 Records at Risk          *

Digital Wallets Vulnerable to Fraudulent Transactions Using Stolen Credit Cards          *

Hackers Exploit PHP Vulnerability to Install Backdoor Malware on Windows Systems          *

CannonDesign Reports Data Breach Linked to Avos Locker Ransomware          *

Microchip Technology Reports Cyberattack Disrupting Operations          *

Czech Mobile Users are Targeted in a New Banking Credential Theft Attack          *

Styx Stealer New Threat Stealing Your Passwords          *

Ransomware Epidemic Costs Victims $460 Million in First Half of 2024          *

CISA Alerts to Critical Jenkins RCE Vulnerability Actively Exploited          *

Critical Linux Kernel Flaw Allows Direct System Access          *

Xeon Sender Tool Abuses Cloud APIs for Massive SMS Phishing Campaigns          *

Toyota Confirms Data Breach After Hackers Release Information on Forum          *

UULoader Malware Spreads Gh0st RAT and Mimikatz in East Asia          *

Jewish Home Lifecare Data Breach Affects 100,000 Individuals          *

Massive Carespring Data Breach Compromises Medical Records of 77,000 Patients          *

Zero-Day Windows Vulnerability Exploited by Lazarus Group to Deploy FudModule Rootkit          *

Massive Extortion Campaign Exploits Exposed Environment Variables in Cloud Infrastructures          *

OpenAI Disables Iranian Operation Misusing ChatGPT for Manipulating U.S. Election          *

BeaverTail Malware Uses Weaponized Games to Attack Windows Users          *

Russian Citizen Arrested for Selling Thousands of Stolen Credentials          *

Mad Liberator Uses AnyDesk Request for Data Exfiltration Using Fake Windows Update Screem          *

New ValleyRAT Malware Targets Chinese Windows Users in Multi-Stage Attack          *

Palo Alto Networks Patches Unauthenticated Command Execution Vulnerability in Cortex XSOAR          *

Malicious Search Ads are Used by Tech Support Scammers to Impersonate Google          *

Misuse of Azure Domains and Google to Spread Disinformation and Malware          *

Chinese Hackers iSoon Target European Networks          *

Bank Systems in Iran are Reportedly Targeted by a Major Cyberattack          *

Sensitive Customer Data from Thousands of NetSuite E-Commerce Sites Exposed          *

GitHub Flaw 'ArtiPACKED' Could Allow Repository Takeovers          *

National Public Data Discloses Breach Affecting Social Security Numbers          *

Massive Cloud Extortion Campaign Targets 110,000 Domains via Exposed .env Files          *

Sophisticated Phishing Attacks Hit Western and Russian Civil Organizations          *

Security Flaw in Pre-installed Verizon Demo App Poses Risk to Google Pixel Devices          *

New Banshee Stealer Malware Targets macOS with Advanced Evasion Techniques          *

Threat Actors Use Phishing Emails To Deliver Advanced Infostealer Malware          *

Malspam Attacks Targets AnyDesk and Microsoft Teams To Gain Unauthorised Access          *

Eastern Europe's NGOs and Media Face New Threats from Russian Hackers          *

China-Supported Earth Baku Grows Cyber Attacks in Europe, Middle East, and Africa"          *

Critical Remote Code Execution Vulnerability Found in SolarWinds Web Help Desk, Hotfix Released          *

New EDRKillShifter Tool Used by RansomHub Group to Disable Endpoint Detection Software          *

Ivanti Alerts of Critical vTM Authentication Bypass Vulnerability with Public Exploit          *

Black Basta Campaign Exploits Social Engineering to Deploy SystemBC Malware          *

NIST Introduces New Encryption Techniques to Defend Against Quantum Attacks          *

Cyberattack Targets AutoCanada’s Internal IT Infrastructure          *

Privilege Escalation Vulnerabilities Fixed in Zoom          *

Technical Analysis of the Zero Click Outlook RCE vulnerability          *

SAP Releases Critical Patches for Vulnerabilities in BusinessObjects and Build Apps          *

Critical Flaws in T-Head CPUs Enable Total Device Compromise          *

Microsoft Patch Tuesday Security Advisory - August 2024          *

FreeBSD Issues Patch for High-severity Vulnerability in OpenSSH          *

Critical AWS Services Flaws Alows Attackers to Perform Remote Code Execution          *

The FBI Siezed the Servers and Webistes of the Dispossessor Ransomware Operation          *

Data Breach at Kootenai Health Exposes Over 464,000 Patient Records Following Ransomware Attack          *

Microsoft Alerts on OpenVPN Vulnerabilities          *

Multiple Vulnerabilities Enable Remote Code Execution in Google Quick Share          *

Report Suggests that Fake HR Emails are Most Likely to Trick Employees          *

Trump Campaign Blames Iran for Hacking After Documents are Leaked          *

Rhysida Allegedly Stolen Data from BayHealth and Community Care Alliance          *

The U.S. Department of Justice Arrests a Person Who Helped Hackers to Get Remote Jobs in U.S. and U.K. Firms          *

EastWind Campaign Uses Malicious LNK Files to Deploy PlugY and GrewApacha Backdoors          *

Extensive Customer Information Stolen in CSC ServiceWorks Breach          *

Hacking of UK Government Systems and Emails by Russian Spies          *

North Korean Kimsuky Group Targets Universities with Phishing Attacks          *

Physical Security Firm ADT Suffers Major Data Breach          *

Shadow Resource Vector AWS Vulnerabilities Reveal by Researchers          *

Microsoft Warns of Unpatched Office Flaw Allowing Data Theft          *

Critical Jenkins Vulnerabilities Expose Servers to Remote Code Execution          *

Advanced Phishing Campaign Targeting Windows Systems          *

New AMD SinkClose Vulnerability Enables Nearly Undetectable Malware Installation          *

FBI Sounds Alarm on BlackSuit Ransomware          *

Russia Bans Signal Over Anti-Terrorism Claims          *

Critical "UnOAuthorized" Vulnerabilities Found in Microsoft Entra ID Allowing Privilege Escalation          *

NCC Group Uncovers Eavesdropping Vulnerability in Sonos Smart Speakers at Black Hat USA 2024          *

Cisco Warns of Critical Exploit for Vulnerabilities in Smart Software Manager On-Prem          *

Cisco Warns of Critical Zero-Day Vulnerabilities in End-of-Life Small Business IP Phones          *

CISA Alerts Organizations to Critical Apache OFBiz RCE Vulnerabilities          *

McLaren Health Care Systems Disrupted by INC Ransomware Attack          *

0.0.0.0 Day: MacOS and Linux Devices Affected by an 18-Year-Old Browser Vulnerability          *

State Sponsored Malware Found in Microsoft and Google Cloud Storage          *

North Korean Cyber Espionage Targets University Academics          *

Cisco Sounds Alarm on Severe RCE Vulnerabilities in Legacy IP Phones          *

Fake AI Editor Ads on Facebook Infect Users with Password-Stealing Malware          *

New Go-Based Backdoor Targets South Asian Media via Microsoft Graph API          *

Self-Spreading Worm Named CMoon Targets High-Value Russian Entities          *

Roundcube Webmail Vulnerabilities Allows Access to Email and Password          *

Apple's macOS Sequoia Improves Gatekeeper to Block Unauthorized Software          *

Critical Downgrade Attack Reintroduces Vulnerabilities in Patched Windows Systems          *

Critical Remote Code Execution Vulnerbility in Progress WhatsUp Gold is being Abused          *

Microsoft Azure Faces Significant Outage, Impacting North American Users          *

Critical Security Fixes in Latest Chrome and Firefox Updates          *

13000 School Devices Erased in an Attack on Moble Guardian          *

National Public Data Suffered a Massive Breach Leaking 2.9 Billion Records With SSN          *

IT Professionals Are Being Targeted by Chameleon Device-Takeovers Malware          *

Apache OFBiz Zero-Day Vulnerability Allows Remote Code Execution          *

Cyberattack on Grand Palais Rmn Causes Operational Disruptions, Museums Remain Open          *

Bug in Microsoft Teams Impacts Image and Screenshot Sharing          *

Researchers Found Vulnerabilities in Windows Smart App Control and SmartScreen          *

Google Address the Exploitation of a Zero-Day Vulnerability in the Android Kernel          *

North Korea Exploits VPN Vulnerability to Deploy Malware          *

Leaked Wallpaper Vulnerability Allows Privilege Escalation Attacks on Windows          *

Critical Flaw Found in Rockwell Automation Controllers          *

Voter Records of Millions of US Voters Compromised Due to 13 Misconfigured Databases          *

The National Crime Agency (NCA) Successfully Shut Down the Cyber Fraud Platform 'Russian Coms'          *

World's First AI Act from the European Union are Taking Effect          *

The Hunters International Ransomware Group Uses New SharpRhino Malware to Attack IT Professionals          *

Magniber Ransomware Rampage Home Users Under Siege          *

Bitdefender Error Allows Attackers to Manipulate Server Requests          *

Ransomware Incident Columbus Under Investigation for Potential Data Breach          *

Children's Privacy Laws Violated by TikTok according to the DOJ and FTC          *

Attacks on Bytecode Interpreters Hide Malicious Code Injections          *

Linux Kernel Vulnerable to New SLUBStick Cross-Cache Attack          *

Cybercriminals Exploit ISP Vulnerability to Infect Users with Malware          *

Minecraft DDoS Tool Unleashed on Misconfigured Jupyter Notebooks          *

Hackers Exploiting Arbitrary File Upload Vulnerability in WordPress Plugin          *

Microsoft Patches Critical Edge Flaw Allowing Arbitrary Code Execution          *

New BITSLOTH Malware Uses BITS for Hidden Communication on Windows          *

The CISA Warns of a Vulnerability in Avtech Cameras that has been Exploited in the Wild          *

Russia-Linked APT28 Targets Diplomats with New Phishing Campaign Using HeadLace Malware          *

Cyberespionage Group XDSpy Strikes Russian and Moldovan Entities          *

New Sitting Ducks DNS Attack Allows Threat Actors to Takeover Domains          *

New Variant of TgRAT Malware Targets Linux Servers          *

New Android RAT BingoMod Steals Funds and Deletes Data          *

Hackers Deploy Remote Access Malware by Abusing Free CloudFlare Service          *

Malicious PyPI Packages were Distributed through StackExchange Answers          *

DNS Compromise Hackers Take Over 35,000 Websites          *

Apple Updates macOS Monterey to Fix Critical Vulnerability Exploited in the Wild          *

Pharma Giant Cencora's Data Breach Exposes Extensive Personal and Health Information          *

Chrome Security Update: Critical Vulnerability Patch Released to Prevent Exploitation          *

Malware Associated with North Korea Attacks Windows, Linux, and macOS Developers          *

Data Theft on Locked Apple Devices is Possible Due to a Siri Vulnerability          *

As per CISA and FBI, DDoS Attacks Won't compromise US Elections Integrity          *

Fake Google Authenticator Advertisements are Installing Malware          *

OneBlood Faces Critical IT Systems Outage Due to Ransomware Attack          *

Polish Businesses are Being Targeted by Malware such as Agent Tesla and Formbook          *

Microsoft DDoS Attack Causes Azure Outages Affecting Critical Services          *

After Two Years of Infiltration, new Mandrake Spyware was Found in Google Play Store          *

SideWinder Cyberattacks Aiming for Maritime Facilities in Several Nations          *

Users are tricked by the OneDrive phishing scam into running a malicious PowerShell script          *

Malicious Campaign Targets Android Devices Using Telegram Bots to Steal SMS and OTPs          *

Apple Releases Major Security Updates for iOS, macOS, and Safari          *

Malware Campaign Targets Users with Obfuscated JavaScript and MSI Files          *

Cybercriminals are Exploiting LLMs to Create Malicius Code          *

Active Exploitation of Critical Vulnerability in Acronis Cyber Infrastructure          *

OAuth Implementation Flaw Puts Millions of Websites at Risk of XSS Attacks          *

New Specula Tool Exploits Outlook for Remote Code Execution on Windows Systems          *

Proofpoint Vulnerabilities Exploited to Send Millions of Daily Phishing Emails          *

Nvidia Patches High-Severity Flaws in AI and Networking Products          *

Massive HealthEquity Data Breach Affects 4.3 Million People          *

Malware Spreads Through 3,000 Fake GitHub Accounts          *

Hackers Exploit Newly Disclosed ServiceNow Vulnerabilities          *

Play and LockBit Ransomware Team Up to Amplify Cyber Attacks          *

GXC Team's Advanced Phishing Tactics Exploit Android Apps and AI Technology          *

Insula Group Confirms BianLian Ransomware Attack in Victoria          *

Vulnerable Selenium Grid Servers Hijacked for Monero Mining          *

Unveiling the Latest Banking Trojan Threats in Latin America          *

Ukraine Hackers Hit Major Russian banks with DDoS attacks          *

Columbus Cyber Incident Amid Wave of Ransomware Attacks on Cities          *

U.S. Puts $10M Bounty on North Korean Hacker Tied to Maui Ransomware Attacks          *

Malicious PyPI Package Exploits macOS Vulnerability to Capture Google Cloud Credentials          *

North Korean hacker charged by the US for hospital ransomware attacks          *

Paris Olympics Targeted by Cyberterrorism          *

FBCS Data Breach Affects 4.2 Million People          *

WhatsApp for Windows Vulnerability Enables Unwarned Execution of Python and PHP Scripts          *

Belarus-Linked Hackers Target Ukrainian Organizations Using PicassoLoader Malware          *

French Authorities Initiate Operation to Eradicate PlugX Malware from Infected Systems          *

MCG Health Settles $8.8 Million Lawsuit regarding Data Breach          *

The Crypto Exchange Gemini has Disclosed a Data Breach involving a Third Party          *

Google Chrome Alerts Users to Risky Files During Download          *

July Updates for Windows Server Disrupt Remote Desktop Access          *

Google Resolves Chrome Password Manager Bug Hiding Credentials          *

Researchers Trace Fake Postal Mailings Targeting Indian Users to China          *

Siemens Patches Critical Vulnerabilities in Sicam Power Grid Products          *

A PKfail Secure Boot Bypass Vulnerability Enables Attackers to Install UEFI Malware          *

Progress Software Issues Patch for Severe Vulnerability in Telerik Report Server          *

Researchers Reveal Flaw Allowing Access to Deleted and Private GitHub Repository Data          *

Critical Vulnerability in Docker Engine Allows Attackers to Bypass Authorization Plugins          *

French Law Enforcement Targets PlugX Malware with Self-Destruct Strategy          *

Security Flaw in BlueStacks Emulator for Windows Puts Millions of Gamers at Risk          *

Patchwork Targets Bhutan with Advanced Brute Ratel C4 Tool          *

Thousands of GitHub Accounts Compromised by Malware Distribution Network          *

North Korean State Actor Poses as KnowBe4 Engineer to Install Malware          *

Michigan Medicine Data Breach Exposes 57,000 Patients' Information          *

Hacking Forum BreachForums v1 Data Leak Exposes Members' Information          *

Magento Sites Targeted by Concealed Credit Card Skimmer          *

Windows 10 Update KB5040525 Fixes WDAC Issues Leading to Memory Leaks and Application Crashes          *

Hackers Exploit Google Cloud for Phishing          *

Chinese Hackers Deploy MgBot Malware to Target Taiwan and US NGOs          *

Chinese Hackers Unleash New Version of Macma macOS Backdoor          *

Dragos Unveils FrostyGoop Malware Targeting Industrial Control Systems in Ukraine          *

CERT-UA Alerts on Spear-Phishing Campaign Targeting Ukrainian Research Institutions          *

Cadre Holdings Hit by Cyberattack Affecting Operations          *

SonicOS IPSec VPN Vulnerability Enables Attackers to Cause Denial of Service          *

Daikin Targeted by Meow Hackers: 40 GB of Confidential Data Compromised          *

Telegram Zero-Day Vulnerability Allowed Malicious Android APKs to Disguise as Videos          *

Google Abandons Plan to Remove Third-Party Cookies in Chrome          *

SocGholish Malware Exploits BOINC for Stealthy Cyberattacks          *

Threat Actors Exploit Cloud Services for Credential Phishing and Malware Distribution          *

Ransomware Attack Causes Severe Disruption to UK's Blood Supply          *

Ubuntu Releases Patches for Critical Linux Kernel Vulnerabilities in Azure          *

Microsoft Releases Tool to Remove Faulty CrowdStrike Driver on Windows          *

Network Failures Force Retailers to Close Doors: Chaos Ensues          *

Alert for Grand Theft Auto Fans: Fake GTA VI Beta Downloads Spreading Malware          *

Federal Agencies Scramble to Resolve Major Software Outage          *

NHS Overwhelmed by 999 Calls and Disruptions to GP and Hospital Services Amid Microsoft Global Outage          *

Fake "CrowdStrike Hot Fix" (crowdstrike-hotfix.zip) Distributes RemCos RAT          *

Crypto Pig-Butchering Exposed: The Role of Operation Spincaster          *

The Role of WAN Optimization in Accelerating GenAI Networks          *

MacOS Users Targeted by North Korean Hackers          *

A new Linux variant from Play Ransomware Group targets ESXi          *

ShadowRoot Ransomware Targets Businesses Using Weaponized PDFs          *

Vulnerability in Thousands of Cloud Websites with TE.0 HTTP request smuggling          *

The CrowdStrike outage leads to fake websites and phishing          *

Hacker Linked to MGM Attack Arrested in UK          *

Hackers Use Legitimate RMM Software to Distribute BugSleep Malware          *

Octo Tempest Adds RansomHub and Qilin to VMware ESXi Attacks          *

Hackers Claim Dettol Breach Affects 453,646 Users          *

US Data Breach Victims Surge Over ElevenFold Yearly          *

Technical Details on the Recent crowdStrike Outage          *

Ransomware Gang Steals Data of 12.9 Million People from MediSecure          *

Critical Splunk Vulnerability Enables Password Theft          *

Pro-Houthi Threat Group Targets Humanitarian Organizations in Yemen with Android Spyware          *

Major Microsoft 365 Outage Triggered by Azure Configuration Change          *

Cisco Patches Critical SEG Vulnerability Allowing Root Access and Crashes          *

Indian Crypto Exchange WazirX Hit by $230 Million Security Breach          *

HotPage Adware Masquerades as Ad Blocker, Installs Malicious Kernel Driver          *

Microsoft Massive Global Outage Disrupts Airlines, Banks, and Emergency Services Globally          *

SolarWinds Patches Critical Vulnerabilities in Access Rights Manager          *

TAG-100 Cyber Espionage Campaign Targets Global Organizations Using Open-Source Tools          *

Bassett Furniture Shuts Down Manufacturing After Ransomware Attack          *

Vulnerabilities in SAP AI Expose Customer Data to Cyberattacks          *

Cisco SSM On-Prem Vulnerability Enables Hackers to Reset Any User's Password          *

Romania Confronts Hacktivist Attacks Amid Rising Geopolitical Tensions          *

Chinese Hacker Group APT17 Targets Italian Firms and Government Agencies with New 9002 RAT Malware          *

New Phishing Tactics Pose as HR Communications to Target Employees          *

FIN7 is promoting a security-evading tool on dark web forums          *

Life360 Customer Data Breach Exposes 442,519 Users          *

Threat Actors Exploit Critical RCE Vulnerability in Apache HugeGraph-Server          *

15 Million Trello Users' Email Addresses Exposed on Hacking Forum          *

Coast Guard Faces Cyberthreats Amid Industry Reluctance          *

NuGet Campaign Targets Developers with Injected Malicious Code          *

MirrorFace Exploits Vulnerabilities in Internet-Facing Assets to Target Organizations          *

Malicious npm Packages Hide Backdoor Code in Image Files          *

Massive Ad Fraud Operation 'Konfety' Exploits Google Play Apps          *

Former SEXi Ransomware Rebrands APT INC, Targets VMware ESXi Servers          *

Kaspersky Lab Shutting Down U.S. Operations Following Sanctions          *

Victoria's Royal Brighton Yacht Club Confirms Ransomware Attack by Medusa          *

CISA Issues Warning on Actively Exploited RCE Vulnerability in GeoServer GeoTools Software          *

Risk to Python's Core Repositories Following GitHub Token Leak          *

Fake Microsoft Teams Ad Used in Phishing Campaign Targeting Mac Users          *

Info-Stealing Malware Spread Through Windows Desktop Themes in Facebook Ads          *

MuddyWatter Hacking Group Deploys New BugSleep Malware in Global Phishing Attacks          *

Data Breach Exposes Personal Details of Thousands at Nokia and Microsoft          *

Hacktivist Group SiegedSec Targets Heritage Foundation, Leaks Sensitive Data          *

Lulu Hypermarket Data Breach Exposes 200,000 Customer Records          *

Alert: DeFi Users Beware of DNS Hijacking Vulnerability Found in Squarespace Domains          *

Advancements in Cybercrime Investigation Techniques          *

FishXProxy Phishing Kit Makes Phishing Easy for Script Kiddi          *

Leader of Zeus Malware Sentenced to 9 Years in Prison          *

Singapore Banks to Phase Out One-Time Passwords in Three Months          *

Hackers use PoC exploits in attacks 22 minutes after release          *

NullBulge Hack: 1.1 TiB of Disney's Internal Communications Leaked          *

Monitoring tool mSpy suffers data breach, revealing customer details          *

Atomic Stealer delivered by fake Microsoft Teams for Mac          *

APT41 Enhances Arsenal with New Stealthy Malware Loader and Backdoor          *

Exim Mail Server Vulnerability Puts Millions at Risk from Malicious Attachments          *

Hackers Target Advance Auto Parts, Exposing 2 million Users' Data          *

Rite Aid Acknowledges Data Breach Post June Ransomware Incident          *

Attacking Windows Users With Coyote Banking Trojan          *

Data breach exposes 109 million AT&T call logs          *

Samba file shares are exploited by DarkGate Malware          *

Netgear Urges Immediate Firmware Update to Patch Critical WiFi 6 Router Vulnerabilities          *

Siemens, Schneider Electric, and CISA Issue Critical ICS Patch Advisories          *

RansomHub Leaks Sensitive Data from Florida Department of Health          *

CrystalRay Utilizes SSH-Snake and Open Source Tools in Wide-Scale Attacks on 1,500 Targets          *

ARRL Confirms Ransomware Attack Compromising Employee Data          *

Palo Alto Networks Issues Critical Security Updates for Expedition Tool and PAN-OS          *

Critical Zero-Click RCE Vulnerability Affects Microsoft Outlook          *

Microsoft Fixes Windows 11 Bug Causing Reboot Loops and Taskbar Freezes          *

PHP Vulnerability Facilitates Malware Distribution and DDoS Attacks          *

Apple Warns iPhone Users of Potential Mercenary Spyware Attacks Across 98 Countries          *

Evolve Bank & Trust Reports Data Breach Impacting 7.6 Million Individuals          *

VMware Patches High-Risk SQL Injection Vulnerability in Aria Automation          *

Citrix Releases Critical Patches for NetScaler Vulnerabilities          *

Ransomware Group Exploits Vulnerability in Veeam Backup Software          *

ViperSoftX Malware Utilizes AutoIT Scripting to Stealthily Execute PowerShell          *

Researchers have identified new malware targeting the mining sector          *

CISA Urges Developers to Eliminate OS Command Injection Vulnerabilities          *

Critical Vulnerability in GitLab Allows Attackers to Execute Pipelines on Behalf of Other Users          *

Microsoft 365 and Office Users Affected by '30088-27' Update Errors          *

Adobe Releases Critical Patches for Multiple Products, Warns of Code Execution Risks          *

SAP Patches Critical Vulnerabilities in July 2024 Security Update          *

U.S. Disrupts AI-Driven Bot Network Spreading Russian Propaganda on Social Media          *

New OpenSSH Vulnerability Discovered: Remote Code Execution Risk          *

Apache HTTP Server Patch Released to Address Source Code Disclosure Vulnerability          *

Windows 10 KB5040427 Update: Copilot Enhancements and 12 Issue Fixes          *

Critical RADIUS Vulnerability: BlastRADIUS Exposes Networks to MitM Attacks          *

Microsoft Patch Tuesday Security Advisory - July 2024          *

Hackers Exploit Critical Flaw in Rejetto's HFS to Spread Malware and Cryptocurrency Miners          *

Alabama State Department of Education Thwarts Ransomware Attack but Data Breached          *

Active Campaign Exploits Microsoft SmartScreen Vulnerability to Deliver Stealers          *

Cybersecurity agencies are warning about APT40's swift adaptation in exploit tactics          *

Zotac Customer RMA Information Exposed on Google Search          *

Neiman Marcus Discloses Data Breach Affecting 31 Million Customer Email Addresses          *

CloudSorcerer APT Group Targets Russian Government Agencies          *

Dark Web Malware Logs Reveal Identities of 3,300 Users Connected to Child Abuse Websites          *

Critical Ghostscript Vulnerability CVE-2024-29510 Actively Exploited in the Wild          *

Cybercriminals Exploit YouTube to Spread Scams and Malware          *

Concerns Rise Over OpenAI’s Security After Undisclosed Breach          *

Critical Vulnerabilities Disclosed in Gogs Open-Source Git Service          *

Threat Actors Target Cybersecurity Researchers with Pseudo-Exploit for regreSSHion          *

Exploiting Vulnerabilities: Targeting Microsoft Exchange Servers for Sensitive Data          *

Mekotio Banking Trojan Targets Latin American Financial Data          *

Key Details and Impact of Shopify Data Incident          *

Formula 1 Governing Body Reveals Data Breach Due to Email Compromises          *

New Variant of Mallox Ransomware Targets Linux Systems          *

Ticketmaster has experienced a data breach involving purported Taylor Swift tickets.          *

DragonForce Ransomware Strikes New Zealand Fitness Retailer          *

CISA Confronts Challenges After Major Ivanti VPN Breach          *

OVHcloud Mitigates Record-Breaking 840 Mpps DDoS Attack          *

New Eldorado Ransomware Targets Multiple Sectors with Advanced Customization          *

Malicious QR Code Reader App on Google Play Distributes Anatsa Banking Malware          *

Patelco Credit Union Hit by Ransomware, Shuts Down Banking Systems          *

Brazil Halts Meta's AI Data Processing Due to Privacy Concerns          *

Ethereum Email Breach Exposes 35,000 Users to Phishing Attacks          *

New Botnet Zergeca, Based on Golang, Enables Powerful DDoS Attacks          *

Microsoft Identifies Critical Flaws in Rockwell Automation PanelView Plus          *

Google Fixes 25 Android Flaws, Including Critical Privilege Escalation Bug          *

Operation MORPHEUS: Global Law Enforcement Shuts Down Cybercrime Network          *

Twilio's Authy App Breach Exposes Millions of Phone Numbers          *

HealthEquity Data Breach Exposes Protected Health Information          *

Cisco Patches Zero-Day Vulnerability Exploited by China-Linked Velvet Ant          *

Splunk Patches Multiple High-Severity Bugs in Enterprise and Cloud Platforms          *

Critical OpenSSH Vulnerability Puts Millions of Servers at Risk          *

Global Xbox Outage: Users Unable to Log In or Play Games          *

A cyberattack using Donut and Sliver frameworks targets Israeli entities          *

CapraRAT Spyware Targets Android Users Through Popular Apps          *

Severe CocoaPods Vulnerabilities Put iOS and macOS Apps at Risk of Supply Chain Attacks          *

HubSpot Alerts Customers to Ongoing Cyberattacks on Accounts          *

Prudential Financial Reports Data Breach Impacting 2.5 Million Individuals          *

Juniper Networks Issues Critical Security Updates for Router Authentication Bypass          *

Ransomware Attack Hits Lurie Children’s Hospital, Compromising Personal and Health Information          *

Google Chrome to Permit Isolated Web Apps Secure Access to Sensitive USB Devices          *

Google Chrome to Block Entrust Certificates Starting November 2024          *

Fake IT Support Sites Spread Malicious PowerShell Scripts          *

Data breach exposes customer information of dairy giant Agropur          *

Infosys McCamish claims that LockBit has stolen the data of 6 million people          *

A malicious npm package is targeting AWS users          *

Unfurling Hemlock Threat Actor Floods Systems with Malware          *

Geisinger Healthcare System Discloses Data Breach Involving Former Nuance Employee          *

Critical Vulnerabilities Discovered in Emerson Gas Chromatographs by Claroty          *

GitLab Releases Security Patches for 14 Vulnerabilities          *

Critical Security Flaw in Vanna.AI Library Allows Remote Code Execution          *

South Korean Telco KT Accused of Infecting P2P Users with Malware          *

Medusa Banking Trojan Resurfaces with Stealthier, More Capable Variants          *

Critical SQL Injection Vulnerability Discovered in Fortra FileCatalyst Workflow          *

Snowblind Malware Exploits Android Security Feature to Bypass Protection          *

New MOVEit Transfer Vulnerability Under Exploit - Apply Patch Immediately          *

P2Pinfect Worm Attacks Redis Servers with Ransomware and Cryptominers          *

Indonesia's National Data Center Hit by Ransomware Attack, Government Refuses to Pay $8 Million Ransom          *

Neiman Marcus Data Breach Exposes Personal Information of 64,472 Individuals          *

New Threat Actor Boolka Targets Websites with BMANAGER Trojan          *

Hackers Drain $2 Million from CoinStats Cryptocurrency Wallets          *

Google Chrome Update Fixes High-Severity Memory Safety Vulnerabilities          *

Phishing Attack Hits Any.Run Malware Sandbox Service, Compromises Employee Accounts          *

Supply Chain Attack on Polyfill.io JavaScript Affects Over 100,000 Websites          *

Google Explores Digital Credential API for Secure Identity Verification on Chrome for Android          *

New SnailLoad Attack Allows Remote Inference of User Activity Without Direct Network Access          *

CISA CSAT Breach Alerts Chemical Facilities to Potential Data Theft          *

New Exploit Using MSC Files and Windows XSS Vulnerability to Compromise Networks          *

RedJuliett Intensifies Cyberattacks on Taiwanese Organizations          *

Google Unveils Project Naptime to Enhance AI-Driven Vulnerability Research          *

Path Traversal Vulnerabilities Persist Despite Modern Programming Languages          *

LivaNova USA Reports Data Breach Affecting 130,000 Individuals          *

Los Angeles Unified School District Data Breach: Cybersecurity Alert and Response          *

Enhancing Network Security: Modern Approaches Beyond Traditional VPNs          *

High-Severity UEFI Firmware Vulnerability Affects Hundreds of Intel-Based Devices          *

ExCobalt Cybercrime Gang Targets Russian Organizations with New GoRed Backdoor          *

Malvertising Campaign Deploys Oyster Backdoor via Trojanized Software Installers          *

Critical Vulnerability in PrestaShop's pkfacebook Module Used to Steal Credit Card Data          *

AdsExhaust Adware Campaign Deceives Meta Quest Users with Fake Downloads          *

Twelve Kaspersky executives sanctioned by U.S. Treasury          *

SneakyChef Espionage Campaign Targets Government Entities with SugarGh0st Malware          *

CDK Global Cyberattack Hits Thousands of US Car Dealerships          *

Chinese Cyber Espionage Groups Target Telecom Sector in Long-Running Campaign          *

Change Healthcare Notifies Customers of Massive Cyberattack Impacting Patient Data          *

French Diplomatic Entities Targeted by Cyber Attacks Linked to Russia          *

Critical Path-Traversal Flaw in SolarWinds Serv-U Actively Exploited          *

Kraken Security Flaw Exploited by Researcher to Steal $3 Million in Crypto          *

Cross-Platform Scam Targets Crypto Users with Stealer Malware          *

Forklift Manufacturer Crown Equipment Hit by Cyberattack, Shutting Down IT Systems          *

Statewide 911 Outage in Massachusetts Linked to Firewall Error          *

Chinese Users Targeted by Threat Actor Void Arachne Cyberattack Utilizing Malicious VPN MSI Files          *

New Phishing Platform ONNX Store Targets Microsoft 365 Accounts          *

Critical Failures in Medibank Security Exposed in Data Breach Report          *

Legrand CRM CEO Addresses Data Breach, Dispels Misinformation          *

Cleveland City Hall Closed Amid Confirmed Ransomware Attack          *

Speculative Execution Attack on Arm CPUs' Memory Tagging Extension Raises Security          *

Signal Foundation Opposes EU Proposal to Scan Private Messages for CSAM          *

AMD Investigates Data Breach Amidst Cybersecurity Concerns          *

Emerging Threat: Malware Targeting Docker API Endpoints for Cryptocurrency Mining          *

BadSpace: Sophisticated Malware Exploiting WordPress in Multi-Stage Attacks          *

Cyber Shadows: Hunt3r Kill3rs Infiltrate Schneider Electric's German Operations          *

ASUS Fixes Critical Authentication Bypass Vulnerability in Various Router Models          *

Microsoft Delays Recall Feature Amid Privacy and Security Worries          *

High-Stakes SQL Injections in Low-Code Environments          *

NiceRAT Malware Targets South Korean Users via Pirated Software          *

Operation Celestial Force Uses Android and Windows Malware to Target Indian Users          *

Chinese Hackers Compromise East Asian Firm for Three Years          *

Social Engineering Tactics Fuel Malware Distribution!          *

Data Breach Alert: The New York Times GitHub Repositories Compromised          *

Pakistan-Linked Malware Campaign Expands to Target Windows, Android, and macOS          *

Keytronic Confirms Data Breach Following Leak by Ransomware Gang          *

Emoji-Controlled Havoc: Unmasking the New Linux Malware Operated via Discord          *

New ARM 'TIKTAG' Threat Targets Chrome and Linux Systems          *

Austrian Non-Profit Alleges User Tracking in Google's Privacy Sandbox          *

Notorious Scattered Spider Hacker Arrested          *

Grandoreiro Banking Trojan Spreads in Brazil as Smishing Scams Escalate in Pakistan          *

CISA Warns of Zero-Day Windows Vulnerability Exploited by Black Basta Ransomware          *

Ransomware Attack Hits Toronto's Largest School Board, TDSB          *

Arid Viper's Mobile Espionage Campaign Leveraging Trojanized Android Apps          *

Truist Bank Confirms Data Breach Following Appearance of Stolen Data on Hacking Forum          *

Ascension Healthcare System Targeted in Hack After Employee Downloads Malicious File          *

New Attack Method 'Sleepy Pickle' Targets Machine Learning Models          *

Siemens, Schneider Electric, Aveva, and CISA Publish ICS Patch Tuesday Advisories          *

Critical Vulnerability in JetBrains IntelliJ IDEs Exposes GitHub Tokens: Urgent Patch Required          *

CISA Issues Warning on Impersonation Scams Targeting Financial Transfers          *

Microsoft Patches High-Risk Zero-Click Flaw in Outlook          *

Emerging Phishing Campaigns Deploy WARMCOOKIE Backdoor and Windows Search Malware          *

Chrome 126 and Firefox 127 Patch Critical Security Vulnerabilities          *

Black Basta Ransomware Exploits Windows Zero-Day Vulnerability, Symantec Reports          *

Chinese Threat Actor SecShow's DNS Probing Activities and Emergence of Rebirth Botnet in Gaming Community          *

Apple Releases visionOS 1.2 Update, Addressing First Vision Pro-Specific Vulnerability          *

Cyber Incident Shuts Down Cleveland's IT Infrastructure          *

Enhanced ValleyRAT Malware Campaign Unveiled with Advanced Capabilities          *

Critical Vulnerabilities Discovered in Discontinued Netgear WNR614 Routers          *

Adobe Patches Critical Security Flaws in Photoshop, After Effects, and Illustrator          *

SAP’s June Patch Update: Critical XSS and DoS Vulnerabilities Fixed          *

Microsoft Patch Tuesday Security Advisory - June 2024          *

Brooklyn DA Seizes Domains in Cryptocurrency Scam Targeting Russian Diaspora          *

Microsoft Warns of Azure Service Tag Vulnerabilities for Cloud Security          *

Researchers Discover Malicious VSCode Extensions with Millions of Installs          *

Japanese Media Giant Kadokawa Hit by Major Cyber Attack, Properties Offline for Days          *

Phishing Attack Disguised as Resume Distributes More_Eggs Malware Targeting Recruiters          *

Arm Issues Warning on Actively Exploited Vulnerability in Mali GPU Kernel Drivers          *

Vietnam Post Restores Operations After Ransomware Attack          *

Cylance Confirms Legitimacy of Stolen Data Being Sold on Hacking Forum          *

CyRC Advisory: Critical Vulnerability in EmailGPT Threatens Data Security          *

Frontier Communications Discloses Data Breach Affecting Over 750,000 Individuals          *

Panasonic Australia Acknowledges Cyber Incident After Akira Ransomware Claim          *

SolarWinds Releases Version 2024.2 with Security Patches and Enhanced Features          *

New York Times Source Code Compromised via Exposed GitHub Token          *

New Phishing Campaign Employs "Paste and Run" Technique to Deliver DarkGate Malware          *

Critical RCE Flaw Fixed in All PHP for Windows Versions          *

CERT-UA Warns of Espionage Campaigns Targeting Ukrainian Defense Forces with SPECTR Malware          *

Facing the Threat: SMBs' Concerns Over Cyberattacks and Business Continuity          *

Fake Browser Update Campaigns Exploit Websites to Distribute Malware          *

Hackers Leveraging Legitimate Packer Software for Covert Malware Distribution          *

LAUSD Investigates Alleged Sale of Stolen Databases by Threat Actor          *

Muhstik Botnet Exploits Apache RocketMQ Vulnerability for DDoS Attacks and Cryptomining          *

New Attack Campaigns Exploit Years-Old ThinkPHP Flaws          *

Sniffnet: A User-Friendly, Open-Source Network Monitoring Tool          *

Advance Auto Parts' Snowflake Account Compromised, 3TB of Data for Sale          *

Critical Vulnerabilities Discovered in Zyxel's Discontinued NAS Products          *

Club Penguin Fans Hack Disney Server, Exposing 2.5 GB of Internal Data          *

Belarusian Hackers Target Ukrainian Defense with Sophisticated Cyberespionage Campaign          *

Critical Vulnerability in Ariane Systems' Self Check-In Kiosks Exposes Guest Data and Room Keys          *

RansomHub: Evolution of Knight Ransomware Linked to Surge in Cyber Attacks          *

TikTok Patches Vulnerability Used to Compromise Celebrity and Brand Accounts          *

Australian Miner Northern Minerals Discloses Cyberattack, Data Leak          *

Decoy Dog Trojan Targets Russian Power Companies, IT Firms, and Government Agencies          *

Excel Macro Exploit Used in Multi-Stage Malware Attack on Ukraine          *

Cox Modem Vulnerabilities Exposed Millions to Remote Hacking          *

Critical Flaw in Telerik Report Server Allows Creation of Rogue Admin Accounts          *

WhatsApp Cryptocurrency Scam Targets Cash Rewards          *

Confluence RCE Patched (CVE-2024-21683)          *

Google Chrome Users Must Update or Uninstall Within 72 Hours          *

NPM Package Targeting Gulp Users Found Delivering RAT Malware          *

Ransomware Gang RansomHub Claims Responsibility for Cyberattack on Telecom Giant Frontier          *

Active Exploitation of OS Command Injection Flaw in Oracle WebLogic Server          *

Microsoft India's X Account Compromised in Roaring Kitty Crypto Scam          *

Kaspersky Releases Free Linux Virus Removal Tool KVRT          *

Debt Collection Agency FBCS Reports Data Breach Affecting Over 3.2 Million People          *

Chinese State-Sponsored Cyber Espionage Operation "Crimson Palace" Targets Southeast Asian Government          *

Everbridge Reports Data Breach Involving Business and User Data          *

Guardian Childcare Victoria Discloses Cyber Attack Leading to Data Breach          *

Ticketek Reports Cyber Incident Impacting Customer Data          *

BBC Notifies Employees of Data Breach Involving Pension Scheme Information          *

BlueDelta Cyber-Espionage Campaign Targets European Networks with Headlace Malware          *

Fake Browser Updates Delivering BitRAT and Lumma Stealer Malware          *

CISA Warns of Active Exploitation of Linux Kernel Vulnerability CVE-2024-1086          *

Massive Cyber Attack "Pumpkin Eclipse" Bricks Over 600,000 SOHO Routers in the U.S          *

Chinese Nationals Sanctioned for Botnet Linked to Massive COVID-19 Relief Fund Fraud          *

Okta Issues Alert on Credential Stuffing Attacks Exploiting Cross-Origin Authentication          *

New Study Exposes Most Hackable Pop Culture Passwords          *

Linux Cyber Threat Actors Exploit Kiteshield Packer for Malicious Activities          *

Critical WordPress Plugin Flaws Exploited for Malicious Script Injection and Backdoors          *

RedTail Malware Exploits PAN-OS Flaw with Advanced Techniques and Private Mining Pools          *

Cloudflare Disrupts FlyingYeti Phishing Campaign Targeting Ukraine          *

US Shuts Down 911 S5 Botnet, Arrests Chinese Administrator          *

Shell Data Breach Affects Thousands of Customers Worldwide          *

Check Point Warns of Zero-Day Vulnerability in Network Security Gateway Products          *

Critical Vulnerabilities Discovered in Eclipse ThreadX IoT Operating System          *

Cooler Master Data Breach Exposes 103GB of Sensitive Information          *

Cybercriminals Exploit Stack Overflow to Spread Malicious PyPi Package 'Pytoileur'          *

Brazilian Banks Targeted in New AllaSenha Malware Campaign          *

Microsoft Uncovers Moonstone Sleet: North Korean Threat Group's Diverse Cyber Campaign          *

First American Financial and Fidelity National Financial Hit by Cyberattacks          *

CatDDoS Botnet Exploits 80+ Security Flaws to Launch Widespread DDoS Attacks          *

Christie’s Data Breach Highlights Cybersecurity Threats in the Auction Industry          *

SingCERT Alerts Critical WordPress Plugin Vulnerabilities          *

Mitigating Cybersecurity Risks: The Intersection of TLS and Dynamic DNS in Appliance Services          *

ShinyHunters Allegedly Breach Ticketmaster and Live Nation, Offer Data for Sale          *

Critical Vulnerabilities in Fortinet's SIEM Solution Exploited: PoC Exploit Released          *

Eroding Trust: The Hidden Vulnerabilities Threatening Cybersecurity          *

CERT-UA Warns of Surge in Cyberattacks by Financially-Motivated UAC-0006          *

Unveiling Targeted Malicious PyPI Packages on MacOS          *

Sav-Rx Discloses Data Breach Impacting Over 2.8 Million Individuals          *

Enhancing System Security with Fail2Ban: A Versatile and Proactive Approach          *

New Phishing-as-a-Service Tool "Greatness" Exploits Microsoft 365 Credentials with Advanced Evasion Tactics          *

TP-Link Archer C5400X Gaming Router Vulnerable to Critical Security Flaws          *

Check Point Warns of Targeted Attacks on Remote Access VPN Devices and Issues Security Recommendations          *

New Wave of Cyberattacks Targeting Indian Government and Aerospace Sectors Linked to Transparent Tribe          *

New ATM Malware Threatens Global Banking Security with Flexible Payment Options          *

New Malvertising Campaign Targets Users with Trojanized Arc Browser Installers          *

Security Vulnerability Uncovered in AI-as-a-Service Provider Replicate          *

Unveiling BloodAlchemy: Evolution of a RAT from ShadowPad to Deed RAT          *

U.S. Pharmaceutical Giant Cencora Discloses Data Breach Affecting Sensitive Medical Information          *

Microsoft Report Reveals Cybercriminal Operation Exploiting Retailers for Gift Card Fraud          *

Python Minesweeper Game Used as Cover in Financial Cyberattacks          *

Fake Antivirus Websites Spread Malware to Steal Sensitive Data          *

Google Releases Chrome Update to Fix Fourth Zero-Day Vulnerability in Two Weeks          *

Microsoft Outage Disrupts Services Including Bing and Copilot          *

Ransom House Threatens Data Leak of Advance Press, Allegedly Steals 300GB of Data          *

WhatsApp Warns of Government Surveillance Vulnerabilities Despite Encryption          *

CentroMed Reports Data Breach Affecting Patient Confidentiality          *

MITRE Reveals Cyberattack Exploiting VMware Systems for Persistence          *

CISA Adds Actively Exploited Apache Flink Vulnerability to KEV Catalog          *

ACSA Notifies 55,000 Individuals of Cyberattack Data Breach          *

Malware Backdoored JAVS Courtroom Software Compromises Systems Worldwide          *

Zoom Implements Post-Quantum Encryption for Enhanced Security          *

Microsoft Introduces Recall Feature: Security and Privacy Implications          *

Critical Remote Code Execution Vulnerability Discovered in Honeywell's Virtual Controller          *

Nissan Oceania's Call Centre Hit by OracleCMS Data Breach          *

Veeam Releases Critical Update for Backup & Replication Software          *

China-Linked Hackers Increasingly Use Proxy Networks for Cyberespionage          *

Newly Disclosed Threat Group Unfading Sea Haze Targets South China Sea Entities          *

Blackbasta Group Claims Hack on Atlas, Major US Oil Distributor          *

MediSecure Data Breach Prompts Calls for Enhanced Cybersecurity Measures          *

GhostEngine Mining Campaign Disables EDR Security Through Exploiting Vulnerable Drivers          *

ANZ Bank Faces Major Online Banking Outage: Customers Struggle to Access Accounts          *

Critical Vulnerability Unveils Pre-auth RCE in Mirth Connect          *

OpenSSF Launches Siren Mailing List for Open Source Threat Intelligence Sharing          *

Western Sydney University Reveals Data Breach, Notifying 7,500 Affected Individuals          *

SolarWinds Introduces Generative AI for Enhanced IT Management in Service Desk          *

Critical Vulnerability "Linguistic Lumberjack" Identified in Fluent Bit          *

Critical Vulnerability Discovered in Fluent Bit Utility          *

Exposing Critical Infrastructure: The Risk of Public Internet Exposure for ICS Assets          *

Hackers Exploit Foxit PDF Reader Vulnerability to Deploy Various Malware          *

New Public RCE Exploit Targets Unpatched QNAP QTS Zero-Day Vulnerability          *

New BiBi Wiper Malware Variant Deletes Disk Partition Tables, Targets Israel and Albania          *

Unveiling LATRODECTUS: A Rising Threat in the Malware Landscape          *

New 'Antidot' Trojan Hacks Android Devices for Data Theft and Remote Access          *

Critical Vulnerability in Python Package Threatens AI Systems          *

Chinese Nationals Arrested for Orchestrating $73 Million Laundering Scheme Through Pig Butchering Crypto Scam          *

ARRL Cyberattack Disrupts IT Systems and Online Services          *

Chinese Hackers Target U.S. AI Organizations in Sophisticated Cyber Campaign          *

Ransomware Group Uses Malicious Ads to Target Windows Admins via PuTTY and WinSCP          *

Grandoreiro Trojan Returns, Targets 1,500+ Banks Globally          *

Chinese Cyber Espionage Group BlackTech Deploys Advanced Deuterbear RAT          *

Data Breach at WebTPA Exposes Information of 2.4 Million Insurance Policyholders          *

Critical Vulnerabilities Discovered in GE Ultrasound Systems          *

Large-Scale Ransomware Attack Hits MediSecure E-Script Firm          *

Indian Universities Targeted by a Sidecopy APT Campaign          *

Facebook Messenger Exploited by North Korean Hackers in Targeted Malware Campaign          *

Foxit Reader Users Targeted by PDF Exploits          *

Critical Vulnerabilities Fixed in Ubuntu 24.04 LTS          *

City of Wichita Ransomware Breach Exposes Personal Information          *

Nissan Data Breach Compromises 53,000 Employees' Personal Information          *

Cybercriminals Exploiting Ransomware Attacks Through Microsoft's Quick Assist Feature          *

Intel Releases 41 Security Advisories Addressing 90 Vulnerabilities          *

Massive Data Breach Affects 900k Individuals at Mississippi Healthcare Provider          *

ICS Patch Tuesday: Siemens, Rockwell, Mitsubishi Electric Release Advisories          *

Santander Customer and Employee Data Compromised in Third-Party Breach          *

U.S. and China Clash Over AI Misuse and Restrictions          *

Ebury Botnet Targets 400,000 Linux Servers          *

Wireshark 4.2.5 Addresses Security Vulnerabilities and Enhances Network Analysis Capabilities          *

Malicious Actors Exploit GitHub for Spreading Multiple Information Stealers          *

Researchers Discover 64 Billion Annually Stolen by Southeast Asian Scam Syndicates          *

Adobe Fixes Critical Flaws in Reader, Acrobat          *

City of Helsinki Cyberattack Compromises Student and Personnel Data          *

New Chrome Zero-Day Flaw CVE-2024-4761 Under Active Exploitation          *

VMware Releases Patches for Exploited Vulnerabilities from Pwn2Own 2024          *

SAP Patches Major Vulnerabilities in CX Commerce and NetWeaver Platforms          *

NHS Digital Warns of Potential Exploitation of Arcserve UDP Vulnerabilities          *

Microsoft Patch Tuesday Security Advisory - May 2024          *

Black Basta Ransomware Hits Over 500 Organizations in North America, Europe, and Australia          *

IoT Devices at Risk Due to Flaws in Integrated Cellular Modems          *

Data Breach at FBCS Collection Agency Exposes Personal Information          *

INC Ransomware Source Code Offered for Sale at $300,000 on Hacking Forums          *

Apple Releases Patches for Code Execution Bugs in iPhones, iPads, and macOS          *

PyPi Package Exploits macOS with Sliver Pen-Testing Suite Backdoor          *

Nmap 7 95 Update Introducing Fresh OS and Service Detection Signatures          *

Researchers Demonstrate GhostStripe Attack on Autonomous Vehicles          *

Firstmac Limited Issues Data Breach Warning Following Cyberattack          *

Ohio Lottery Data Breach Exposes Over 538,000 Individuals' Personal Information          *

Google Releases Security Updates to Address Zero-Day Flaw in Chrome          *

FIN7 Exploits Malicious Google Ads to Distribute NetSupport RAT          *

Android Malware Impersonates Popular Apps for Credential Theft          *

Ransomware Attacks Evolve into Psychological Warfare, Targeting Individuals and Families          *

Government of British Columbia Investigating Cybersecurity Incidents on Government Networks          *

French Medical Imaging Provider Coradix-Magnescan Faces Cyberattack, Patient Appointments at Risk          *

Final Fantasy Servers Targeted by Ongoing DDoS Attacks, Players Face Login Issues          *

Ascension Healthcare Cybersecurity Incident: Network Interruption Update          *

Dell Technologies Issues Data Breach Notice to Customers          *

LiteSpeed Cache Vulnerability Exploited by Hackers for Complete Control of WordPress Sites          *

Brandywine Realty Trust Falls Victim to Ransomware Attack          *

Critical Vulnerability Patched in Latest Android Update          *

Critical Vulnerability Found in Tinyproxy Exposes Thousands of Instances to DoS and RCE Attacks          *

BogusBazaar: Massive Online Fraud Network Scams Thousands, Stealing Millions          *

Zscaler Investigates Potential Data Breach Following Hacker's Claims          *

Hijack Loader Malware Adopts Advanced Anti-Analysis Techniques          *

Poland Condemns Alleged Cyberattacks by Russian Group APT28          *

TunnelVision Attack Exposes Vulnerabilities in VPN Applications          *

Indian Government Takes Action Against Cyber Terror, Blocks 14 Messenger Apps in J&K          *

DocGo Reveals Cyberattack as Hackers Breach and Steal Patient Health Data          *

LockBit Ransomware Administrator Unmasked and Charged by U.K. National Crime Agency          *

Unveiling the Proliferation of Cyber Scams on Social Media and Messaging Platforms          *

MITRE Corporation Reveals Details of Cyber Attack Targeting NERVE Environment          *

Supply Chain Breaches Surge 68 Percent Year Over Year, Reveals DBIR          *

UK Ministry of Defence Faces Data Breach Impacting Military Personnel          *

New macOS Malware 'Cuckoo' Targets Intel and ARM-based Macs          *

APT42 Expands Tactics with New Backdoors Targeting NGOs and Government Entities          *

Law Enforcement Takes Down LockBit Group's Tor Website          *

Xiaomi Devices Affected by Multiple Vulnerabilities in Apps and System Components          *

City of Wichita, Kansas, Faces Ransomware Attack          *

Mitigating Threats Posed by NiceCurl and TameCat Backdoor Variants          *

Ukraine Reports Surge in Russian Cyberattacks Targeting Financial and Critical Infrastructure          *

U.S. Reports North Korean Hackers Exploiting Vulnerable DMARC Settings          *

Russian APT28 Exploits Outlook Flaw to Hack Czech, German Targets          *

Chinese Researchers Identify Security Flaws in Government Websites          *

Android Malware Campaign Targeting Bank Accounts in Finland          *

Tamil Nadu Police Data Breach: Information Available for Sale on Dark Web          *

US Government Warns of North Korean Phishing Campaigns Exploiting Weak Email Policies          *

Bitwarden Debuts MFA Authenticator App for iOS and Android          *

File Overwrite Flaw Endangers Popular Android Apps Xiaomi and WPS Office          *

Russian Hackers Breached and Sabotaged Texas Water Treatment Plant          *

LockBit Exposes Stolen Data from Cannes Hospital in France          *

1,400 GitLab Servers Affected by Exploited Vulnerability          *

Surge in DDoS Attacks Targeting Sweden Amid NATO Bid Process          *

FortiGuard Labs Discovers Goldoon Botnet Exploiting Decade-Old D-Link Vulnerability          *

Belarusian Cyber-Partisans Target KGB and State-Owned Enterprises in Recent Cyberattacks          *

Latrodectus Malware Exploits Microsoft and Cloudflare Themes in New Attacks          *

Data Breach at Dropbox Exposes Passwords and Authentication Information          *

HPE Aruba Networking Releases Patch for Critical RCE Flaws in ArubaOS          *

ZLoader Malware Evolution: New Anti-Analysis Feature and Stealthy Tactics Unveiled          *

Siemens Energy Manager Software Vulnerability Highlights Persistent Deserialization Risks          *

Cuttlefish: A New Malware Threat Targeting Networking Equipment and Cloud Authentication Data          *

Critical Security Flaws in Judge0 Enable Sandbox Escapes and Host Takeover          *

London Drugs Pharmacy Temporarily Closes Stores Due to Cybersecurity Incident          *

GAO Identifies New Security Deficiencies in IRS Management Controls          *

Unveiling the DarkGate Threat: Exploiting AutoHotkey and Evading SmartScreen          *

Researchers Uncover Novel Attacks Targeting High-End Intel Processors          *

JFrog and Docker Collaborate to Mitigate Malware Threats in Docker Hub Repositories          *

U.K. Bans Default Passwords in Smart Devices to Combat Cyber Threats          *

Muddling Meerkat Hackers Exploit China’s Great Firewall to Manipulate DNS          *

Kaiser Permanente's Data Breach Affects 13.4 Million Patients          *

Critical Vulnerability in R Programming Language Enables Supply Chain Attacks          *

Google Enhances Security Measures on Play Store to Combat Malicious Apps          *

Japanese Police Use Fake Payment Cards to Protect Elderly from Tech Support Scams          *

DDoS Attacks Persist Against Russian Independent Media Site Meduza Post-Election          *

Okta Warns of Surge in Credential Stuffing Attacks and Residential Proxy Abuse          *

CISA's Ransomware Notification Pilot Resolves Over 800 Vulnerabilities          *

Password Security Survey Highlights Urgent Need for Improved Cybersecurity Practices          *

Ukraine Targeted in Cyber Attack Exploiting Microsoft Office Flaw          *

Belarusian Hacker Group Claims Breach of KGB Network, Exposing Thousands of Personnel Files          *

Security Breach Exposes 19,000 Welfare Program Accounts in California          *

Organizations Remain Vulnerable to Cactus Ransomware Exploiting Qlik Sense Vulnerabilities          *

New Android Banking Trojan Brokewell Enables Extensive Device Takeover and Remote Control          *

Over 90,000 IP Addresses Affected by Self-Spreading PlugX USB Drive Malware          *

North Korean Threat Actors Targeting Developers with Fake Job Interviews          *

Malicious Websites Exploit SEO Poisoning to Spread Malware          *

FTC Announces $5.6 Million Refunds to Ring Users Over Privacy and Security Issues          *

North Korea-Linked Lazarus Group Unveils Complex Attack Chain Targeting Asia          *

Security Research Reveals Vulnerabilities in Microsoft Warbird and Protected Media Path Technologies          *

Phishing Campaign Exploiting Compromised Email Accounts Targets Autodesk Drive Users          *

DOJ Announces Arrest of Samourai Wallet Founders for Money Laundering Conspiracy          *

Critical Vulnerabilities in Brocade SANnav Management Application Expose Fibre Channel Infrastructure          *

Hackers Exploit Cisco Zero-Days to Breach Government Networks          *

Critical Security Vulnerabilities Expose Keystrokes of More Than 1 Billion Chinese Keyboard App Users          *

Czech News Agency's Website Hacked, Spreads False Assassination Attempt Story          *

Iran-Linked Hackers Execute Five-Year Cyber Espionage Campaign          *

Multistage Attack Leveraging SSLoad and Cobalt Strike Detailed by Researchers          *

Google Releases Update to Fix Critical Chrome Vulnerability          *

Vulnerabilities in iSharing App Expose Millions to Location Tracking          *

North Korean Hackers Target Dozens of South Korean Defense Companies          *

Open-source Cloud Console Cartographer helps security teams transcribe log activity          *

Russia-Linked Hacker Group Targets Indiana Water Treatment Plant          *

Ransomware Report Highlights Shifts in RaaS Landscape and Increase in Victims          *

Security Researchers Expose Windows Defender Vulnerability Enabling Database Deletion          *

Phishing Campaign Exploiting Nespresso Website Vulnerability Evades Detection          *

Kaspersky Uncovers Sophisticated Scam Targeting Telegram Users for Toncoin (TON)          *

North Korean State-Sponsored Hackers Embrace AI in Cyber Operations          *

GuptiMiner Malware Campaign Exploiting eScan Antivirus Update Mechanism          *

JavaScript Malware Shifts to Server-Side Redirects & DNS TXT Records as Traffic Direction System (TDS)          *

Critical Vulnerabilities Found in WordPress Plugin Forminator          *

New PedoRansom Malware Targets Child Exploiters with Extortion Tactics          *

Cyber Agency Warns of Increasing Targeting of Ukrainian Soldiers' Apps for Spying          *

Androxgh0st Malware Exploits Servers Worldwide for Botnet Attacks          *

Unveiling the Threat: Malicious PyPI Package "discordpy bypass 1.7" and Its Stealthy Tactics          *

Uncovering a Dependency Confusion Vulnerability in an Archived Apache Project          *

Surge in Quishing Attacks and Evolving Phishing Trends Highlight Latest Cybersecurity Threats          *

MITRE Corporation Breached by Nation-State Hackers Exploiting Ivanti Vulnerabilities          *

CrushFTP Urges Immediate Patching for Actively Exploited Zero-Day Vulnerability          *

Beware of Sophisticated Google Ad Phishing Scam Targeting Whales Market Users          *

Cannes Hospital Forced to Cancel Medical Procedures Due to Cyberattack          *

Rise of Cheap, Disposable Ransomware on Dark Web Forums          *

U.S. Dam Cybersecurity Raises Alarming Concerns Amid Growing Threats          *

Frontier Communications Addresses Cyberattack, Works on System Restoration          *

160 Ransomware Attacks Strike Food and Agriculture Sector in 2023          *

Data Breach at Michigan Healthcare Organization Affects 180,000 Individuals          *

Malicious Hackers Target SAP Applications, Exploiting Cloud Migration and Security Vulnerabilities          *

US Justice Department Charges Moldovan National for Operating Large-Scale Botnet          *

International Law Enforcement Disrupts 'LabHost' Phishing Service, Arrests 30+ Worldwide          *

Unveiling MadMxShell: A Sophisticated Malware Campaign Targeting IT Professionals          *

Persistent OfflRouter Malware Infects Ukrainian Government Networks          *

American Automaker's IT Staff Targeted by FIN7 in Phishing Campaign          *

Mass Brute-Force Attacks Targeting VPN and SSH Services          *

Czech Minister Warns of Russian Attempts to Sabotage European Railways          *

Atlassian Vulnerability Exploited: Linux Variant of Cerber Ransomware Deployed          *

Debian Security Update: Patching Critical Vulnerabilities in GTKWave          *

Surge in Cyber Attacks Targeting Philippines Amidst South China Sea Tensions          *

BreachForums Faces Cyber Attack, Admins Stand Resolute          *

Kaspersky Discovers SoumniBot, a Innovative Android Banking Malware Evades Detection          *

Iranian-Backed Hacking Group Allegedly Threatens Israeli Citizens with Radar System Hijack          *

Threat Actors Target T-Mobile and Verizon Employees in SIM Swap Scheme          *

Critical Security Flaw in Chirp Systems' Software Enables Remote Unlocking of Smart Locks          *

Ukrainian Hacker Group Deploys Destructive Malware Fuxnet in Attacks Against Russian Infrastructure          *

Imperva's 2024 Bad Bot Report Highlights Rising Threat of Malicious Bots          *

Critical PuTTY Vulnerability Exposes NIST P-521 Private Keys          *

Ivanti Alerts Users to Critical Vulnerabilities in Avalanche MDM Solution          *

Orca Research Reveals LeakyCLI Vulnerability in AWS and Google Cloud CLI Tools          *

LockBit Ransomware Resurfaces with Enhanced Self-Propagation Capabilities          *

Global Organizations Targeted by SteganoAmor Attacks Leveraging Steganography          *

Pune Cyber Crime Police Investigate 3.4 Crore Share Trading Scam          *

Critical Vulnerability in Delinea Secret Server Requires Immediate Action          *

Data Breach at Cisco Duo's Telephony Supplier Exposes MFA Messages Sent Over SMS and VOIP          *

AI Voice Cloning: The Growing Threat to Financial Security          *

Muddled Libra's Strategic Shift: Exploiting SaaS and Cloud for Extortion and Data Theft          *

Omni Hotels Targeted by Daixin Ransomware Gang in Cyberattack          *

Chipmaker Nexperia Confirms Data Breach by Dark Angels Ransomware Group          *

Royal Mail's Barcoded Stamps Fail to Prevent Flood of Forgeries in the UK          *

DPRK Utilizes Phantom DLL Hijacking and TCC Abuse by Leveraging Two MITRE Sub-Techniques          *

Evolution of Earth Hundun's Cyberespionage Activities Using Waterbear and Deuterbear Malware          *

Intel and Lenovo Servers Exposed to 6-Year-Old BMC Vulnerability          *

Iranian Threat Actor MuddyWater Expands Arsenal with DarkBeatC2 Infrastructure          *

XZ Utils Backdoor Files Found in Popular Rust Crate liblzma-sys          *

Hoya Corporation Hit by Ransomware, Attackers Demand $10 Million          *

Apple's Updated Warning System by Addressing Mercenary Spyware Threats and Zero-Day Exploits          *

Massive SMS Phishing Scam Targets Americans with Fake Road Toll Notices          *

Telegram Windows Desktop App Patched to Address Zero-Day Exploiting Python Script Launch          *

Palo Alto Networks Issues Advisory for CVE-2024-3400 Exploiting Firewall Vulnerability          *

Unveiling AWS's Battle Against IP Spoofing and DDoS Assaults          *

FAQs from the 2024 State of the Phish Report: Understanding the Threat Landscape          *

Revisiting MACT: Exploring Malicious Applications within Trusted Cloud Environments          *

Security Alert: TA547 Strikes German Entities Using Rhadamanthys Malware          *

Space Force Chief: US Faces Loss Without Assistance from Musk and Bezos          *

X Resolves URL Error Potentially Facilitating Convincing Social Media Phishing Scams          *

CISA Issues Warning: Federal Email Systems Targeted by Russian Hackers Exploiting Microsoft Accounts          *

Microsoft Two-Step Phishing Campaign Targets LinkedIn Users: A Professional Hook          *

Exploitation of Oversized LNK Files by Vedalia APT Group in Malware Campaign          *

Circumventing SharePoint Security: Two Novel Methods for Evading Exfiltration Detection          *

Data of 7.5 Million Customers Leaked in Attack on Consumer Electronics Giant boAt          *

Spectre V2 Exploit Targets Intel CPU-Based Linux Systems          *

Over 91,000 Smart LG TVs Exposed to Remote Takeover Due to Vulnerabilities          *

New Ahoi Attacks Pose Threat to Confidential Virtual Machines          *

Researchers Uncover 'Muliaka' Ransomware Group Targeting Russian Enterprises          *

KernelCare Live: CVE-2024-1086 Patches Released for CloudLinux 6h and 7 Users          *

Microsoft Addresses Critical Vulnerability in Azure Kubernetes Service Confidential Containers          *

Browser Fingerprinting: Cybercriminal Utilization          *

Phishing Deception Unveiled: Suspended Domains Unleash Malicious Payload in Latin America          *

Microsoft Patch Tuesday Security Advisory - April 2024          *

Rising Trend: Malware-Initiated Vulnerability Scanning          *

Hackers Focus on Human Rights Activists in Morocco and Western Sahara          *

10-Year-Old Romanian Hacker Collective 'RUBYCARP' Emerges with Botnet Operations          *

Security Alert: Multiple Adobe Software Products Affected by Code Execution Vulnerabilities on Patch Tuesday          *

Fake E-Shop Campaign Targets Banking Security Across Regions          *

New Latrodectus Malware Emerges in Phishing Campaigns          *

Targus Discloses Cyberattack, Temporarily Disrupting Operations          *

Google Sues Chinese Developers Over Fake Cryptocurrency Apps Scam          *

UK Authorities Investigate 'Honey Trap' Scheme Targeting Westminster Figures          *

D-Link NAS Devices Vulnerable to Critical Command Injection and Backdoor Flaw          *

Massive Data Breaches Hit Hawai Based Insurance Giant and Healthcare Providers          *

Home Depot Data Breach Exposes Employees to Phishing Risks          *

Red CryptoApp Ransomware Group Unveils 'Wall of Shame' for Exposed Victims          *

Cisco Alerts Users to Vulnerability in End-of-Life Small Business Routers          *

Facebook Malvertising Campaigns Exploit Interest in AI to Spread Password-Stealing Malware          *

Byakugan Malware Exploits Adobe Acrobat Reader Installers          *

Emerging Threats to AI-as-a-Service Security          *

Vulnerability in HTTP2 Protocol's CONTINUATION Frame Enables DoS Attacks          *

Cyberattack Causes Disruption to Hoya's Optics Production and Orders          *

City of Hope Notifies Over 800,000 Individuals of Data Breach Impacting Personal and Health Information          *

Progress Software Releases Critical Patches for Flowmon Vulnerability          *

Magento Shoplift Malware Targets WordPress Sites          *

Visa Alerts Financial Institutions of JsOutProx Malware Surge Targeting Customers          *

Rising Threat of SMS Phishing (Smishing) Targeting Enterprises          *

SurveyLama Data Breach Exposes 4.4 Million Users' Personal Information          *

Google Issues Patches for Actively Exploited Pixel Vulnerabilities          *

Prudential Financial's Data Breach Affects 36,000 Individuals          *

Ransomware Group INC Ransom Claims Responsibility for UK City Council Cyber Attack          *

Security Alert: Highly Sensitive Files Disappear from Europol Headquarters          *

Critical Linux Vulnerability 'WallEscape' Exposes User Passwords          *

Agent Tesla Malware Targets American and Australian Organizations in Recent Campaign          *

Ivanti Issues Emergency Patches for 4 Vulnerabilities in Connect Secure and Policy Secure          *

Threat Actors Use YouTube Video Game Cracks to Deliver Malware          *

Critical Vulnerability Detected in LayerSlider Plugin Installed on a Million WordPress Sites          *

Google Settles 'Incognito Mode' Privacy Lawsuit, Agrees to Delete Billions of Browsing Records          *

Surge in Cyberattacks Inflicting Physical Disruption          *

Binarly Introduces Free Scanner to Detect Linux Executables Affected by XZ Utils Supply Chain Attack          *

WordPress WP-Members Plugin Vulnerability Enables Script Injection          *

NIST Faces Challenges with National Vulnerability Database, Urgent Calls for Action          *

Google Introduces Device Bound Session Credentials (DBSC) for Enhanced Browser Security in Chrome          *

Ransomware Suspected in Missouri County's Tax Payment Disruption          *

Vulnerability in Hotel Self Check-In Kiosks Exposes Room Access Codes          *

China-Linked Hackers Unleash Stealthy 'UNAPIMON' Malware for Covert Operations          *

Malicious Android Apps Transforming Phones into Proxies for Cybercriminals Discovered          *

PandaBuy Data Breach Exposes Information of 1.3 Million Users          *

The Absence of Human Imperfections: AI's Identifying Flaw          *

OWASP Foundation Discloses Data Breach Affecting Specific Members due to Misconfigured Legacy Wiki Server          *

Indian Government Rescues 250 Citizens Compelled into Cybercrime Activities in Cambodia          *

Pentagon Outlines Strategy for Enhancing Cybersecurity of Defense Industrial Base          *

Sellafield Nuclear Waste Facility Faces Prosecution Over Cybersecurity Lapses          *

MarineMax, a Yacht Retailer, Reveals Data Breach Following Cyberattack          *

Vultur Banking Malware Masquerades as McAfee Security App on Android          *

Prisma Finance Crypto Theft Concludes Unusual Week of Platform Breaches          *

Activision Urges 2FA Activation for Accounts Compromised by Recent Malware Theft          *

Google Podcasts Service to Close in the US Next Week          *

More Than 100 Malicious Packages Aiming at Popular ML PyPi Libraries          *

AT&T Reports Exposure of 73 Million Customers' Data on Dark Web          *

Malicious Backdoor Discovered in xz: A Critical Data Compression Library for Linux          *

Malicious Ads Distribute Stealer Malware, Targeting macOS Users          *

Data Breach at Massachusetts Health Insurer Affects 2.8 Million Individuals          *

Cisco Alerts Regarding Password-Spraying Attacks on Secure Firewall Devices in the US          *

Darcula, The Global Threat of Phishing-as-a-Service Exploiting Victims Worldwide          *

Emergence of Linux Variant of DinodasRAT in Global Cyber Campaigns          *

Google Releases Chrome Browser Security Update to Patch Vulnerabilities          *

NHS Scotland Contained Ransomware Attack, Ensuring Regional Isolation          *

Vietnam's Leading Securities Brokerage Hit by Cyberattack, Halting Trading Operations          *

Ransomware Strikes Municipalities in Texas and Georgia, Disrupting Essential Services          *

Cyberattack Strikes Hot Topic with Credential Stuffing, Data Compromised          *

Cryptocurrency Scammers Hijack Trezor's Twitter Account Using Fake Calendly Invite          *

TheMoon Malware Rapidly Infects 6,000 ASUS Routers in 72 Hours for Proxy Service          *

Code Execution Vulnerabilities Discovered in NVIDIA ChatRTX for Windows          *

Chinese APT Groups Targeting ASEAN Entities Uncovered          *

Guardio Labs Discovers Vulnerability in Microsoft Edge          *

Hackers Target India's Defense and Energy Sectors with Malware Disguised as Air Force Invitations          *

Dubious NuGet Package Raises Concerns of Chinese Industrial Espionage          *

Chinese Cybersecurity Firm Linked to Communist Party Government Targets Australia          *

Portugal Mandates Halt to Biometric Data Collection by Sam Altman's Worldcoin          *

State Department Issues Alert on Fraudulent Scheme Targeting Payroll Systems          *

UK Street Newspaper, Big Issue, Targeted by Ransomware Gang          *

Japan Conducts First Cyber Defense Exercises with Pacific Island Nations          *

Finland Confirms APT31 Hackers Responsible for 2021 Parliament Breach          *

AMD Zen CPUs Vulnerable to New ZenHammer Memory Attack          *

Giant Tiger Reports Customer Data Breach Linked to Third-Party Vendor          *

Free VPN Apps on Google Play Convert Android Devices into Proxies          *

Sophisticated Attack Campaign Targets GitHub with Malicious Packages Impacting Top.gg and Others          *

New Zealand Reveals State-Sponsored Cyberattacks from China          *

Critical 17,000 Vulnerabilities Found in German Microsoft Exchange Servers          *

Raspberry Pi Transformed into Cybercriminals' Plug-and-Play Fraud Tools          *

Lumen Technologies Uncovers 40,000-Strong Botnet Utilizing End-of-Life Devices          *

Panera Bread Hit by Nationwide IT Outage Since Saturday          *

Mitigating Shadow AI Risks in Organizational Settings          *

Petersen Health Care Declares Bankruptcy Following Cyberattack and Loan Defaults          *

Hacking Group R00Tk1t Targets Indian Political Party, Raises Concerns Ahead of Elections          *

UK's Communications Workers Union Faces Cyberattack          *

Google's AI-Driven Search Feature Accused of Promoting Scam Sites          *

StrelaStealer Malware Targets Organizations in US and EU Through Large-Scale Phishing Campaigns          *

Russian State-Backed Hackers Target Ukrainian Internet Providers in Sophisticated Cyberattacks          *

SCAA Faces Cyberattack: Data of 70,000 Members Possibly Compromised          *

Mozilla patches Firefox zero-days worth $100,000 after a two-day hackathon          *

German Authorities Dismantle Major Online Marketplace for Drugs and Cybercrime          *

Illinois County Government and Local College Hit by Ransomware Attacks          *

FlowFixation Vulnerability in AWS Managed Workflows for Apache Airflow          *

GoFetch Side-Channel Attack Targets Apple M1, M2, and M3 Processors          *

Ivanti Fixes Critical Vulnerabilities in Standalone Sentry, Neurons for ITSM          *

Tax Phishing Attack Targets Small Business Owners for Social Security Numbers          *

Security Researchers Uncover Critical Flaw in Hotel Door Systems          *

Foxit Reader Vulnerability Exploit Sparks Urgent Patch Release          *

GitHub Unveils AI-Powered Tool for Automatic Code Vulnerability Fixes          *

Pwn2Own Vancouver: Successful Hacks on Windows 11, Tesla, and Ubuntu Linux          *

Microsoft Releases Patch for Xbox Vulnerability After Initial Dismissal          *

Chinese Hacker Exploiting Vulnerabilities Targets Global Institutions          *

Malware-as-a-Service Campaign Targets Android Users in India          *

Hackers Target Belgian Grand Prix Fans with Phishing Scam          *

Critical Vulnerabilities Found in Argo GitOps Tool for Kubernetes          *

Atlassian Fixes Critical Vulnerability in Bamboo Data Center and Server          *

Windows Server Updates Trigger LSASS Memory Leak, Prompting Crashes          *

Critical Vulnerabilities Addressed in Chrome 123 and Firefox 124 Updates          *

US Department of Defense Celebrates Milestone in Ethical Hacking Program          *

Exploitation of TeamCity Vulnerability Linked to Jasmin Ransomware and Other Malware          *

New Loop DoS Attack Threatens Hundreds of Thousands of UDP-Based Hosts          *

TMChecker: New Dark Web Toolset Targets Remote Access Services and E-Commerce Platforms          *

Impact of Cyberattack on UnitedHealth Group's Change Healthcare Unit Sparks Legal Action          *

Phishing Campaign Unveils Ingenious Microsoft Office Tactic to Distribute NetSupport RAT          *

APIs Drive the Majority of Internet Traffic and Cybercriminals Exploit Them          *

Pensacola City Government Phone Lines Disabled by Cyberattack          *

Security Researchers Uncover Massive Data Leak from Misconfigured Google Firebase Instances          *

AcidPour, A New Data-Wiping Malware Targeting Linux IoT Devices          *

Expansion of International Spyware Agreement Includes Six New Countries          *

Nations Direct Mortgage Data Breach Exposes 83,000 Individuals' Information          *

Phishing Evolution: Hackers Target Popular Document Publishing Sites          *

Relentless Cyber Activity Targeting Global Critical Infrastructure          *

MediaWorks Investigates Alleged Data Breach Impacting 2.4 Million Individuals          *

Machine Learning Model Repositories Vulnerable to Supply Chain Attacks          *

Apex Legends Esports Tournament Temporarily Halted Due to Cheating Incident          *

Key MITRE ATT&CK Techniques Exploited by Cyber Attackers          *

Fujitsu Discovers Malware Breach, Customer Data Compromised          *

Unveiling an Evasive Azorult Campaign Leveraging HTML Smuggling via Google Sites          *

Fortra Fixes Critical Remote Code Execution (RCE) Vulnerability in FileCatalyst Transfer Tool          *

Unveiling the Earth Krahang APT Campaign: Targeting Government Entities Worldwide          *

Gitgub Malware Campaign Targets GitHub Users with RisePro Info-Stealer          *

Ransomware Threat Targets South African Pension Data          *

Unveiling a Novel Acoustic Side-Channel Attack on Keyboards          *

GhostRace: New Data Leakage Attack Exploits Speculative Execution          *

AT&T Denies Origin of Leaked Data Impacting 70 Million Individuals          *

ShadowSyndicate Hackers Exploits CVE-2024-23334 in Aiohttp Python Library          *

Scranton School District Faces Ransomware Attack, Disrupting Operations          *

Encina Wastewater Authority Targeted by BlackByte Ransomware Group          *

WordPress Sites Vulnerable to Takeover Due to Discontinued Security Plugins          *

McDonald’s Experiences Global IT Failure Impacting Stores          *

Cisco Fixes High-Severity IOS XR Vulnerabilities          *

Oversubscribed and Outdated Supercomputers Cause Delays in NASA Missions          *

Threat Actors Exploit Document Publishing Sites for Persistent Credential and Session Token Theft          *

Irish Government Website Bug Exposing COVID-19 Vaccination Records Takes 2 Years to Publicly Disclose          *

StopCrypt Ransomware: Evading Detection as the Most Widely Distributed Threat          *

Real-Time URL Protection Integrated into Chrome's Standard Safe Browsing          *

Researchers Outline Vulnerability in Kubernetes Allowing Takeover of Windows Nodes          *

Alabama is Experiencing a DDoS Cyberattack with Alleged Support from Russian Hacktivists          *

Phone Number Hijacking: SIM Swappers Targeting eSIMs          *

Google's Gemini AI Vulnerable to LLM Threats, Researchers Warn          *

Billion-Dollar Boat Seller MarineMax Discloses Cyberattack to SEC          *

Vcurms Malware Sets Sights on Popular Web Browsers for Data Theft          *

Cloud-Based Assault Targets Meson Crypto CDN Prior to Launch          *

Chipmaker Patch Tuesday: Intel and AMD Tackle Fresh Microarchitectural Vulnerabilities          *

Data Breach Exposes Over 2.3 Million Records from Family Entertainment Business          *

Securing Third-Party App Usage in Mid-Market Companies Scaling from 500 to 5000 Employees          *

Server Leak Exposes Wealth of Customer Data from Leading EV Charging Firm          *

Exposed: Vulnerabilities in ChatGPT Plugins Compromise Data and Accounts          *

Roku Refunds 15,000 Breached Accounts for Unauthorized Subscriptions          *

Okta Denies Involvement in Data Leak on Hacking Forum          *

Data of 27,000 Individuals Compromised in September Ransomware Attack on Stanford          *

Microsoft Patch Tuesday Security Advisory - March 2024          *

Adobe Patches Critical Vulnerabilities in its Enterprise Products          *

Siemens Ruggedcom Devices Vulnerable to Nozomi Component Flaws in ICS Patch Tuesday          *

SAP Addresses Critical Command Injection Vulnerabilities with Patches          *

Acer Confirms Leak of Philippine Employee Data on Hacking Forum          *

EquiLend Alerts Employees of Data Theft by Ransomware Group          *

Belgian Village Hit by Cyberattack on Brewery Now Faces Second Incident Targeting Coffee Roastery          *

Copyright Lawsuit Targets Nvidia's NeMo AI Framework          *

Personal Information Leaked in Jersey Data Breach          *

The Global Rise of Sophisticated Vishing Campaigns          *

Microsoft SCCM Misconfigurations Unveiled by Researchers as Cyberattack Vectors          *

QNAP NAS Devices Vulnerable Due to Critical Security Flaw          *

French Government Facing Unusually Intense Cyberattacks          *

Leicester City Council Grapples with Extended IT Outage After Cyber Attack          *

Russian Gov Hackers Steal Microsoft Source Code via Email Surveillance          *

Paysign Investigates Potential Data Breach Amid Reports of Stolen Consumer Information          *

Australian graphics company Canva says font security remains a significant issue          *

Exploitation of WordPress Plugin Vulnerability Leads to Malware Infection on 3,300 Sites          *

QEMU Exploitation: A Novel Tunneling Technique Threatens Company Networks          *

In-Memory Web Shell Exploits Target Atlassian Confluence Vulnerability          *

CISA Alerts of Exploited Pixel Phone Vulnerability          *

Unpatched Sceiner Smart Lock Flaws Enable Unauthorized Door Access          *

Evolution of Threats: Transition from Web3 Drainer to Distributed WordPress Brute Force Attack          *

NTLM Authentication Vulnerability Exploited by TA577 Cyber Threat Actor          *

Chinese Government Hacking Group Targets Tibetans in Cyber Espionage Campaign          *

Swiss Government Documents and Credentials Leaked in Ransomware Attack          *

Technology Disruption Under Investigation at South St. Paul Public Schools          *

Snake Python-Based Information Stealer Targets Facebook Users in Cyberattacks          *

Cisco Addresses High-Severity Vulnerabilities in Secure Client VPN Application          *

Georgia Tech Redefines Industrial Cybersecurity Threats with Web-Based PLC Malware          *

PetSmart Issues Password Resets Amid Credential Stuffing Attack          *

Japanese Ministry Attributes Line Data Breach to Shared Technology with Naver          *

Google's March 2024 Android Security Update Addresses Critical Vulnerabilities          *

Beware of Fake Online Meeting Platforms Spreading Malicious RATs          *

HHS Support Measures for Healthcare Providers Amid Change Healthcare Ransomware Attack          *

Malicious Campaign Exploits Misconfigured Cloud Servers in Linux          *

Organizations are deliberately launching applications with known vulnerabilities          *

Canadian Financial Intelligence Agency Shuts Down Systems Amid Cyberattack          *

North Korean Threat Actors Exploit ConnectWise Vulnerabilities to Deploy TODDLERSHARK Malware          *

Cybercriminals Unleash Upgraded GhostLocker 2.0 Ransomware in Global Attack Campaign          *

North Korean Hackers Breach South Korean Semiconductor Companies          *

Apple Issues Urgent Software Update to Address Critical Security Flaws in iOS Platform          *

Meta-Owned Facebook and Instagram Experience Global Outage, Prompting Swift Response          *

Cybercriminals Utilize New DNS Hijacking for Investment Scams          *

WogRAT Malware Exploits Online Notepad Platform in Stealthy Attacks          *

FortiGuard Labs Discovers CHAVECLOAK Trojan Targeting Brazilian Banking Users          *

Data Breach at Mr. Green Gaming Exposes Personal Information of 27,000 Users          *

VMware Issues Urgent Patches for Critical ESXi Sandbox Escape Vulnerabilities          *

Cybercriminals Embrace AI: Shaping a New Era of Malware Development          *

Emerging Threat: Morris II Worm Exploits Generative AI for Malicious Propagation          *

Expansion of Predator Spyware: New Network Infrastructure in Botswana and the Philippines          *

RA World Ransomware: A Multistage Threat Employing Anti-AV Tactics and GPO Exploitation          *

Critical Vulnerabilities in JetBrains TeamCity On-Premises Potentially Allowing Server Takeovers          *

Sophisticated Phishing Attacks Target FCC Employees and Cryptocurrency Platforms          *

American Express Notifies Customers of Third-Party Service Provider Data Breach          *

Critical Vulnerabilities Patched in Hikvision's HikCentral Professional Security Management System          *

Exploitation of Major Brand Subdomains in Large-Scale Spam Campaign          *

Major Security Flaws Found in Doorbell Cameras Sold Online, Including Amazon          *

FBI and CISA Release Indicators of Compromise for Phobos Ransomware          *

Unit 42 Discovers New Linux Variant of Bifrost RAT with Innovative Evasion Tactics          *

U.S. Court Mandates NSO Group's Disclosure of Pegasus Spyware Code to WhatsApp          *

Golden Corral Data Breach Exposes Personal Information of 183,000 Individuals          *

CISA Alerts to Exploitation of Windows Streaming Service Vulnerability          *

Taiwan's Chunghwa Telecom Hit by Data Breach: 'Sensitive' Information Stolen by Hackers          *

Meta Fixes Facebook Account Takeover Vulnerability          *

North Korean Hackers Exploit Windows Zero-Day in Rootkit Attack          *

SPIKEDWINE Exploits European Diplomats Through WINELOADER Attack          *

BEAST AI: Disrupting Large Language Models in Just One Minute of GPU Time          *

Enterprises Struggle with Mobile Fraud Amid Surge in AI-Powered Attacks          *

Internet and Telecom Services Disrupted in Chad Amid Deadly Political Clashes          *

New Linux Malware GTPDOOR Exploits GPRS Tunnelling Protocol for Telecom Network Attacks          *

Cisco Fixes High-Severity Vulnerabilities in Data Center OS          *

Irish Foreign Affairs Ministry Finds 'No Evidence' of Cyber Breach After Extortion Claim          *

Pharmaceutical Distributor Cencora Discloses Data Exfiltration in Cybersecurity Incident          *

Savvy Seahorse Unveils Innovative DNS CNAME Technique          *

Travel Industry Faces Threat of Agent Tesla Malware Attacks Targeting Online Travelers          *

New Malware Campaign "TimbreStealer" Targeting Mexican Users Discovered by Cisco Talos          *

Bazaarvoice Targeted in Cyberattack by Mogilevich Ransomware Group          *

Malicious JavaScript in Tornado Cash DAO Compromises Transaction Privacy          *

medQ Acknowledges Data Breach Due to Software Encryption Incident          *

Anycubic 3D Printers Hacked, Users Warned of Vulnerability          *

Pepco Group's Hungarian Business Targeted in Phishing Attack, Suffers €15 Million Losses          *

Newly Discovered Xeno RAT Trojan Poses Significant Threat on GitHub          *

Web Check: Free Open-Source Intelligence Tool for Website Analysis          *

LoanDepot Confirms Data Breach: Almost 17 Million Customers Affected by Ransomware Attack          *

Hackers Exploit 14-Year-Old CMS Editor on Government and Education Sites for SEO Poisoning          *

Critical SQL Injection Vulnerability in WordPress Plugin Puts Over 200K Websites at Risk          *

Hugging Face Vulnerability Opens Door to Supply Chain Attacks on AI Models          *

New IDAT Loader Version Utilizes Steganography to Distribute Remcos RAT          *

Russian Cyberspies Exploit Dormant Accounts to Target Cloud Infrastructure          *

North Korean Hackers Distribute Malicious npm Packages Targeting Developers          *

Hackers Swipe Nearly $10 Million from Axie Infinity Co-Founder's Personal Accounts          *

Critical Security Vulnerability Discovered in Popular 'Ultimate Member' WordPress Plugin          *

Malawi Immigration Department Suspends Passport Services Due to Cyberattack          *

ThyssenKrupp Automotive Body Solutions Business Unit Falls Victim to Cyber Attack          *

Zyxel Addresses Remote Code Execution Vulnerability in Firewall Products with Patches          *

Hackers Expose 2.5M Private Plane Owners' Data in LA International Airport Breach          *

Major Brands' Subdomains Hijacked in Massive Spam Campaign          *

Biden's Executive Order Aims to Strengthen Cybersecurity Measures at Ports          *

Finance Department Expresses Regret Over Second Unintentional Data Leak in Four Months          *

High-severity Vulnerability in Apple Shortcuts App Exposes Sensitive Data          *

RCMP Probes Cybersecurity Incident During Ongoing Website Disruption          *

Quik Pawn Shop Targeted in Alleged Cyberattack by Akira Ransomware Group          *

UnitedHealth Confirms Optum Cyberattack, Leading to US Healthcare Billing Outage          *

Rising Threat: Web3 Malware Exploits Cryptocurrency Assets          *

SSH-Snake: Emerging Self-Modifying Worm Poses Threat to Networks          *

FTC Alleges Avast Sold Customer Browsing Data to Advertisers Without Consent          *

Singapore Sees Surge in Scams and Cybercrime Despite Anti-Scam Measures          *

Authentication Bypass Vulnerabilities Discovered in Wi-Fi Software for Android, Linux, and ChromeOS          *

Arizona Firm's Data Breach Affects 2.4 Million Patients          *

Ubuntu Addresses Multiple FreeImage Vulnerabilities          *

Tangerine Telecom Breach Impacts 232,000 Customers          *

Signal Beta Introduces Custom Usernames for Enhanced Privacy          *

Researchers Warn of Surging Banking Malware Campaign Exploiting Google Cloud Run          *

Researchers Unveil 'VoltSchemer' Attacks Exploiting Wireless Charger Vulnerabilities          *

Ransomware Attack Hits DC-Area School System, Affecting Data of 100,000 Individuals          *

Malicious PyPI Packages Exploit DLL Side-Loading for Supply Chain Attacks          *

Internal Documents from Chinese Hacking Contractor iSoon Exposed in Leak          *

DDoS Attack Disrupts Top UK Universities' Services          *

PSI Software, a Critical Infrastructure Vendor, Targeted by Ransomware Attack          *

VietCredCare, A New Malware Threat Targeting Facebook Advertisers in Vietnam          *

Chrome 122 and Firefox 123 Address High-Severity Vulnerabilities with Security Patches          *

Global Law Enforcement Targets LockBit Ransomware Syndicate          *

Linux Malware Campaign 'Migo' Targets Redis for Cryptomining          *

Hacker group Cactus Ransomware Confirms Schneider Electric Hack          *

North Korea Expands Revenue with Malware-Infused Gambling Websites as-a-Service          *

Malware Attacks Increases as MacOS Adoption Rises: New Threats Target Apple Users          *

M.O.R.E' Ransomware Surfaces on Dark Web, Posing Threat to Users Across Windows, Mac, and Linux Platforms          *

Wyze Camera Breach Exposed 13,000 Strangers to View Inside Homes          *

Critical Vulnerabilities Identified in ConnectWise ScreenConnect          *

KeyTrap Vulnerability: Disrupting Internet Access with a Single DNS Packet          *

Researchers Warn Smart Lawn Mowers could be a Target for Cyberattacks          *

Revealing the Enigmatic 'MMS Fingerprint' Hack by NSO Group in Mobile and Wireless Networks          *

Security Breach at Jaypee University in India: Allegations of Compromised Institute and Disclosure of Sensitive Data          *

Anatsa Android Malware Infects Over 150,000 Devices Through Google Play Downloads          *

Escalating DDoS Attacks Pose Threat to Media Freedom in Europe          *

New Espionage Campaign Targets European and Iranian Embassies by Russia-Aligned Hackers          *

New MonikerLink Flaw Puts Outlook Users at Risk of Data Theft and Malware Exposure          *

Hackers Allegedly Breach Staffing Giant Robert Half, Offer Sensitive Data for Sale          *

Critical Security Flaw in GL-AX1800 Router Allows Remote Code Execution by Attackers          *

Hacker Caught Selling Bank Accounts of US and Canadian Users          *

Cybersecurity Crisis Unfolds in India's Financial Sector as Motilal Oswal Breached          *

Mastermind Behind FBI's Most-Wanted Zeus and IcedID Malware Cases Admits Guilt          *

Eight Critical Vulnerabilities Revealed in the AI Development Supply Chain          *

Cryptocurrency Firms Targeted by RustDoor macOS Backdoor Disguised as Job Offers          *

Exploiting AWS for Mass Smishing: Unveiling the Malicious 'SNS Sender' Script          *

U.S. Authorities Disrupt Russia-Linked Botnet Involved in Cyber Espionage Activities          *

Unauthorized Access to U.S. State Government Network Exploiting Former Employee's Account          *

ALPHV Ransomware Announces Successful Attacks on loanDepot and Prudential Financial          *

CISA Urges Immediate Patching of Cisco ASA Flaw Exploited in Ransomware Attacks          *

Critical RCE Vulnerabilities Patched by SolarWinds in Access Rights Manager          *

CUSG CMS Vulnerabilities Exposed Credit Unions to Attacks          *

TicTacToe Dropper Unleashes Data Theft and Multi-Threat Spread on Windows Systems          *

New 'Gold Pickaxe' Malware on Android and iOS: Targeting Users through Facial Data Theft for Fraudulent Activities          *

U.S. Internet Exposes Extended History of Internal and Customer Emails          *

Chinese Hackers Utilize Deepfakes in Mobile Banking Malware          *

RansomHouse Gang Launches MrAgent Tool for Automated VMware ESXi Attacks          *

Uncovering Three Key Application Security Flaws Beyond Automated Scanner Detection          *

South Korea Accuses North Korean Hackers of Breaching Presidential Office Email Account          *

JabberZeus Leader Pleads Guilty to Zeus and IcedID Malware Operations          *

Russian Threat Actor Turla Targets Polish NGOs with Newly Deployed TinyTurla-NG Backdoor          *

ESET Fixes High-Severity Privilege Escalation Vulnerability          *

Microsoft Acknowledges Exploitation of Critical Zero Day Vulnerability in Exchange Server          *

Qakbot Malware Signals Potential Resurgence Post Law Enforcement Takedown          *

Atlassian Vulnerability Identified as Cause of GAO Breach          *

Microsoft and OpenAI Issue Alert Regarding Nation-State Hackers Utilizing AI for Cyber Attacks          *

DNSSEC Vulnerability Single Malicious Packet Can Disable DNS Servers          *

The Ubuntu Command not found Tool may cause Users to Install Rogue Packages          *

Trans Northern Pipelines Investigates Cyber Breach by ALPHV or BlackCat Ransomware Gang          *

Varta AG Halts Production Following Cyberattack on IT Systems          *

Researchers Reveal KeyTrap DNS Vulnerability with Potential to Disable Large Parts of Internet          *

Zoom Fixes Critical Vulnerability in Windows Applications          *

Resurgence of Bumblebee Malware Attacks Following 4-Month Hiatus          *

Data Breach at Integris Health Affects 2.4 Million Patients          *

Cybercriminals Enhance Glupteba Botnet's Evasion Methods with Undocumented UEFI Bootkit          *

Microsoft Patch Tuesday Security Advisory - February 2024          *

PikaBot Emerges with Enhanced Code Efficiency and Sneaky Strategies          *

Jet Engine Dealer Reports Unauthorized Activity Amid Cybersecurity Incident          *

Prudential Financial Reports Network Breach, Employee Data Compromised          *

CISA Adds Roundcube Email Software Flaw to Known Exploited Vulnerabilities Catalog          *

Microsoft Addresses Zero-Day Exploited in DarkMe RAT Distribution Campaign          *

Cyber Fraud Epidemic: Telangana Loses 150 Crore in Just Over a Month          *

Cybercriminals Exploit Three Familiar Vulnerabilities in Microsoft Word and Excel          *

Ransomware Attack Shuts Down 21 Romanian Hospitals          *

FCC Implements Stricter Data Breach Reporting Rules for Telecoms          *

Bank of America Alerts Customers About Data Breach Following Vendor Cyberattack          *

Microsoft Introduces Sudo for Windows 11 to Streamline Command Execution          *

Senior Executives Targeted in Ongoing Azure Cloud Account Takeover Campaign          *

Free Decryption Tool Released After Rhysida Ransomware Successfully Cracked          *

Security Flaw in Smart Helmets Puts Millions in Danger of Hacking and Surveillance          *

Largest Casino's Mobile App Exposes Customer Personal Information          *

U.S. Justice Department Dismantles Warzone RAT Infrastructure and Apprehends Key Operators          *

UK Shifts from Physical Biometric Immigration Cards to E-Visas          *

Microsoft Outlook Clients Encounter Exchange ActiveSync Syncing Issues          *

Canada Moves to Ban Flipper Zero and Similar Devices Amid Car Theft Concerns          *

ExpressVPN Bug Exposes DNS Requests Over Years, Compromising User Privacy          *

New Variant of MoqHao Android Malware Operates Without User Interaction          *

Zardoor Backdoor Stealthily Targets Saudi Islamic Charity Organization          *

New Ivanti Authentication Bypass Flaw Impacts Connect Secure and ZTA          *

Raspberry Robin Exploits New One-Day Vulnerabilities, Enhancing Stealth and Persistence          *

Advanced macOS Malware Disguised as Visual Studio Update          *

Hyundai Motor Europe Hit by Black Basta Ransomware Attack          *

Ransomware Attack Paralyzes Municipality of Korneuburg, Austria          *

Microsoft Reveals New Windows 11 Feature: 'Sudo for Windows'          *

LastPass Users at Risk from Counterfeit App on Apple App Store          *

Escalating Iranian Offensive Cyber Operations Amid Israel-Hamas Conflict          *

Analysis of HijackLoader Malware's Enhanced Defense Evasion Techniques          *

APTs Exploit FortiOS Vulnerabilities in Critical Infrastructure Attacks          *

Vulnerabilities in Cisco's Enterprise Communication Devices are Patched          *

Google's Pilot Program Targets Financial Fraud by Blocking Risky Android APKs          *

No Evidence of 3 Million Electric Toothbrushes Used in DDoS Attack          *

Shim Vulnerability Poses Critical Risk to Majority of Linux Systems, Allowing Complete Compromise          *

Security Flaw Exposes User Data in Spoutible, Prompting Concerns and Remedial Actions          *

Danish Data Protection Authority Issues Injunction on Student Data Transfer to Google          *

66,000 Individuals Impacted by SIM-Swapping Attacks Targeting US Insurance Giants          *

Researchers Expose DiceLoader Malware Targeting Corporate Businesses          *

U.S. Agencies Issue Warning on Chinese Cyber-Espionage Group's Threat to Critical Infrastructure          *

Canon Mitigates 7 Critical Flaws in Small Office Printers with Urgent Patches          *

Fortinet Addresses Critical Flaws in FortiSIEM with Immediate Patches          *

False Facebook Job Ads Spreading 'Ov3r_Stealer' to Take Crypto and Credentials          *

JetBrains Alerts of Fresh Authentication Bypass Vulnerability in TeamCity          *

Verizon Insider Data Breach Impacts Over 63,000 Employees          *

New Vulnerabilities Uncovered in Azure HDInsight Spark, Kafka, and Hadoop Services          *

Android Addresses Critical Remote Code Execution Vulnerability with Patch          *

Pennsylvania Courts Website Targeted in Denial-of-Service (DoS) Attack Disruption          *

French Healthcare Firm Viamedis Faces Cyberattack, Potentially Impacting Millions          *

AI SPERA Introduces Criminal IP ASM on Microsoft Azure Marketplace          *

Dutch Ministry of Defence Targeted in Chinese State-Sponsored Cyberattack          *

Cybercriminals Exploit Job Boards, Pilfering Millions of Resumes and Personal Data          *

ApateWeb: Cybercriminals Exploit Over 130,000 Domains for Large-Scale Cyber Attacks          *

Employee Falls Victim to $25.6M Deepfake Scam Involving AI-Generated CFO          *

Microsoft Investigating Outlook Security Alerts Issue with .ICS Calendar Files          *

Mitsubishi Electric Discloses Critical Vulnerabilities in Factory Automation Products          *

Ivanti SSRF Zero-Day Actively Exploited at Scale, Warns Security Researchers          *

Institute of Statistics in Albania Targeted by Iranian-Linked Hackers          *

US Implements Visa Ban for Individuals Tied to Commercial Spyware Misuse          *

NSO Group's Pegasus Spyware Targets Jordanian Activists and Journalists          *

VajraSpy Malware Infecting Android Devices by using Patchwork's Romance Scam          *

"Commando Cat", a new Cryptojacking Campaign Strikes Exposed Docker APIs          *

QNAP Addresses High-Severity Vulnerabilities in QTS and Qsync Central with Patches          *

A Cybercrime Operation Carried out by Interpol, Synergy, Takes Down 1,300 Servers          *

Lurie Children's Hospital Halts IT Systems in Response to Cybersecurity Event          *

APT28: Russian Hackers Utilize NTLM Relay Attacks to Target High-Value Organizations          *

Leaky Vessels Flaws Allow Unauthorized Escape from Docker and runc Containers          *

DirtyMoe Malware Strikes Over 2,000 Computers in Ukraine, Engaging in DDoS Attacks and Cryptojacking          *

Latest Mispadu Banking Trojan Exploits Windows SmartScreen Vulnerability          *

South African Railways Suffers Over $1 Million Loss Due to Phishing Scheme          *

Critical Mastodon Flaw Enables Hijacking of Any Decentralized Account by Hackers          *

Clorox Reveals $49 Million in Costs Resulting from Cyberattack          *

AnyDesk Confirms Breach of Production Servers, Urges Users to Update Software and Change Passwords          *

CISA Alert: Critical Security Vulnerabilities in Moby and OCI Components          *

Unauthorized Access to Cloudflare via Compromised Okta Auth Tokens          *

Romanian Parliament Faces Cybersecurity Breach, Exposing Officials' Confidential Information          *

PurpleFox Malware Spreads Across Thousands of Computers in Ukraine          *

CISA Urges Enhanced Security for SOHO Routers against Volt Typhoon Threats          *

FTC Mandates Enhanced Security Measures for Blackbaud Following Major Data Breach          *

FritzFrog's Return: Unleashing Log4Shell and PwnKit Exploits to Propagate Malware in Network Infrastructures          *

Global Affairs Hit by Cyberattack, Initiates Shutdown of Computer Systems for Remediation          *

HeadCrab 2.0 Embraces Fileless Strategy, Focuses on Exploiting Redis Servers for Cryptocurrency Mining          *

CISA Issues Alert on Active Exploitation of Critical Flaws in Apple iOS and macOS          *

Android Local Elevation Flaw Exploit Unleashed, Affecting 7 OEMs          *

Fintech Giant Direct Trading Technologies Faces Data Leak Impacting Over 300K Traders          *

Cybercriminals Leveraging Ivanti VPN Vulnerabilities to Distribute KrustyLoader Malware          *

UNC4990 Strikes Italian Businesses with Weaponized USBs, Unleashing Cryptojacking Malware          *

Telegram's Role in Cybercrime: Easy-to-Use Kits and Malware Fueling a Surge in Phishing Attacks          *

Johnson Controls Reports $27 Million Cost and Data Breach from Ransomware Attack          *

Ivanti Issues Alert on Actively Exploited Zero-Day in Connect Secure Product          *

Mercedes-Benz Source Code Exposed Due to Mishandled GitHub Token          *

Critical Workspace Creation Flaw in GitLab Requires Immediate Upgrade to Mitigate File Overwrite Risk          *

Web-Based Ransomware Decryption Tool Facilitates Recovery of Partially Encrypted Files          *

The Mother of All Breaches: Massive Release of 26 Billion Records Exposes LinkedIn, Twitter, and Major Organizations          *

Threat Actors Sell 1.8TB Database of Personal Information for 750 Million Indian Mobile Users          *

Ukrainian Prisoners of War Oversight Agency Faces Cybersecurity Breach          *

Newly Discovered glibc Vulnerability Enables Attackers to Attain Root Access on Major Linux Distributions          *

DarkGate Malware Spread Through Microsoft Teams Phishing in Group Chats          *

Italian Data Protection Authority Accuses ChatGPT of Privacy Violations Under GDPR          *

ZLoader Malware Resurfaces with 64-bit Windows Compatibility in Latest Variant          *

Juniper Networks Issues Critical Junos OS Updates to Address High-Severity Vulnerabilities          *

Rising Threat: Albabat, Kasseika, Kuiper - Emergence of New Ransomware Gangs Leveraging Rust and Golang          *

Outlook Vulnerability Reveals NTLM Passwords, Researchers Warn          *

Schneider Electric Faces Cactus Ransomware Attack with Threats of Data Leak          *

FBI Warns of Tech Support Scams Employing Couriers for Money Collection          *

Keenan & Associates Alerts 1.5 Million Individuals to Data Breach Following Summer Cyberattack          *

Outlook Apps Encounter Connectivity Issues with Outlook.com, Microsoft Investigating          *

45,000 Jenkins Servers Vulnerable to RCE Attacks Through Public Exploits          *

Microsoft Teams Faces Second Outage in Three Days, Disrupting Services in North and South America          *

Critical Jenkins Vulnerability (CVE-2024-23897) Poses RCE Threat          *

Malicious PyPI Packages Deliver WhiteSnake InfoStealer Malware to Windows Systems          *

Vulnerabilities in Westermo Lynx Switches Pose Risks for Industrial Organizations          *

Ukraine's Major Energy, Postal, and Transportation Entities Targeted in Cyberattacks          *

Pegasus Spyware Targets Mobile Devices of Journalists in Togo          *

AllaKore RAT Malware Targets Mexican Companies Using Financial Fraud Techniques          *

Healthcare Provider Alerts 4 Million Patients Regarding Data Breach at Perry Johnson & Associates (PJ&A)          *

Ransomware Strikes Kansas City Public Transportation Authority          *

Microsoft Issues Alert on Expanding APT29 Espionage Campaign Targeting Global Organizations          *

Malicious Google Ads Target Chinese Users in Ongoing Malvertising Campaign          *

Critical Cisco Flaw Enables Remote Takeover of Unified Communications Systems          *

23andMe Confirms Data Breach: Attackers Exfiltrate Raw Genotype Data and Health Reports          *

Blackwood Hackers Exploit WPS Office Update Mechanism for Malware Installation          *

LODEINFO Fileless Malware Advances with Enhanced Anti-Analysis and Remote Code Techniques          *

Mozilla Addresses 15 Vulnerabilities, Including Five High-Severity, in Firefox and Thunderbird Updates          *

EquiLend Faces Disruptions Following Cyberattack, Initiates Investigation and Restoration Efforts          *

BuyGoods.com Exposes 198GB of Internal and User Personally Identifiable Information (PII) and Know Your Customer (KYC) Data          *

Critical Google Kubernetes Misconfiguration Allows Any Gmail Account to Control Clusters          *

AI Expected to Escalate Ransomware Threat in the UK Over Next Two Years, Warns NCSC          *

Pwn2Own Automotive 2024: Tesla Breached with Demonstration of 24 Zero-Day Exploits          *

Russian Hackers Infiltrate Email Accounts of HPE Security Team          *

Credential Stuffing Attack Affects Potential 340,000 Jason’s Deli Customers          *

Lamassu Bitcoin ATMs Exposed to Exploits, Allowing Potential Wallet Draining          *

Kasseika Ransomware Exploits Antivirus Driver to Disable Competing Security Software          *

DDoS attacks are moving from megabits to terabits, according to Gcore Radar          *

Malicious NPM Packages Compromise Developer SSH Keys, Exfiltrate Data via GitHub          *

Fortra GoAnywhere MFT Authentication Bypass Vulnerability Exploited with Release of Exploit Code          *

Ransomware Attack Strikes Veolia North America's Water Services Operations          *

Active Exploitation: Critical Confluence Remote Code Execution Vulnerability Targeted in 40,000 Attacks Within 3 Days          *

AerCap, Global Aviation Leasing Leader, Falls Victim to Ransomware Attack          *

Apple Releases iOS 17.3, Issues Warning on WebKit Zero-Day Exploits          *

Stealthy Malicious Web Redirect Scripts Concealed Within Compromised Websites          *

Apple Swiftly Addresses 2024's First Zero-Day Exploit with Critical Security Updates          *

North Korean Hackers Exploit Fake Research to Deploy RokRAT Backdoor          *

Splunk Enterprise Addresses High-Severity Vulnerability in Latest Patches          *

Apache ActiveMQ Vulnerability Exploited in Recent Wave of Godzilla Web Shell Attacks          *

Java and Android Vulnerability: MavenGate Attack Poses Security Threat, Allowing Hackers to Hijack Systems via Abandoned Libraries          *

MacOS Backdoor: The Lucrative Threat of Cracked Software Stealing Cryptowallets Surpasses Gold          *

SEC Affirms X Account Compromised in SIM-Swapping Incident          *

VMware Addresses Critical Code Execution Vulnerability in vCenter Server with Security Updates          *

VF Corporation, Owner of Vans and The North Face, Discloses Ransomware Breach Impacting 35 Million Individuals          *

NS-STEALER Exfiltrates Secrets from Popular Web Browsers by Using Discord Bots          *

Critical Vulnerabilities Discovered in Leading Open Source AI/ML Platforms          *

Brave Browser Discontinues 'Strict' Fingerprinting Protection Due to Website Compatibility Issues          *

Ransomware Attack by Tietoevry Results in Disruptions for Swedish Companies and Municipalities          *

Ransomware Attacks Utilize TeamViewer for Network Breaches          *

Developer Charged with Hacking Following Disclosure of Cybersecurity Concerns          *

Cyberattack Disrupts IT Network and Services at Kansas State University          *

Docker Hosts Compromised in Ongoing Scheme for Website Traffic Theft          *

Unpatched Vulnerabilities in Rapid SCADA Pose Risks to Industrial Systems          *

Vulnerability in TensorFlow CI and CD Exposes Supply Chain to Poisoning Attacks          *

Google Detects Deployment of Spica Backdoor Malware by Russian FSB Hackers          *

Inferno Drainer's Scam-as-a-Service Drains 87 Million Dollars from 137000 Victims          *

PixieFail UEFI Vulnerabilities Pose Risks of Remote Code Execution, Denial of Service, and Data Theft for Millions of Computers          *

GitHub Rotates Keys to Mitigate Credential-Exposing Vulnerability          *

VMware Issues Urgent Patch for Critical Aria Automation Flaw          *

LeftoverLocals Attacks Expose AI Data Leak in GPUs from AMD, Apple, and Qualcomm          *

A Botnet Bigpanzi has Infected 170,000 Android TV Boxes with Malware          *

Microsoft Warns of Iranian Hackers Using Fresh MediaPl Malware to Target Researchers          *

Exposes Pegasus Spyware on iPhone with a New iShutdown Method          *

PAX PoS Terminal Vulnerability Enables Transaction Tampering by Attackers          *

Have I Been Pwned adds 71 Million Emails from NazAPI Stolen Account Dataset          *

Oracle Addresses 200 Vulnerabilities in January 2024 Critical Patch Update          *

Atlassian Alerts Critical Remote Code Execution Vulnerability in Confluence Versions          *

Google Addresses First Actively Exploited Chrome Zero-Day of 2024          *

FBI and CISA Issue Alert as Androxgh0st Malware Botnet Targets AWS and Microsoft Credentials          *

New Attack Wave Spreads Remcos RAT Through Adult Games          *

Ransomware Attack Hits Majorca's Calvia City, Extortionists Demand $11 Million          *

Critical Zero-Day Vulnerabilities in Citrix Netscaler Exploited          *

MyFlaw Security Flaw in Opera Browser Exposes Mac and Windows Users to File Execution Attacks          *

Balada Injector Exploits Plugin Vulnerability, Compromising 7,100 WordPress Sites          *

Windows SmartScreen Vulnerability Exploited to Deliver Phemedrone Malware          *

High-Severity Vulnerabilities Detected in Bosch Thermostats and Smart Nutrunners          *

Over 178,000 SonicWall Firewalls Exposed to DoS and Potential RCE Vulnerabilities          *

Microsoft Working on Fix for Windows 10 0x80070643 Errors in KB5034441 Update Installation          *

Lush, UK Cosmetics Retailer, Confirms Cyberattack          *

Ivanti Connect Secure Exploited with Zero-Days to Deploy Custom Malware          *

GitLab Issues Warning on Critical Zero-Click Account Hijacking Vulnerability          *

Cryptominers Targeting Misconfigured Apache Hadoop and Flink with Rootkit          *

Critical Remote Code Execution Vulnerability Discovered in Juniper SRX Firewalls and EX Switches          *

CISA Warns of Actively Exploited Critical Microsoft SharePoint Vulnerability          *

Atomic Stealer Upgrade Targets Mac Users with Encrypted Payload          *

Microsoft Releases Script for Updating Windows 10 WinRE with BitLocker Fixes          *

Python-Powered FBot Hacking Toolkit Targets Cloud and SaaS Platforms          *

Major T-Mobile Outage Disrupts Account Access and Mobile App Functionality          *

Risk Emerges for ERP Systems as New Proof-of-Concept Exploit Targets Apache OFBiz Vulnerability          *

Critical Vulnerabilities Expose 150k WordPress Sites to Takeover Risk Through POST SMTP Mailer Plugin          *

Framework Computer Reveals Data Breach Following Phishing Attack on Accountant          *

Data Breach at Fidelity National Financial Exposes Personal Information of 1.3 Million Individuals          *

Pro-Ukraine Hackers Retaliate, Breach Russian ISP in Response to Kyivstar Attack          *

Free Decryptors Unveiled for Victims of Black Basta and Babuk's Tortilla Ransomware          *

Hathway Faces Data Breach as Hacker Leaks KYC Data of 4 Million Users          *

Cisco Addresses Critical Unity Connection Bug Allowing Attackers to Obtain Root Privileges          *

The Newest Mirai-Based Botnet Exploiting SSH Servers for Cryptocurrency Mining          *

Saudi Ministry Exposes Sensitive Data, Posing Substantial Cybersecurity Threat          *

Significant Data Breach Raises Alarm Over Potential Exposure for Entire Brazilian Population          *

Water Curupira Hackers Unleash PikaBot Loader Malware in Ongoing Cyber Threat Campaign          *

Turkish Hackers Targeting Weakly Secured MSSQL Servers for Global Ransomware Attacks          *

CISA Adds Six Actively Exploited Vulnerabilities to KEV Catalog Affecting Apple, Adobe, Apache, D-Link, and Joomla Products          *

Security Flaws Discovered in QNAP and Kyocera Device Manager          *

Windows 10 KB5034122 Update Addresses Shutdown Bug          *

Microsoft Patch Tuesday Security Advisory - January 2024          *

Fake Hack-Back Offers Target Ransomware Victims, Warns Cybersecurity Firm          *

CISA Issues Warning on Exploitation of Apache Superset Vulnerability          *

Beirut International Airport experienced a cyber attack          *

NoName Group's DDoS Assault Targets Ukrainian Government Websites          *

Maldives Government Websites Recover After Cyberattack Amid Diplomatic Strains          *

North Korea's DPRK Hackers Pilfered $600 Million in 2023 Cryptocurrency Heist          *

NIST Highlights Security and Privacy Risks Amid Swift Deployment of AI Systems          *

Cross Switch Faces Data Breach and 3.6 Million Records Potentially Compromised          *

Hackers Exploit Netgear and Hyundai X Accounts for Crypto Draining Scams          *

Toronto Zoo Confirms Ransomware Attack Had Zero Impact on Animal Wellbeing          *

Syrian Cyber Group Unleashes Destructive SilverRAT Threat          *

Sea Turtle Cyber Espionage Campaign Strikes Dutch IT and Telecom Sectors          *

Cyberattack on loanDepot Mortgage Firm Disrupts IT Systems and Payment Portal          *

Cyberattack Strikes Municipal Systems in West Virginia City          *

Ivanti Warns of Critical EPM Vulnerability Allowing Device Hijacking          *

Cyber Partisans Hacktivist Group Targets and Shuts Down Belarusian News Agency BelTA          *

Pays Fouesnantais and France's Township Faces Municipal Service Disruption after Cyberattack          *

New macOS Backdoor Threat SpectralBlur Linked to North Korean Hackers          *

New Variant of Bandook RAT Targets Windows Machines          *

Hackers Exploit Vulnerabilities in Apache RocketMQ Servers for RCE Attacks          *

Data Breach at Now-Defunct Ambulance Service Affects Nearly 1 Million Individuals          *

In an assault on KyivStar, Russian hackers erased thousands of Systems          *

UAC-0050 Adopts Novel Phishing Strategies for Dispensing Remcos RAT          *

Mandiant’s Twitter Account Recovered Following Six-Hour Crypto Scam Breach          *

Malware Exploiting Google MultiLogin Vulnerability to Persist After Password Reset          *

Linux Targeted by 3 Malicious PyPI Packages Deploying Crypto Miners          *

SMTP Smuggling Flaw Enables Attackers to Bypass Security and Spoof          *

CISA Alert: Actively Exploited Vulnerabilities Found in Chrome and Excel Parsing Library          *

Australian Court Service Faces Breach, Hearing Recordings Potentially Compromised          *

Xerox's U.S. Subsidiary XBS Falls Victim to Breach as Ransomware Gang Leaks Data          *

Orbit Chain's $86 Million Loss in Year-End 2023 Fintech Hack          *

Android Game Developer's Google Drive Misconfiguration Exposes Cloud Security Risks          *

Windows 10 and 11 Face New DLL Search Order Hijacking Variant, Evading Protections          *

Kimsuky Hackers Utilize AppleSeed, Meterpreter, and TinyNuke in Recent Attacks          *

New Malware 'JinxLoader' Delivering Formbook and XLoader Threats          *

EasyPark Reveals Data Breach Affecting Potentially Millions of Users          *

Anna Jaques Hospital's Computer System Compromised in Cyberattack          *

Albanian Parliament and Telecom Company Targeted in Cyberattacks          *

Lockbit Ransomware Causes Emergency Care Disruption in German Hospitals          *

Russian Military Hackers Unleash New MASEPIE Malware in Targeted Campaign Against Ukraine          *

Ransomware Attack Strikes Trinidad and Tobago's Social Security Agency          *

Microsoft Takes Action to Safeguard Against Malicious Exploitation, Disabling MSIX Protocol Handler          *

Chinese Hackers Exploit Fresh Zero-Day in Barracuda's ESG Appliances          *

Critical Zero-Day Vulnerability in Apache OfBiz ERP System Poses Business Threat          *

Corewell Health Faces Another Data Breach, Affects Over 1 Million Patients          *

DragonForce Ransomware Claims Cyberattack on Ohio Lottery          *

LoanCare Notifies 1.3 Million Individuals Regarding Data Breach          *

Microsoft Word docs used to impersonate the Nepali government in a Nim-based campaign          *

Cyber-Phishing Attacks with Cryptocurrency Drainers are on the Rise          *

A New Ransomware Variant of Carbanak Banking Malware has been Discovered          *

Android or Xamalicious Stealth Backdoor Actively Infecting Devices          *

Reports of a Data Breach have been Investigated by Video Game Giant UBISOFT          *

LONEPAGE Malware Targets Ukrainian Companies with UAC-0099 Exploit Based on WinRAR          *

ESET Resolves High-Severity Flaw in Multiple Product's Secure Traffic Scanning          *

The Iranian Hackers have Developed a New Backdoor for Hacking Windows          *

Cloud Atlas' Targeted Spear-Phishing Strikes: Russian Agro and Research Firms Under Attack          *

New Instagram Phishing Campaign Targets 2FA Backup Codes          *

Indian government Entities Targeted by Rust-based Malware          *

WordPress Plugin Breach: E-Commerce Sites Vulnerable to Credit Card Theft          *

Europol Alerts to 443 Online Stores Infected with Credit Card Theft Scripts          *

Ubisoft Initiates Investigation into Recent Reports of Security Breach          *

Akira Ransomware Group Takes Credit for Cyberattack on Nissan Australia          *

Mint Mobile Reveals Fresh Data Breach, Unveiling Customer Information Exposure          *

Chrome Extensions Forcing 1.5 million Fake VPNs to be Installed          *

Chameleon Android Malware Disables Fingerprint Unlock to Pilfer PINs          *

OpenAI Addresses ChatGPT Data Leak with Imperfect Fix Rollout          *

Cyberattack Forces First American to Shut Down IT Systems          *

A New FalseFont Malware Title Targets Defense Firms, According to Microsoft          *

Healthcare Software Provider's Data Breach Affects 2.7 Million Patients          *

Google Addresses the Eigth Actively Exploited Zero-Day Vulnerability in Chrome          *

Critical Pre-Auth Stack Buffer Overflows Affect Ivanti Avalanche          *

F5 BIG-IP Zero-Day Alert Emails Spreading Data-Wiping Malware          *

HCL Technologies Faces Ransomware Attack: Ongoing Investigation Underway          *

FBI Disrupts BlackCat Ransomware Operation and Develops Decryption Tool          *

FBI Reveals ALPHV Ransomware Profited $300 Million from 1,000 Victims          *

The Terrapin attack can compromise the security of OpenSSH connections          *

GitHub Exploited by Hackers to Skirt Detection and Compromise Hosts          *

Web Injections Campaign Targets 50000 Users, Stealing Banking Data in Ongoing Threat          *

Mr. Cooper Data Breach Exposes 14.7 Million Individuals to Security Risks          *

Iran's Gas Stations Hit by Suspected Cyberattack, Causing Widespread Disruption          *

Microsoft Reveals High-Severity Remote Code Execution Flaw in Perforce Helix          *

Xfinity Reveals Data Breach Following Citrix Server Hack          *

Customer Data Exposed in Cyberattack on MongoDB, Company Confirms          *

Qbot Malware Resurfaces in Phishing Campaign Aimed at Hospitality Sector          *

Google Phishing Ads Target WordPress Hosting Provider Kinsta          *

Rhadamanthys Stealer Malware Advances with Enhanced Capabilities          *

Ransomware Threats Target Patients of Fred Hutch Cancer Center          *

3CX Issues Warning to Disable SQL Database Integrations          *

Data Breach at Delta Dental of California Exposes Personal Information of 7 Million Individuals          *

U.S. Nuclear Research Lab's Data Breach Affects 45,000 Individuals          *

A Cryptocurrency Wallet Supply Chain Attack Stole $600K from Ledger dApps          *

NKAbuse Malware Leveraging NKN Blockchain for Covert Comms          *

Kraft Heinz Probes Alleged Hack, Assures Normal System Operations          *

Hackers Hijack SOHO Routers and VPN Devices with Stealthy KV-Botnet          *

Phishing Evolution: BazarCall Adopts Google Forms for Credible Deception          *

CISA Warns of Russian Hackers Targeting TeamCity Servers Since September          *

Microsoft Takes Control of Domains Selling Fake Outlook Accounts          *

Hackers Leverage Public PoC to Exploit Critical Flaw in Apache Struts          *

1,450 Exposed pfSense Servers Vulnerable to RCE Attacks via Bug Chain          *

Booking-Themed Scam Unleashes New MrAnon Stealer Malware, Targets German Users          *

Threat Actor Exploits Recruiters with Malicious More Eggs Backdoor Malware          *

Microsoft Warns of OAuth App Exploitation for BEC and Cryptomining Attacks          *

Sophos Proactively Backports Remote Code Execution (RCE) Fix for Unsupported Firewalls Post-Attacks          *

Russian APT28 Launches Cyber Espionage Campaign Across 13 Nations          *

Microsoft Patch Tuesday Security Advisory - December 2023          *

HTML Injection Bug in Counter-Strike 2 Exposes Players' IP Addresses          *

University of Wollongong Confirms Data Breach and Alerts Authorities          *

Americold, Cold Storage Giant, Confirms Data Breach After Malware Attack in April          *

Critical Bug in Backup Migration Plugin Exposes 50K WordPress Sites to RCE Attacks          *

Emergency Apple Updates Address Zero-Day Vulnerabilities in Older iPhone Models          *

Researchers have Unmasked Sandman APT's Hidden Connection to China's KEYPLUG Backdoor          *

The Lazarus Hackers have Released a New RAT Malware Using a Two-Year-Old Bug in Log4j          *

A Record 2.6 Billion Users Records have been Exposed by Apple, but End-to-End Encryption Wins Out          *

The AutoSpill Attack Steals Passwords from Android Password Managers          *

Ransomware Gang Confirms Cyber Hit on California Hospital          *

Norton Healthcare Reveals Data Breach Following May Ransomware Attack          *

New HeadCrab Variant Exploits Redis Servers for Root Access          *

Google Drive Users Continue to Face Challenges Despite Proposed Fix for File Recovery          *

Email Sending Challenges in Microsoft Outlook for Users with Extensive Folders          *

5Ghoul Vulnerability Strikes Qualcomm and MediaTek Chip-Powered 5G Phones          *

Iranian Threat Poses Risk to Israel's Critical Infrastructure Through 'Polonium' Proxy          *

New Bluetooth Vulnerability Enables Hackers to Seize Control of Android, Linux, macOS, and iOS Devices          *

WordPress Resolves POP Chain Vulnerability, Safeguarding Websites Against RCE Exploits          *

Data Breaches at Two Cambridge Hospitals are Caused by Excel Spreadsheets          *

Microsoft Alerts on COLDRIVER's Adaptive Evasion Techniques and Credential Theft Strategies          *

Russian State-Sponsored Hackers Target NATO Rapid Response Corps in Cybersecurity Breach          *

Linux Servers are Infected with the Krasue RAT Malware using Embedded Rootkits          *

North Korean Hacker Group Andariel Targets South Korean Companies, Stealing Defense Secrets          *

Austal USA, Navy Contractor, Confirms Cyberattack and Data Leak          *

US Senator Exposes Government Surveillance via Mobile Notifications on Apple and Google Users          *

Qualcomm Discloses Exploited Chip Flaws in Targeted Attacks          *

Intel and AMD CPUs are Vulnerable to SLAM Attacks that Steal Sensitive Data          *

Critical Infrastructure Routers Face 21 Sierra Vulnerabilities          *

Nissan Proactively Investigating Cybersecurity Incident and Assessing Potential Data Breach          *

Critical Remote Code Execution Vulnerabilities Patched in Various Atlassian Products          *

Go Module Repositories on GitHub: The Growing Threat of Repojacking          *

Kali Linux 2023.4 Features GNOME 45 and 15 New Tools in Latest Release          *

Cyberattack Confirmed by HTC Global Services after Data was Leaked          *

23andMe Confirms Hackers Accessed Data from Millions of Users          *

Thousands of Israeli Hospital Documents have been Leaked by Iran-Linked Hackers          *

U.S. Government Agencies Compromised Through Exploitation of Adobe ColdFusion Vulnerability by Hackers          *

WALA, International Dog Breeding Organization, Reveals 25GB of Pet Owners' Data          *

Beware: iPhone Users Alerted to Deceptive Fake Lockdown Mode Attack          *

The SpyLoan Android Malware has been Downloaded 12 Million Times from Google Play          *

Android Security Updates for December 2023 Address 85 Vulnerabilities, Including a Zero-Day RCE Vulnerability          *

More than 20,000 Microsoft Exchange Servers at Risk of Exploitation in Cyber Attacks          *

WeMystic Fortune-Telling Platform Exposes Over 13 Million User Records          *

Tipalti Probes Allegations of Data Breach Amid Ransomware Attack          *

Microsoft Issues Alert on Malvertising Campaign Propagating CACTUS Ransomware          *

The Fake Security Advisory Pushes Backdoor Plugins for WordPress          *

Russian Cyber Threat Actors Exploit Outlook Vulnerability to Hijack Exchange Accounts          *

AeroBlade Hackers Target U.S. Aerospace Sector in Fresh Campaign          *

MIPS Devices are Targeted by a Stealthier Version of P2Pinfect Malware          *

Revolutionizing Browsing: Google Chrome's Cache Update          *

Hospitals are urged to patch Citrix Bleed bug          *

Since 2017, North Korea's State Hackers Have Stolen $3 Billion in Crypto          *

Pirated Software Distributes Proxy Malware Targeting Mac Users          *

Qilin Ransomware Linux Variant Concentrates on Targeting VMware ESXi          *

Berglund Management Group Discloses Data Breach Affecting Over 50,000 Individuals in the US          *

VMware Resolves Critical Authentication Bypass in Cloud Director After 2 Weeks of Unpatched Vulnerability          *

Microsoft Windows KB5032278 Update Introduces Copilot AI Assistant, Addresses 13 Bugs          *

Newly Discovered Agent Raccoon Malware Exploited by Hackers to Create Backdoors in US Systems          *

Chinese Hackers Employ SugarGh0st RAT in Targeting South Korea and Uzbekistan          *

FjordPhantom Android Malware Employing Virtualization for Evasion Tactics          *

North Carolina's Hendersonville Exposes Employee Data in Thanksgiving Cybersecurity Breach          *

Zyxel Issues Warning on Critical Vulnerabilities Found in NAS Devices          *

Staples Confirms Cyberattack as Cause for Service Disruptions and Delivery Challenges          *

JAXA, Japan's Space Agency, Falls Victim to Cyberattack          *

Apple Addresses Two New iOS Zero-Day Vulnerabilities with Emergency Updates          *

UEFI Code Vulnerabilities Exploitable for Bootkit Implantation Through Image Files          *

Cybersecurity Incident Impacts Capital Health Hospitals, Resulting in IT Disruptions          *

Numerous Undisclosed secrets discovered within application images on Docker Hub          *

A Ransomware Attack Exploits Qlik Sense Flaws to Infect Networks with Cactus Ransomware          *

Hackers Compromise US Water Facility Through Exposed Unitronics PLCs          *

Third-Party Data Breach Affects 2 Million Individuals at Dollar Tree          *

Automotive Giant Yanfeng Hit by Qilin Ransomware Attack          *

Egyptian E-Payment Provider Recovers After LockBit Ransomware Attack          *

US Authorities Seize Sinbad Cryptocurrency Mixer Utilized by North Korean Lazarus Hackers          *

Okta Data Breach in October Impacts All Users in Customer Support System          *

Play Ransomware Group Targets 17 Victims, Including 14 US-Based Companies          *

New 'Xaro' Variant of DJVU Ransomware Poses as Cracked Software to Deceive Users          *

Experts Warn of More than 200 Malicious Android Apps Targeting Iranian Banks          *

Rapid Exploitation of Critical ownCloud Vulnerability in the Wild          *

Google Addresses the Sixth Actively Exploited Zero-Day Vulnerability in Chrome for 2023          *

Critical Vulnerability Uncovered in Ray AI Framework          *

Bluetooth Vulnerability BLUFFS Allows Attackers to Take Command of Connections          *

Hackers Can Exploit the 'Forced Authentication' Feature to Steal Windows NTLM Tokens          *

Government of Serbia accused of using Military-grade Spyware against Critics          *

DP World Admits Cybersecurity Breach in Australia, Reveals Data Theft Without Ransomware Deployment          *

North Korean Cyber Actors Utilize Hybrid macOS Malware Tactics for Enhanced Stealth and Evasion          *

Ransomware Breach Strikes Slovenia's Primary Power Giant, HSE          *

Ransomware Attack Disrupts Ardent Hospital Emergency Rooms Across Six States          *

Gulf Air Experiences Data Breach, Assures No Impact on Critical Operations          *

Ukraine Claims Successful Hack into Russian Aviation Agency, Leaks Data          *

QRadar SIEM Vulnerability Enables Remote Attackers to Initiate Denial of Service Attacks          *

Ransomware Strike Erases All Player Accounts for Indie Game Developer          *

Rivers Casino Customers and Employees' Sensitive Data has been Compromised by Hackers          *

Rhysida Ransomware Gang Claims Breach of China Energy          *

Google Drive Users Frustrated After Losing Months of Stored Data          *

Appscook, School App Developer, Exposes Sensitive Data of Hundreds of Children          *

The General Electric Company investigates claims of cyber attack and data theft          *

KyberSwap Reports $54.7 Million in Cryptocurrency Stolen in Cyberattack          *

APT Attacks Targeting the Afghan Government Use a New Web Shell Called HRServ.dll          *

Supply-Chain Attack Unleashes Zero-Day Exploit in UK and South Korea Cybersecurity Incident          *

Israel Targeted by Rust-Powered SysJoker Backdoor in Cyberattacks Linked to Hamas          *

Confidential Kubernetes Secrets from Fortune 500 Enterprises Unveiled in Public Repositories          *

OwnCloud File Sharing App Vulnerability Exposes Admin Passwords          *

Neanderthals Exploit Telegram Bot "Telekopye" for Large-Scale Phishing Scams          *

Data Breach Exposes Personal Information of 27,000 Members of NYC Bar Association          *

CTS Cyberattack Rattles Dozens of UK Law Firms          *

Germany's Federal Bar Association Probes Ransomware Attack          *

Kansas Courts Affirm Data Breach and Ransom Request Following Cyberattack          *

Latest Attacks by Konni Group Utilize Malicious Word Documents in Russian Language          *

The Black Basta Ransomware Group has Compromised New Targets          *

Widespread Distribution of New WailingCrab Malware Loader Through Shipping-Related Emails          *

Indian Railway Catering and Tourism Corporation (IRCTC) Suffers Server Down Affecting E-Ticket Booking          *

Expansion of ClearFake Campaign Takes Aim at Mac Systems with Atomic Stealer          *

Windows Hello Authentication Bypass Identified on Microsoft, Dell, and Lenovo Laptops          *

North Korean Threat Actors Employ Malware Campaigns Disguised as Job Recruiters and Seekers          *

Data Breach at Welltok Exposes Information of 8.5 Million US Patients          *

Tmax Enterprise software provider Experiences Data Breach, Exposing 2 Terabytes of Information          *

Microsoft Reports CyberLink Breach by Lazarus Hackers in Supply Chain Attack          *

Dragon Touch Children's Tablet Compromised by Corejava Malware          *

Fresh Botnet Malware Leverages Pair of Zero-Day Vulnerabilities to Target NVRs and Routers          *

CISA Issues Urgent Directive for Immediate Response to Looney Tunables Linux Vulnerability          *

Wolf Haldenstein Adler Freeman & Herz LLP Issued a Data Breach Alert on Midwest Gaming & Entertainment, LLC.          *

AutoZone Alerts of Data Breach Due to MOVEit Vulnerability          *

Hacktivists Breach U.S. Nuclear Research Lab, Compromising Employee Data          *

CISA's Cybersecurity Guide: Safeguarding Healthcare and Public Health Organizations          *

Play Ransomware Shifts to Commercial Model, Offered as Service to Cybercriminals          *

Deceptive Campaign Aims at Indian Android Users, Impersonating Banks and Government Bodies          *

Latest Agent Tesla Malware Iteration Employing ZPAQ Compression in Email-Based Assaults          *

South China Sea Tensions Prompt Mustang Panda Hackers Target Philippines Government          *

Critical Vulnerability in Industrial Refrigeration Products Patched by Johnson Controls          *

LittleDrifter USB Malware Linked to Gamaredon Spreads Outside Ukraine          *

Contractor Hacks Lead to Canadian Government's Data Breach Disclosure          *

Apache ActiveMQ RCE Exploited by Kinsing Malware to Install Rootkits          *

New Version of LummaC2 Malware Unveils Innovative Trigonometry-Based Anti-Sandbox Technique          *

Increase in NetSupport RAT Infections: Targeting Government and Business Sectors          *

Phobos Ransomware Accuses VX-Underground Malware Collective of Framing          *

Indian Hackers Targeting U.S., China, and Other Nations for More Than Ten Years          *

FCC Implements New Regulations Safeguarding Consumers Against SIM-Swapping Threats          *

RSA Keys Extracted from SSH Server Signing Errors by Researchers          *

Russian Hackers Exploit WinRAR and Ngrok Features in Embassy Attacks          *

Yamaha Motor's Philippine Subsidiary Hit by Ransomware Assault          *

Discord Phishing Scam Emerges Following Bloomberg Crypto X Account Mishap          *

CISA Adds Three Actively Exploited Vulnerabilities in Windows, Sophos, and Oracle into KEV Catalog          *

Vietnam Post Corporation Leaks 1.2TB of Data, Revealing Email Addresses of Employees          *

Deceptive Google Ads Lure WinSCP Users into Installing Malicious Software          *

Security Researchers Uncover Malicious Packages on PyPI and NPM Repositories Targeting Developers          *

Fortinet Alerts Users to Critical Command Injection Vulnerability in FortiSIEM          *

Experts Reveal DarkCasino as New APT Threat Leveraging WinRAR Security Flaw          *

Ransomware Group Lodges SEC Complaint Regarding Victim's Unreported Breach          *

Exploitation of Zimbra Email Software's Zero-Day Flaw by Four Hacker Groups          *

Toyota Acknowledges Security Breach as Medusa Ransomware Threatens Data Leak          *

Significant Data Breach Reported at Smart WiFi Provider Plume by Alleged Hackers          *

Long Beach, California Shuts Down IT Systems Following Cyberattack          *

FBI Exposes Tactics Used by the Notorious Scattered Spider Hacker Group          *

Google Workspace and Cloud Platform Vulnerable to Potential Ransomware Exploits          *

FBI and CISA Alert on Opportunistic Rhysida Ransomware Attacks          *

Toronto Public Library Acknowledges Data Breach in Ransomware Attack          *

North Carolina County Faces Unauthorized Data Access in Cyberattack by Hackers          *

Australian Agency Raises Alarm Over Threat from State-Supported Hackers          *

Dolly.com's Ransom Payment Doesn't Stop Attackers from Releasing Data          *

Latest PoC Exploit for Apache ActiveMQ Vulnerability Enables Low-Profile Attacks          *

Denmark's Critical Infrastructure Faces Largest Coordinated Cyberattack, Targeting 22 Energy Firms          *

PJ&A Cyberattack Exposed Nearly 9 Million Patient Records          *

Recent Data Breach Impacts Customers of Samsung's UK Store          *

FBI Announces Success in Disrupting IPStorm Botnet and Its 23,000 Malicious Proxies          *

Targeted Attacks on MySQL Servers and Docker Hosts Using DDoS-Enabled Malware Detected by Researchers          *

LockBit Ransomware Exploits Citrix Bleed Vulnerability, Exposing 10,000 Servers in Attacks          *

Truepill Pharmacy Platform Reports Data Breach Affecting 2.3 Million Customers          *

VMware Reveals Critical Authentication Bypass in VCD Appliance Without Available Patch          *

New Reptar CPU Bug Impacts Intel's Desktop and Server Systems          *

Vulnerability in WP Fastest Cache Plugin Puts 600k WordPress Sites at Risk of Attacks          *

Vietnamese Cybercriminals Employ Delphi-Based Malware to Attack Indian Marketing Professionals          *

Critical Azure CLI Vulnerability Addressed by Microsoft, Preventing Credential Leakage in Logs          *

AMD CPU Vulnerability "CacheWarp" Allows Root Access in Linux VMs          *

Microsoft Patch Tuesday Security Advisory - November 2023          *

Chinese Hackers Conduct Stealthy Espionage Assaults on 24 Cambodian Entities          *

Lorenz Extortion Group Leaks Stolen Data from Cogdell Memorial Hospital in Texas          *

IP Criminality & Advanced Cyber Threat Analysis with Cisco SecureX-XDR          *

Emergence of a New Ransomware Faction Armed with Hive's Source Code and Infrastructure          *

Ethereum's 'Create2' Function Abused in $60M Cryptocurrency Theft          *

DP World Hit by Cyberattack, Paralyzing Thousands of Containers in Ports          *

"Chess.com" Grapples with Dual Data Breaches as Threat Actors Leak 1,276,000 Scraped User Records          *

Israel Alerts Organizations to BiBi Malware Wiper Attacks Targeting Linux and Windows          *

Microsoft Issues Alert Regarding Fraudulent Skills Assessment Portals Targeting IT Job Seekers          *

Microsoft Resolves Slow Saving Issues in Outlook Desktop with Bug Fix          *

Tri-City Medical Center in Oceanside is Impacted by Ongoing Cyberattacks          *

Law Enforcement Dismantles BulletProftLink, a Major Phishing Service Provider          *

Data Breach at McLaren Health Care Impacts 2.2 Million People          *

Healthcare Organizations Compromised as Hackers Exploit ScreenConnect Remote Access          *

Iran-Linked Imperial Kitten Cyber Group Focuses its Attack on Middle East Entities          *

Mr. Cooper, Major Mortgage Servicer Reports Customer Data Exposure in Security Breach          *

Microsoft Warns of BlueNoroff Hackers Plans for Fresh Crypto Theft Attacks          *

Maine Government Alerts 1.3 Million Individuals About MOVEit Data Breach          *

Clop Ransomware Attacks Exploit Zero-Day Flaw in SysAid, Microsoft Reports          *

Anonymous Sudan Claims Responsibility for DDoS Attack Leading to Cloudflare Website Outage          *

Google Ads Distribute Malicious CPU-Z App via Counterfeit Windows News Site          *

Ransomware Attack Affects 39,000 Individuals at Kyocera AVX          *

Ransomware Attack Strikes Industrial and Commercial Bank of China          *

Microsoft Provides Temporary Solution for Windows Server 2022 VMs Facing Issues          *

Russian Hackers Employ LOTL Technique to Potentially Trigger Power Outages          *

Data Breach at Perry Johnson & Associates, Inc. Impacts Cook County Health due to Security Incident          *

CISA Issues Alert as High-Severity SLP Vulnerability Faces Active Exploitation          *

Microsoft Enhances Windows 11 Security by Eliminating SMB1 Firewall Rules          *

Iranian Hackers Employing New C2 Framework MuddyC2Go to Target Israel          *

Datacenter Overheating Disrupts 2.5 Million Bank Transactions          *

Sberbank Confronts Massive DDoS Attack with 1 Million Requests Per Second          *

Undetectable Crypto Mining Technique Revealed in Azure Automation by Researchers          *

Security Alert: Python Packages on PyPI Infected with Blaze Stealer Malware          *

WhatsApp Unveils Enhanced Privacy Feature: Safeguarding IP Addresses During Calls          *

Major Outage Knocks ChatGPT Offline, Affecting OpenAI Systems          *

Hacker Exposes 35 million LinkedIn User Database on Breach Forums          *

Russian-speaking Threat Actor "Farnetwork" Connected to Five Ransomware Groups          *

FBI Warns of Ransomware Gangs Targeting Casinos via Third-Party Gaming Vendors          *

Security Breach Unveiled by Sumo Logic, Recommends API Key Resets          *

Japan Aviation Electronics Reports Unauthorized Server Access in Recent Cyberattack          *

Android Security Updates for November 2023 Address 37 Vulnerabilities          *

BlueNoroff Hackers Utilize ObjCShellz Malware to Create Backdoors on Macs          *

GootLoader's Advanced Malware Variant Operates Covertly and Expands Swiftly          *

Cisco Addresses 27 Vulnerabilities with Security Updates for Network Security Products          *

Fraudulent Ledger Live App on Microsoft Store Scams Users out of $768,000 in Cryptocurrency          *

Emergence of New Jupyter Infostealer Version with Advanced Stealth Tactics          *

Marina Bay Sands Discloses Data Breach Impacting Information of 665,000 Customers          *

China-Based E-commerce Store "Zhefengle" Exposes Millions of Chinese Citizen IDs          *

Hilb Group Reveals Email Security Breach Impacting Personal Data of 81,000 Individuals          *

QNAP's Alert on Critical Command Injection Vulnerabilities in QTS OS and Apps          *

Multi-Platform Attack by SideCopy Threat Actor Utilizes WinRAR Zero-Day and Ares RAT to Target Indian Organizations          *

Ransomware TellYouThePass Executes Remote Code Execution (RCE) Attack on Apache ActiveMQ          *

Android Security Bypassed by Cybercrime Service for Malware Installation          *

Veeam Issues Critical Bug Warnings for Veeam ONE Monitoring Platform          *

Google Alerts Users to Possible Misuse: Cybercriminals Using Calendar Service as a Covert C2 Channel          *

Socks5Systemz Proxy Service Compromises 10,000 Systems Globally          *

DarkGate Malware Exploiting Microsoft Installer Files After Targeting Microsoft Teams          *

DDoS Attacks Cause Disruptions in Singapore's Public Health Services          *

Kinsing Actors Leveraging Latest Linux Vulnerability to Compromise Cloud Environments          *

NodeStealer Malware Exploiting Facebook Business Accounts to Run Malicious Advertisements          *

Allied Pilots Association of American Airlines Pilots Reveals Ransomware Attack          *

CanesSpy Spyware Distributed Using Altered WhatsApp Versions          *

Microsoft Exchange New Zero-Day Vulnerabilities Enable Remote Code Execution and Data Theft Attacks.          *

Boeing Company Affirms Cyberattack Involving LockBit Ransomware          *

Cloudflare's Data Center Power Outage Disrupts Dashboard and API Services          *

Researchers Identify 34 Windows Device Drivers Vulnerable to Complete Device Compromise          *

Employee Records at OKTA Exposed in Third-Party Vendor Breach of Rightway Healthcare          *

Atlassian Issues Urgent Warning for Patching After Confluence Data Wiping Vulnerability Exploit          *

Iran's MuddyWater Launches Spear-Phishing Campaign Targeting Israel          *

Cyberattack Targets Mortgage Giant Mr. Cooper, Disrupting IT Operations          *

Ace Hardware Reports Cyberattack Affecting 1,202 Devices          *

Hackers from North Korea are Targeting Crypto Experts with KANDYKORN MacOS Malware          *

Critical Vulnerabilities in F5 BIG-IP Products Actively Exploited in the Wild          *

Mysterious Kill-Switch Deactivates Mozi Malware Botnet Operations          *

CVSS 4.0: New Vulnerability Severity Rating Standard Unveiled          *

Middle East Financial and Government Sectors Targeted by Iranian Cyber Espionage Group          *

Citrix Bleed Vulnerability Exploited by Hackers in Global Government Network Attacks          *

Over 3,000 Internet-Facing Apache ActiveMQ Servers at Risk of Remote Code Execution Attacks          *

Avast Antivirus SDK Misidentifies Google App as Malware on Huawei, Vivo, and Honor Smartphones          *

British Library Faces Weekend Cyberattack, Leading to Internet Access Disruptions          *

Discovery of Malicious NuGet Packages Distributing SeroXen RAT Malware          *

Bluetooth Spam Attacks Inspired by Flipper Zero Now Available as Android App          *

The Elektra Leak Campaign Leveraging Exposed AWS IAM Credentials on GitHub for Cryptocurrency Mining Attacks          *

Hackers Exploiting MSIX App Packages to Spread GHOSTPULSE Malware on Windows PCs          *

SEC Files Lawsuit Against SolarWinds for Investor Misrepresentation Preceding 2020 Cybersecurity Breach          *

New Phishing Campaign Utilizes Disguised Remcos RAT as Fake Payslip          *

Bibi-Linux Wiper Malware Launches Destructive Attacks on Israeli Organizations          *

Cyberattack Disrupts Toronto Public Library Services Over the Weekend          *

India's Biggest Data Breach: 815 million COVID Test Records for Sale, Sample Authenticity Confirmed          *

Hunters International Ransomware: A Potential Rebranding of Hive          *

Check Point Records a High Surge in QR Code Quishing Compared to the Previous Year          *

Researchers Discovered XMPP-Based Instant Messaging was Being Wiretapped          *

Nevada School District Parents Receive Emailed Student Data Stolen by Hackers          *

Android Adware Apps on Google Play Accumulate Over Two Million Installs          *

Latest iLeakage Exploit Extracts Email Addresses and Passwords from Apple Safari          *

Microsoft Reveals Octo Tempest as a Significant Threat to Financial Security          *

Critical Vulnerability in NextGen's Mirth Connect Puts Healthcare Data at Risk          *

StripedFly Malware Framework Infects Over One Million Windows and Linux Systems          *

Iranian APT Group Tortoiseshell Unleashes Fresh IMAPLoader Malware Assaults          *

Seiko Discloses Ransomware Breach Compromising Customer Data          *

Alleged Cybersecurity Incident: Researcher Reports Exposure of 12 Million Patient Records at Redcliffe Labs; Company Denies Data Breach          *

Potential Data Breach: 1.2 Million Airbnb User Records Reportedly Exposed          *

Ransomware Attack by Rorschach Gang Disrupts Chile's Telecom Giant GTD          *

GoPIX Malware Malvertising Campaign Takes Aim at Brazil's PIX Payment System          *

European Government Email Servers Hacked Using Roundcube Zero-Day Exploit          *

ASVEL Basketball Team Acknowledges Data Breach After NoEscape Group's Ransomware Attack Assertion          *

Security Breach Impacts Five Canadian Hospitals Linked to TransForm Health Services Provider          *

Modified Backdoor on Compromised Cisco Devices Evades Detection          *

VMware Issues Alert About POC Availability for vRealize RCE Vulnerability          *

1Password Identifies Suspicious Activity in Wake of Okta Support Breach          *

BHI Energy Discloses Details of Akira Ransomware Attack on Its Systems          *

City of Philadelphia Reveals Data Breach After Five Month Delay          *

Firebird Backdoor by DoNot Team Targets Pakistan and Afghanistan          *

Quasar RAT Exploits Dual DLL Side-Loading Technique for Covert Operations          *

Associated Wholesale Grocers Claimed as a Victim by Play Ransomware Group          *

Researchers Discover ExelaStealer, a Low-Cost Information Stealer Targeting Windows Systems          *

American Family Insurance Confirms IT Outages Caused Due to Cyberattack          *

TetrisPhantom Hackers Target Government Systems in Asia-Pacific, Stealing Data from Secure USB Drives          *

Thousands of Devices Infected with Malicious Lua Backdoor Exploiting Cisco Zero-Day Vulnerability          *

Significant Remote Code Execution Vulnerabilities Discovered in SolarWinds Access Audit Solution          *

Okta Support System Breached Through Compromised Credentials          *

DarkGate Malware Strikes U.K., U.S., and India in Vietnamese Hacking Campaign          *

A Cyberattack Disrupts the Operations of Healthcare Solutions Giant Henry Schein          *

Fraudulent KeePass Website Leverages Google Ads and Punycode to Distribute Malware          *

Iran-Linked OilRig Launches 8-Month Cyber Campaign Targeting Middle East Governments          *

BlackCat Ransomware Employing Innovative 'Munchkin' Linux VM for Covert Attacks          *

A Malware Framework Named MATA Exploits EDR to Attack Defense Firms          *

Casio's Data Breach Affects Customers in 149 Countries          *

Synology's DiskStation Manager Admin Takeover Vulnerability Exposes NAS Devices          *

Data Breach at TrueCoin's Third-Party Vendor Exposes TUSD User Information          *

Lazarus Group Uses Trojanized VNC Apps to Deceptively Target Defense Experts with Fake Interviews          *

Qubitstrike's Campaign Targets Cloud Environments via Jupyter Notebooks for Crypto Mining          *

Security Research Reveals IT Administrators' Use of Weak Passwords on Critical Portals          *

ClearFake Introduces Deceptive Browser Updates for Malware Distribution          *

North Korean Hackers Exploit Critical TeamCity Vulnerability to Breach Networks          *

Ampersand, a TV Advertising Sales Giant Hit by Ransomware Attack          *

Knight Ransomware Group Claims BMW Munique Motors Cyberattack          *

D-Link Confirms Data Breach as Data Appears on Sale at BreachForums          *

The SpyNote Android Malware Spreads Through Fake Alerts about Volcanic Eruptions          *

Nation-State Hackers Leveraging Discord Platform to Target Critical Infrastructure          *

Open Source CasaOS Cloud Software Reveals Significant Security Vulnerabilities          *

Vulnerabilities in Weintek HMIs Pose Significant Security Risks          *

The 'RedAlert' Rocket Alert App for Israel was Found to Install Spyware on Android Devices          *

Cisco Issues Alert Regarding Actively Exploited Zero-Day Vulnerability in IOS XE          *

Threat Actors are Exploiting Potential Milesight Industrial Router Vulnerability          *

Kansas Courts Shutdown IT Systems Following Security Incident          *

Critical Vulnerability in WordPress Royal Elementor Plugin Exploited by Hackers          *

Russian Hackers Exploit Latest WinRAR Vulnerability in Fresh Campaign          *

Researchers Warn Against SpyNote, an Android Trojan that Records Calls and Audio          *

Vietnam Faces Accusations of Utilizing Predator Spyware for Surveillance of EU and US Legislators          *

AI Algorithm Developed to Counter Man-in-the-Middle Attacks on Unmanned Military Robots          *

Steam Platform Enforces SMS Verification to Prevent Malware-Laden Updates          *

Indian State Government Addresses Bug Exposing Aadhaar Numbers and Fingerprints          *

Juniper Networks Addresses Over 30 Vulnerabilities in Junos OS with Security Patches          *

Mysterious Network Incident Triggers Kwik Trip IT Systems Outage          *

DarkGate Malware Disguised as PDF Files Spreads Through Messaging Services          *

Latest PEAPOD Cyberattack Initiative Focuses on Female Political Leaders          *

Shadow PC Issues Data Breach Warning as Hacker Attempts to Sell Gamer Data          *

FBI Releases AvosLocker Ransomware Technical Analysis and Defense Strategies          *

ToddyCat Hackers Employ 'Disposable' Malware for Asian Telecoms' Targeted Attacks          *

ShellBot Employing Hex IPs for Evasion in Linux SSH Server Attacks          *

NuGet Developers Infected by SeroXen RAT Through Malicious Solana and KuCoin Packages          *

Philippine Statistics Agency Investigates Suspected Data Breach          *

Simpson Manufacturing's Cyberattack Results in IT System Suspension          *

Enterprise Systems Vulnerable to Critical SOCKS5 Vulnerability in cURL          *

LinkedIn Smart Links Resurge in Phishing Campaigns Against Microsoft Accounts          *

CISA Alerts to Ongoing Exploitation of Adobe Acrobat Reader Vulnerability          *

Deceptive Backdoor Targets WordPress Sites by Posing as Genuine Plugin          *

Chrome 118 Addresses 20 Security Vulnerabilities with Patches          *

Unprecedented DDoS Assaults Leveraging Zero-Day Flaw in HTTP2 Rapid Reset Technique          *

Air Europa Data Breach Sparks Urgent Warning to Customers Cancel their Credit Cards          *

Safexpay Technology's Payment Gateway Breach Unveils Rs 16,180 Crore Scam          *

Critical Citrix NetScaler Vulnerabilities Exposes Sensitive Data          *

Massive Ad Fraud Botnet PEACHPIT Harnesses Millions of Compromised Android and iOS Devices          *

Researchers Detect Grayling APT's Continuous Attacks on Various Sectors          *

Mirai Variant Targets Linux Routers with 13 New Payloads          *

Microsoft Patch Tuesday Security Advisory - October 2023          *

Critical Memory Corruption Vulnerability in libcue Library Threatens Linux GNOME Environments          *

IoT Security Concerns Raised Due to Flaws in ConnectedIO's 3G 4G Routers          *

D-Link WiFi Range Extender Susceptible to Command Injection DoS Attacks          *

Over 17,000 WordPress Sites Targeted by Balada Injector by Exploiting Unpatched tagDiv Plugin          *

Magecart Card Skimming Campaign Manipulate Online Store 404 Pages for Credit Card Theft          *

Israeli Energy and Defense Sectors Targeted by Cyber Threat Actor with Gaza Ties          *

Flagstar Bank Suffers Third Data Breach Since 2021, Impacting 800,000 Customers          *

Microsoft 365 Administrators Receive Cautionary Notice About Recent Google Anti-Spam Regulations          *

D.C. Board of Elections Confirms Voter Data Breach in Website Hack          *

23andMe Genetics Company Reports User Data Breach in Credential Stuffing Attack          *

Blackbaud Reaches $49.5 Million Settlement Over Ransomware Data Breach          *

Backdoored Firmware Discovered in Android Devices Used in US Schools          *

Multiple Critical Vulnerabilities Uncovered in Supermicro BMC IPMI Firmware          *

3 Million Customer Records Exposed in Major CRM Provider Really Simple Systems Data Breach          *

Lyca Mobile Probes Customer Data Breach Following Cyberattack          *

Cyber Espionage Campaign Linked to China Deploys Cobalt Strike Backdoor in Semiconductor Firms          *

New Android Trojan GoldDigger Targets Financial Apps in Asia Pacific          *

Cyber Espionage Attack Targets Guyana Governmental Entity with DinodasRAT          *

BitSight Uncovers 100,000 Vulnerable Industrial Control Systems (ICS) Exposed to Cybersecurity Risks          *

Data Breach at European Telecommunications Standards Institute (ETSI) Following Cyberattack          *

Atlassian Releases Critical Patch for Exploited Zero-Day Vulnerability in Confluence          *

Hackers Exploit Breached SQL Servers to Target Azure Cloud VMs          *

Cisco Resolves Hard-Coded Root Credentials Vulnerability in Emergency Responder          *

Sony Confirms Data Breach Affecting Thousands of Employees in the United States          *

Researchers Uncover Connection Between DragonEgg Android Spyware and LightSpy iOS Surveillanceware Tool          *

New Supply Chain Attack Unleashes Open-Source Rootkit via Rogue npm Package          *

Critical Apple Update Addresses Zero-Day Vulnerability Exploited in iPhone Hacks          *

Cyber Security Vulnerability at National Logistics Portal (Marine) Exposes Sensitive Data          *

Security Flaws in TorchServe Enable Remote Code Execution in PyTorch Models          *

Mirai Botnet's Latest Variants hailBot, kiraiBot, catDDoS Found Active in Recent Attacks          *

MEDUSA Ransomware Group Claims Attack on Two New Victims          *

Qualcomm Releases Patch for 3 New Zero-Days Under Active Exploitation as Hackers Target GPU and DSP Drivers          *

'Looney Tunables' Linux Bug Grants Root Privileges on Major Distributions          *

EvilProxy Exploits indeed.com's Open Redirect for Microsoft 365 Phishing          *

Lorenz Ransomware Group Launches a Major Cyberattack on Allcare Pharmacy          *

Ransomware Threat Groups Targeting JetBrains' TeamCity Servers          *

Arm Alerts about Exploited Mali GPU Flaws, Suspects Targeted Attacks          *

Motel One Group Reveals Data Breach After Ransomware Attack          *

Zanubis Android Banking Trojan Impersonates Peruvian Government App to Target Users          *

Exim Releases Patches for Three of Six Zero-Day Vulnerabilities Disclosed Recently          *

Zip Slip Vulnerability in OpenRefine Leads to Malicious Code Execution          *

BunnyLoader, New Malware-as-a-Service (MaaS) Threat Emerges with New Capabilities          *

Iran's APT Group OilRig Unleashes Menorah Malware for Stealthy Operations          *

DDoS protections provided by Cloudflare ironically bypassed.          *

RSA Decryption Vulnerability from 1998 Returns in Marvin Attack          *

Amazon Accidentally Sends Out Mastercard and Google Play Gift Card Order Emails          *

WS_FTP Server Hotfixes Released by Progress Software for Multiple Security Flaws          *

The New ASMCrypt Malware Loader Allows Cybercriminals to Fly Under the Radar          *

An Exploit has been Released for the Microsoft SharePoint Server Authentication Bypass Flaw          *

Zero-day RCE Attacks on Millions of Exim Mail Servers          *

Cisco Alerts About Exploitation Attempts Post Vulnerability Discovery in IOS and IOS XE Software          *

Critical Flaw in Cisco Catalyst SD-WAN Manager Enables Remote Server Access          *

Microsoft Breach by Chinese Hackers Results in Theft of 60,000 U.S. State Department Emails          *

Malware-Infested Ads Infiltrating Bing's AI Chatbot          *

Progress Software Issues Warning About Critical Vulnerability in WS FTP Server Software          *

Password-Stealing Commits Disguised as Dependabot Contributions Target GitHub Repositories          *

Budworm Hackers Launch Custom Malware Attacks on Telcos and Government Organizations          *

Firefox 118 Addresses High-Severity Vulnerabilities with Security Patches          *

DarkBeam Exposes Massive Cache of Email and Password Combinations in DataBreach          *

Researchers Discover Modern GPUs Vulnerable to New GPU.zip Side-Channel Attack          *

Malicious PyPI and npm Packages Utilised in SSH Key Compromises          *

US and Japan Warn of BlackTech Hackers Backdooring Cisco Routers          *

Johnson Controls, a Leading Building Automation Company, Falls Victim to Ransomware Attack          *

Google Resolves the Fifth Actively Exploited Zero-Day Vulnerability in Chrome for 2023          *

ZenRAT Malware Targeting Windows Users by using the Fake Password Manager Software          *

PhilHealth Faces $300K Ransom Demand Following Data Breach          *

Google Reassigns Top CVE Rating to libwebp Vulnerability Impacting Browsers and Applications          *

ShadowSyndicate Cybercriminals Linked to Multiple Ransomware Operations Across 85 Servers          *

Chinese Hackers in Multi-Year Campaign Target South Korean Organizations          *

American Red Cross Exploited as Phishing Lure by New AtlasCross Hackers          *

Openfire Flaw Exploited by Hackers to Encrypt Servers          *

ZeroFont Phishing Manipulates Microsoft Outlook to Display Fake AV Scans          *

Critical JetBrains TeamCity Flaw Exposes Source Code and Build Pipelines          *

Hong Kong Consumer Watchdog Hit by Severe Ransomware Attack          *

Clop Ransomware Attack on BORN Ontario Child Registry Affects 3.4 million Individuals          *

Mixin Network Halts Operations After Suffering a $200 Million Hack          *

Critical BIND DNS System Vulnerabilities Enable DoS Attacks          *

Three Unique Categories of Cyberattacks with Ties to China Targeting Southeast Asian Government Entities          *

Xenomorph Android Malware Targets U.S. Banks and Cryptocurrency Wallets          *

Phishing Campaign Lured as Drone Manuals Targets Ukrainian Military          *

Spyware Operation EvilBamboo Targets Tibetans, Uyghurs, and Taiwanese Through Watering Hole Attacks          *

Data Breach at National Student Clearinghouse Affects 890 Schools          *

Sony Corporation Allegedly Breached by RANSOMEDVC Ransomware Group          *

Nansen, a Cryptocurrency Analytics Company, Urges Password Resets After Vendor Data Breach          *

OpenSea API Users Requested to Rotate API Token Following a Third-Party Security Breach          *

Stealthy and Modular Deadglyph Malware Cyberespionage Attack Targets Middle East Government Entities          *

Gelsemium APT Group Targeting Southeast Asia's Government Entities          *

Data Breach at Ohio Community College Exposes Nearly 300,000 Individuals          *

Spyware Attacks Exploit Newly Resolved Apple and Chrome Zero-Day Vulnerabilities          *

BBTok Banking Trojan's Latest Variant Takes Aim at Moreover 40 Latin American Banks          *

Bermuda Government Attributes Cyberattack to Russian Hacker Group          *

Cybercriminals Redirect Hotel Guests to Fake Booking.com Site to Swipe Credit Card Information          *

Atlassian Addresses High-Severity Vulnerabilities with Security Updates          *

New LuaDream Malware Used by 'Sandman' Hackers to Infiltrate Telecommunication Providers          *

Suspected Ukrainian Hacker Linked to 'Free Download Manager' Malware Attack          *

CISA and FBI Warns About Snatch Ransomware Group's Attacks          *

Air Canada Confirms Security Breach, Reveals Exposure of Employee Records          *

Cyber Group 'Gold Melody' is Marketing Compromised Access to Ransomware Attackers          *

Apple Releases Urgent Updates to Fix Three Zero-Day Exploits          *

Pizza Hut Australia Faces Data Breach Affecting 200,000 Customers          *

Researchers Found Fake POC on GitHub Distributing VenomRAT Malware          *

Hackers Selling Over 2million Pakistanis' Data from Restaurants After a Massive Breach          *

City of Pittsburg Suffers Cyberattack Results in Outage          *

Advanced Phishing Attacks Aimed at Chinese Users Using ValleyRAT and Gh0stRAT Malwares          *

Nagios XI Network Monitoring Software Fixes Critical Security Flaws          *

Security Flaws in Atos Unify Expose Systems to Backdoor Attacks          *

Fortinet Releases Critical Security Updates for FortiOS, FortiProxy, and FortiWeb Products          *

P2PInfect Botnet Updates to Stealthier Variant with Activity Surges by 600 Times          *

T-Mobile App Glitch Exposes User Account Information to Others          *

Hackers from China Target North American and APAC Firms with Web Skimmer Campaigns          *

New Rust-Based Malware Campaign 'Operation Rusty Flag' Targets Azerbaijan Entities          *

AMBERSQUID Cryptojacking Operation Attacks Leverages AWS Services          *

Phishing Attack Targets Victims of Celsius Crypto Bankruptcy          *

Hackers Employ new HTTPSnoop and PipeSnoop Malware to Target Telecom Companies          *

Next-Gen Android Banking Trojan Hook Builds Upon ERMAC's Legacy          *

International Criminal Court Systems Compromised in Recent Cyber Attack          *

GitLab Urges on Users to Apply Critical Pipeline Flaw Security Updates          *

Trend Micro Fixes a Critical Zero-Day vulnerability in Apex One Endpoint Security Products          *

Hackers from APT36 Infect Android Devices with Clones of the YouTube App          *

Unauthenticated RCE vulnerability Affects Thousands of Juniper Devices          *

Bumblebee Malware Makes a Comeback, Leveraging WebDAV for New Assaults          *

38TB of Private Data leaks from Microsoft's Unsecured Azure Storage          *

SprySOCKS, a New Linux Malware, has been Used in Cyber Espionage Attacks          *

Shell's Australian BG Group Business Affected by MOVEit Breach          *

Lazarus Group Targets CoinEx Exchange in Ongoing Cryptocurrency Platform Attacks          *

Cuba Ransomware Gang Targets Mutiple Sectors with Newly Updated Malware          *

UNC3944, a Financially Motivated Threat Actor, Shifts Efforts Toward Ransomware Attacks          *

TikTok Flooded with Cryptocurrency Giveaway Scams Impersonating 'Elon Musk'          *

Auckland Transport Authority Experiences Alleged Ransomware Attack          *

Ransomware Attack on ORBCOMM Leads to Disruption in Trucking Fleet Management          *

Retool Attributes Security Breach to Google Authenticator's MFA Cloud Sync Function          *

NodeStealer Malware Targets Facebook Business Accounts Across Various Browsers          *

MGM Casino Faces Ransomware Attack with ESXi Server Encryption          *

Caesars Entertainment Pays Ransomware After Suffering a Data Breach          *

Microsoft Discovers Flaws in the ncurses Library that Exposes Linux and macOS Systems          *

Malicious Google Ads Exploit Cisco Webex to Distribute Malware via Tracking Templates          *

Iranian Cyberattackers Infiltrate Defense Organizations through Password Spray Tactics          *

Proof-of-Concept Exploit Demonstrates Windows 11 'ThemeBleed' RCE Vulnerability          *

Vulnerability in N-Able's Take Control Agent Exposes Windows Systems          *

Rollbar Discloses a Data Breach, Exposing its Clients Access Tokens          *

Airbus Launches Inquiry After Hacker Exposes Data          *

Mozilla Addresses Critical Zero-Day Exploit in Firefox and Thunderbird by Patching WebP Vulnerability          *

Kubernetes Flaws Expose Windows Endpoints to Remote Attacks          *

Hackers Employ 3AM Ransomware to Salvage Unsuccessful LockBit Assault          *

Eight Vulnerabilities Exposed in Microsoft Azure HDInsight Analytics Service          *

The Latest WiKI-Eve Attack is Capable of Stealing Numeric Passwords Through WiFi          *

Espionage Group 'Redfly' Quietly Exploits Power Supplier's Network for Half a Year          *

Adobe Exploited the Zero-Day Vulnerability in Acrobat and Reader Software          *

MetaStealer Malware Takes Aim at Apple macOS in Recent Attacks          *

GitHub Fixes a Security Vulnerability which Exposed More Than 4,000 Repositories to Repojacking Attack          *

Advanced Phishing Operation Targets Windows Machines by Utilizing Agent Tesla, OriginBotnet, and RedLine Clipper          *

Microsoft Patch Tuesday Security Advisory - September 2023          *

Rhysida Ransomware Group Continues its Attack on US Hospitals with Demanding 1.3 million Dollar Ransom          *

Newly Emerged Sponsor Backdoor by Charming Kitten Targets Brazil, Israel, and U.A.E. Entities          *

MGM Resorts Suffers a Cyberattack, Resulting in the Shutdown of IT Systems          *

HijackLoader Modular Malware Gains Traction in Cybercrime Circles          *

Google Addresses Another Chrome Zero-Day Vulnerability Exploited in Attacks          *

Vietnamese Cybercriminals Use Facebook Messenger to Distribute Python Stealer          *

New Steal-It Campaign Steal NTLMv2 Hashes from Compromised Windows Using PowerShell          *

Malicious Telegram Clones on Google Play Infect Over 60,000 Users with Spyware          *

Phishing Campaign in Microsoft Teams Distributes DarkGate Malware          *

Cybercriminals Exploit Genuine Advanced Installer Tool for Crypto-Mining Attacks          *

Cybercriminals Steals More Than $690,000 Following Takeover of Vitalik Buterin's Twitter Profile          *

Dymocks Booksellers Data Breach Impacts 836000 Customers          *

Ragnar Locker Ransomware Gang Claims Responsibility for Israel's Mayanei Hayeshua Hospital Cyber Attack          *

Cisco is Warning About Zero-Day Exploit of Cisco ASA and FTD Software in the Wild          *

Notepad++ Releases Version 8.5.7 to Resolve Four Security Flaws          *

Apache Superset Flaws Exploit Enables Remote Code Execution Attacks on Servers          *

Google Looker Studio Exploited in Phishing Attacks to Target Cryptocurrency Enthusiasts          *

Apple Releases Emergency Updates to Fix Two Actively Exploited Zero-Day Vulnerabilities Targeting iPhones and Mac          *

Security Experts Warn of Iranian Hackers Using Fortinet and Zoho Flaws in Breach of US Aviation Organisations          *

IBM Reveals Data Breach Affecting Janssen Healthcare Platform          *

Cisco BroadWorks Platform Affected by Authentication Bypass Flaw          *

Mirai Variant Strikes Low-Cost Android TV Boxes, Turning Them into DDoS Weapons          *

Dunghill Leak Ransomware Group Claims Responsibility for Sabre Data Breach          *

Security Researchers Uncovered Nine Vulnerabilities in SEL's Power Management Products          *

September 2023 Android Updates Addresses Multiple Vulnerabilities Including an Actively Exploited Zero-Day          *

New SideTwist Backdoor and Agent Tesla Variant Unleashed via Phishing Campaigns          *

IOS Devices Can be Exploited with Flipper Zero's Bluetooth Spam Attack Functionality          *

Microsoft Signature Key Stolen from Windows Crash Dump Used by Storm-0558 to Target Organizations          *

W3LL's Phishing Kit Breaches Thousands of Microsoft 365 Accounts, via Bypassing MFA          *

NXP Semiconductors Alerts its Customers to Data Breach Impacting Personal Information          *

Critical Remote Code Execution Vulnerabilities Found in ASUS Routers          *

Coffee Meets Bagel Confirms Recent Outage Caused Due to Cyberattack          *

Chaes Malware Incorporates Google Chrome DevTools Protocol for Data Theft          *

Zero-Day Vulnerability in Atlas VPN Exposes Users Actual IP Addresses          *

MinIO Storage System Vulnerabilities Exploited by Hackers to Compromise Servers          *

Zaun, a Fence System Company's Data Breach, Exposes Sensitive Data about UK Military Sites          *

Freecycle Confirms Enormous Data Breach Affecting 7 Million User Accounts          *

An Attack on a German Financial Agency's Website Began in September 2023 Has Been Disrupted Ever Since          *

Chinese-Speaking Hackers Unleash Extensive iMessage Smishing Campaign Across the United States          *

Vietnamese Cybercriminals Employing Malicious Malvertising Campaign to Target Facebook Business Accounts          *

Security Researchers Discover Breach of Ayush Jharkhand Portal, Exposing Records of 320,000 Patients          *

Okta Issues Warning About Social Engineering Attacks Targeting Super Administrator Privileges          *

Plaintext Passwords can be Stolen from Websites using Chrome Extensions          *

A Data Breach at the University of Sydney has Affected Recent Applicants          *

Vulnerability in VMware SSH Authentication Bypass Now Has an Exploit in the Wild          *

Emerging SuperBear Trojan Utilized in Targeted Phishing Attack Against South Korean Activists          *

Russian-Backed 'Infamous Chisel' Android Malware Targeting the Ukrainian Military          *

Cybercriminals Focusing on Microsoft SQL Servers for FreeWorld Ransomware Deployment          *

Threat Actors Hacked Sourcegraph Website Using a Leaked Admin Access Token          *

Earth Estries' Targets Governments and Tech Companies from Multiple Continents in an Espionage Campaign          *

LogicMonitor SaaS Platform Users Targeted in Ransomware Attacks          *

Hackers Breach Forever 21 Systems to Access more than 500,000 Members Information          *

Lazarus Hackers from North Korea Linked to VMConnect Malicious Packages on PyPI          *

Anonymous Sudan Shuts Down X Platform in Demand for Elon Musk's Starlink Service          *

Windows Container Isolation Framework can be Exploited by Hackers to Bypass Endpoint Security          *

Paramount Suffers a Data Breach After a Security Incident          *

Google Chrome Security Patch Released to Fix High-Severity Vulnerability          *

VMware Warning About a Critical SSH Authentication Bypass Flaw in VMware Aria Operations          *

All in One WP Migration Flaw Exploit Could Result in a Data Breach          *

DreamBus Malware Infects Servers by Exploiting a Vulnerability in RocketMQ          *

Chinese Hackers Suspected of Breaching Japanese Cybersecurity Agency in Prolonged Attack          *

Hackers Utilize Automated Tools to Overwhelm Mobile Devices with OTP SMS Messages          *

Cisco VPNs Compromised Through Brute Force Attacks in Hacking Campaign          *

DarkGate Malware Operations Increases as Creator Rents Malware to Affiliates          *

New Android MMRat Malware Steals Data via the Protobuf Protocol          *

University of Michigan Has Shut Down its Network Following a Cyberattack          *

Spain's Police Warn About LockBit Locker Ransomware Phishing Attacks Against Architectural Firms          *

Mom's Meals Disclosed a Data Breach That Affected More than 1200000 Individuals          *

KMSDBot Malware Gets an Upgrade with Enhanced Capabilities to Attack IoT Devices          *

JPCERT Uncovers Innovative 'MalDoc in PDF' Attack Technique          *

Experts Discovered a Microsoft Entra ID Exploit That Grants Attackers Elevated Privileges          *

Metropolitan Police Force's Data Exposed After Its Contractor's IT System Gets Breached          *

Ohio History Connection Suffers a Ransomware Attack Affecting Thousands of People          *

Leaseweb, World's Top Cloud and Hosting Provider, is Restoring 'Critical' Services Following a Security Incident          *

Flax Typhoon Hackers Employ Advanced Tactics, Leveraging LOLBins for Stealthy Operations, Microsoft Reports          *

Major Data Breach at Kroll Exposes Confidential Information of FTX, BlockFi, and Genesis Creditors          *

The Telegram Bot "Telekopye" is Powering Large-Scale Russian Phishing Scams          *

NVIDIA Graphics Driver Vulnerability Could Lead to Memory Corruption          *

Smoke Loader Dropped New Whiffy Recon Spyware Utilises WiFi to Pinpoint Location          *

Jupiter X Core WordPress Plugin Flaws Enable Hackers to Take Over Websites          *

Pole emploi, France's National Employment Authority Suffers Data Breach Affecting 10 Million People          *

Hackers Breach Internet Organization Using Public ManageEngine Exploit          *

Danish Hosting Firms, CloudNordic and AzeroCloud, Lost all Customer Data After a Ransomware Attack          *

Scarab Ransomware Spreads Worldwide with the Help of Spacecolon Toolset          *

Cybercriminals Exploit WinRAR Zero-Day Vulnerability to Hack Trading Accounts          *

Over 3000 Unpatched Openfire Servers Found Vulnerable to Hackers Exploit          *

EVLF, a Syrian Threat Actor, Found to be Creator of CypherRAT and CraxsRAT Malware.          *

Roblox Game Developers Targeted by Dozens of Malicious npm Packages          *

Hacking Forum Selling Scraped Data of 2.6 Million Duolingo Users          *

XLoader macOS Malware Takes on New Identity as 'OfficeNote' Productivity Application          *

University of Minnesota is Investigating Potential Security Breach Incident          *

Carderbee Hacking Group Utilises PlugX Malware to Target Asian Organisations in Supply Chain Attack          *

Energy One Launches Investigation into Recent Cyberattack          *

Cisco VPN Products are Targeted by Akira Ransomware to Breach Organizations          *

Vulnerabilities in TP-Link Smart Bulbs Could Expose WiFi Passwords to Hackers          *

HiatusRAT Malware Resurfaces, Attacking Taiwanese Firms and US Military Personnel          *

CISA Adds Adobe ColdFusion Flaw to Known Exploited Vulnerability Catalog          *

BlackCat Ransomware Group Targets Japanese Watchmaker Seiko in Cyberattack          *

New Vulnerability in Ivanti Sentry is Exploited in the Wild          *

Tesla Reports Over 75,000 Individuals Affected by Large-Scale Data Breach in May 2023          *

Numerous Android Malware Applications Employing Sneaky APK Compression to Bypass Detection          *

Cuba Ransomware Exploits Veeam Vulnerability to Target Vital U.S. Entities          *

Juniper Networks Warning Regarding New Juniper Junos OS Flaws That Expose Devices to Remote Attacks          *

Ransomware variant BlackCat adopts advanced Impacket and RemCom tools          *

New Google Chrome Feature Notifies Users Regarding Automatic Removal of Harmful Extensions          *

Microsoft's DNS Misconfiguration Causes Hotmail Email Delivery Failures          *

Security Vulnerability in WinRAR Allows Hackers to Execute Programs via Opening RAR Archives          *

Apple iOS 16 Vulnerability Facilitates Covert Cellular Connectivity While Simulating Airplane Mode          *

Global Wave of Phishing Attacks Targets Zimbra Email Server Accounts          *

Bronze Starlight Group is Using Cobalt Strike Beacons to Target Asian Gambling Industry          *

Zulip Chat App Employed by Russian Hackers for Stealthy Diplomatic Phishing Operations and Covert C&C Operation          *

LABRAT Campaign Takes Advantage of GitLab Vulnerability for Cryptomining and Proxy Hijacking Operations          *

CISA Issues Alert on Exploitation of Critical Citrix ShareFile Flaw in the Wild          *

Stealthy Malware Infections Build 400,000 Proxy Botnets          *

Critical Vulnerability Exploited to Hack Nearly 2,000 Citrix NetScaler Instances          *

Google Chrome 116 Release Patches a Total of 26 Vulnerabilities          *

QR Code Phishing Attack Employed to Target Multiple U.S. Organizations          *

PowerShell Gallery Weaknesses Expose Users to Supply Chain Attacks          *

Cybercriminals Exploit Cloudflare R2 for Hosting Phishing Pages          *

Threat Actors Hijacking LinkedIn Accounts in a Widespread Campaign          *

Norfolk and Suffolk Police Unintentionally Disclose Personal Data of 1,230 Individuals          *

Numerous Vulnerabilities Detected in 'ScrutisWeb Software' Pose a Remote Hacking Risk to ATMs          *

Android Banking Malware Gigabud RAT Targets Institutions of Various Countries          *

New Remote Access Trojan QwixxRAT Distributed via Telegram and Discord Platform          *

VMware ESXi Servers are Targeted by the Monti Ransomware with its New Linux Locker          *

Data Center Vulnerability Exposed by Multiple Issues in CyberPower and Dataprobe Products          *

The Info-Stealing Malware Exposed over 100K Hacking Forum Accounts          *

Discord.io Confirmed a Breach of Its User Database After a Hacker Stole Data From 760K Users          *

New Spam Campaign Distributes Knight Ransomware as Disguised TripAdvisor Complaints          *

Ernst & Young's (EY) MoveIt Breach Exposes Bank of America Customers Data          *

Indian Government's Parivahan Website Suffered Data Breach Exposing Source Code and 10K User Sensitive Data          *

A New Set of CODESYS SDK Flaws Exposes OT Environments to Remote Attacks          *

In Early 2022, a Critical Vulnerability in Magento Shopping Carts was Discovered and Exploited          *

Researchers Uncover APT31's Sophisticated Backdoors and Data Exfiltration Methods          *

SystemBC Malware Evolves to Target Power Company in Southern Africa          *

Cyber Espionage Group 'MoustachedBouncer' Utilizes Adversary-in-the-Middle (AiTM) Attacks for Diplomatic Espionage          *

Critical Flaw in Dell Compellent Integration Tools Exposes VMware vCenter Admin Credentials          *

CISA Links Barracuda ESG Attacks to New Whirlpool Backdoor          *

New Statc Stealer Malware Targeting the Microsoft Windows to Steal Sensitive Personal and Payment Information          *

Gafgyt Malware Exploits Half-Decade Old Vulnerability in End-of-Life Zyxel Router          *

CISA Adds Actively Exploited Microsoft .NET and Visual Studio Vulnerability to KEV Catalog          *

Cybercriminals Abusing Open-Source Merlin Post-Exploitation Toolkit to Breach Entities          *

Microsoft Office Update Disrupts Actively Exploited RCE Attack Chain          *

Missouri Issues Alert Regarding Stolen Health Information Due to IBM MOVEit Data Breach          *

Massive EvilProxy Phishing Campaign Targets the 120,000 Microsoft 365 Users          *

New Rhysida Ransomware is Targeting Healthcare Organizations          *

Code Flaw in Microsoft Visual Studio Lets Extensions to Collect Credentials          *

Downfall Attack Exploit Targets Intel Processors, Extracting Encryption Keys and Sensitive Data          *

AMD Zen CPUs Leak Sensitive Data Due to a New Inception Attack          *

Latest Variant of Yashma Ransomware Targets Several English-Speaking Nations          *

8 Years of Voter Data Exposed in UK Electoral Commission Data Breach          *

Microsoft Patch Tuesday Security Advisory - August 2023          *

QakBot Malware Group Increases Command and Control Network with Additional 15 New Servers          *

Vulnerable Redis Servers are Targeted by a New SkidMap Linux Malware Variant          *

Cyber Attack Hits Prospect Medical Holdings' Healthcare Facilities Affecting Five Cities          *

New Malware Campaign Uses OpenBullet Configurations to Target Rookie Cyber Criminals          *

ScarCruft Breach 'NPO Mashinostroyeniya,' a Russian and Indian Defence Manufacturing Company          *

Colorado Department of Higher Education Suffers Data Breach          *

Researchers Identified Weaknesses in Tesla's Infotainment System that Unlock Paid Features and Exposes Secrets          *

Threat Actors Using Reptile Rootkit Malware Targeting South Korean Systems          *

Cybercriminals Target IT Pros with Fake VMware vConnector Packages on PyPI          *

A New PaperCut Critical Bug Allows for Remote Code Execution Attacks on Unpatched Servers          *

Malicious NPM Packages Were Found to Exfiltrate Sensitive Data From Developers          *

Mozilla Firefox 116 Fixes Multiple High-Severity Vulnerabilities          *

Rilide Malware Incorporates Chrome Extension Manifest V3 Adaptation For Data Theft          *

Massive Cyber Attack Targets Hundreds of Citrix NetScaler ADC and Gateway Servers          *

New Microsoft Azure AD CTS Feature Exploited to Move Laterally in Network          *

Malicious Apps Avoid Google Play Store Scanners by Using Sneaky Versioning Techniques          *

Google Chrome 115 Updates Include Patch for Critical V8 Vulnerabilities          *

Slack Messaging Platform Experiences Outage Affecting Its Users          *

Salesforce's Email Services Critical Zero-Day Exploited Using Facebook Phishing Campaign          *

New Collide Power Widespread Side-Channel Attack Exploits Vulnerability in All CPUs          *

Researchers Uncover Authentication Bypass Flaw in Ivanti EPMM Versions          *

Researchers Discover AWS SSM Agent Abused as a Stealthy Remote Access Trojan          *

Russian Hackers are Using Microsoft Teams Phishing Attacks to Target Government Organizations          *

Space Pirates Target Multiple Organizations in Russia and Serbia by Using Deed RAT Malware          *

Hundreds of European Bank Customers Targeted by SpyNote Android Trojan          *

China's APT31 Allegedly Targeting Air-Gapped Systems in Eastern Europe          *

NodeStealer's Latest Variant Targets Facebook Business Accounts and Crypto Wallets          *

Threat Actors Targeting Italian Organizations with WikiLoader Malware          *

Patchwork Hackers Targeting Chinese Research Organizations with EyeShell Backdoor          *

Hackers Exploiting 'BleedingPipe' Vulnerability to Target Minecraft Servers and Players          *

P2PInfect Malware Botnet Breach Redis Servers Using Replication Feature          *

Hackers Stealing Signal and WhatsApp User Data via Fake Android Chat App          *

AVRecon Botnet Providing Illegal Proxy Service Using Compromised Routers          *

'Maximus' US Government Contractor Data Breach Affects 8 Million People          *

Cyber Criminals Hack Israel's Largest Oil Refinery Operator 'BAZAN Group'          *

Critical Security Vulnerability Found in Metabase BI Software          *

Ivanti Fixes a Zero-Day Flaw in its Endpoint Manager Mobile (EPMM) Software          *

Hackers Employ SUBMARINE Backdoor in Barracuda Email Security Gateway Hack          *

Abyss Locker Ransomware Encrypts VMware ESXi Servers          *

Hackers Exploit Windows Search Feature to Distribute Remote Access Trojans          *

New Android Malware Steals Crypto Credentials Using uses OCR          *

STARKMULE Employs U.S. Military-themed Document Lures to Target Koreans          *

BlueBravo Targets European Diplomatic Entities Using GraphicalProton Backdoor          *

IDOR Web App Flaws Enables Unauthorized Access          *

Hawai'i Community College Suffers Data Breach          *

Fenix Cybercrime Group Targets Taxpayers from Mexico and Chile          *

Decoy Dog Malware Poses Grave Risk to Enterprise Networks          *

Hackers Actively Exploiting Vulnerable Apache Tomcat Servers          *

WordPress Ninja Forms Plugin Flaws Expose Websites to Data Leak          *

Zimbra Addresses Zero-Day Vulnerability Exploited in XSS Attacks          *

Over 900k MikroTik Devices Affected by Code Execution Vulnerability          *

Researcher Discovers New AI Tool Dubbed 'FraudGPT' Used in Sophisticated Cyber Attacks          *

Ubuntu Linux Vulnerabilities Affect 40 Percent of Ubuntu Users          *

ALPHV Ransomware Integrates Data Leak API for Enhanced Extortion Approach          *

NATO's Communities of Interest (COI) Cooperation Portal Suffers Data Breach          *

Nitrogen Malware Exploits Google Ads to Deliver Ransomware Attacks          *

JumpCloud Cyberattack Exposes North Korean Nation-state Actors IP Address          *

Casbaneiro Banking Malware Adopts UAC Bypass Technique for Stealthy Attacks          *

400,000 Corporate Credentials Stolen by Info-stealing Malware Families          *

Realst macOS and Infostealer Malware Targeting Cryptocurrency Wallets          *

VMware Fixes Critical Bug Exposing Cloud Foundry API Admin Credentials in Audit Logs          *

Indian Railway Catering and Tourism Corporation (IRCTC) Suffers Massive Outage          *

Zenbleed Attack Exposes Sensitive Data in AMD Zen2 Processors          *

Norwegian Government's ICT Platform Hacked Via Zero-Day Vulnerability          *

Ivanti Addresses A Zero-Day Flaw in its MobileIron Platform          *

OpenSSH Vulnerability Exposes Linux Systems to Remote Command Injection          *

Atera Windows Installers Vulnerable to High-Risk Privilege Escalation Attacks          *

Open-Source Software Supply Chain Attacks Target Banking Sector          *

Microsoft Azure AD Token Forging Technique Goes Beyond Outlook And Wiz Reports          *

Clop Ransomware Gang Employing Clearweb Sites to Expose Data Stolen in MOVEit Attacks          *

Coastal Mississippi County Hacked in a Ransomware Attack          *

Threat Actors Distribute HotRat Malware Via Pirated Softwares          *

DDoS Botnets are Exploiting Critical Vulnerability in Zyxel Devices          *

BundleBot Malware Distributed Via Masqueraded Google AI Chatbot and Utilities          *

Lazarus Group's Campaign Targets Crypto, Gambling and Cyber Sector Developers          *

Mallox Ransomware Exploits Vulnerable MS-SQL Servers to Breach Networks          *

New Peer-to-Peer Malware 'P2PInfect' Targets Redis Servers Running Windows and Linux Systems          *

Critical Vulnerabilities Found in Apache OpenMeetings Web Conferencing Tool          *

JumpCloud Breach Attributed to North Korean APT Lazarus Group          *

Critical AMI MegaRAC Flaws Enable Hackers to Crash Vulnerable Servers          *

Chinese APT41 Using New WyrmSpy and DragonEgg Spyware to Target Mobile Devices          *

Two Ransomware Groups Target Beauty Giant 'Estée Lauder'          *

Hackers Target Pakistani Organizations with ShadowPad Malware          *

Threat Actors Transform Microsoft Exchange Servers as Malicious C2 Servers          *

Adobe Releases Patches for Actively Exploited ColdFusion Flaws          *

Citrix Patches Zero-Day Vulnerabilities in its ADC and Gateway Products          *

FIN8 Utilizes Upgraded Sardonic Malware Variant to Deploy BlackCat Ransomware          *

VirusTotal Data Breach Exposes Personal Details of Registered Customers          *

Microsoft Exchange Online Service Suffers New Outage Blocking Emails          *

SophosEncrypt Ransomware: Impersonating the Popular Sophos Brand          *

Supply Chain Attack Enabled by Critical Privilege Escalation Design Flaw in Google Cloud Build          *

Hackers Exploit WebAPK to Trick Android Users into Installing Malicious Apps          *

Hackers Exploiting WordPress WooCommerce Payments Flaw in Massive Campaign          *

Threat Actors Exploit Microsoft Word Vulnerabilities to Distribute LokiBot Malware          *

Threat Actors Utilising Malicious USB Drives to Distribute SOGU and SNOWYDRIVE Malware          *

Companies Attempt to Bolster their Cyber Defenses as Ransomware Threatens Data Security          *

Researches Uncover Critical Security Vulnerabilities in Honeywell Experion DCS and QuickBlox Services          *

Hackers Exploit Lemmy Instances Via Zero-Day Vulnerability          *

AIOS WordPress Plugin Found Storing User Passwords in Plaintext Format          *

Hackers Use New Generative AI Cybercrime tool WormGPT to Launch Attacks          *

Gamaredon Hacking Group Distribute Malware via Instant Messaging Apps          *

Microsoft Security Flaw Enables Hackers to Breach 24+ Organizations Using Fake Azure AD Tokens          *

Data Breach at Colorado State University Impacts Students and Staff Personal Data          *

AVrecon Malware Exploits 70,000 Linux Routers to Establish Massive Botnet          *

Ukraine and Poland's Military and Government Entities Targeted Using PicassoLoader Malware          *

Zimbra Urges Administrators to Manually Fix Exploited Zero-Day Attacks          *

CISA Warns About Rockwell Automation ControlLogix Vulnerabilities Used in Industrial Systems          *

BlackLotus Windows UEFI Bootkit's Source Code Leaked on GitHub          *

Researchers Found Fake POC on GitHub Distributing Data Stealing Malware          *

Unauthenticated REST API Access Compromises Cisco SD-WAN vManage          *

Fortinet Patches Critical Stack-based Overflow Flaw in FortiOS and FortiProxy Devices          *

Researchers Publish Proof of Concept for Ghostscript's Critical RCE Vulnerability          *

Russian State Hackers Use BMW Car Ads to Lure Western Diplomats          *

New PyLoose Malware Hijacks Computational Power For Cryptocurrency Mining          *

Microsoft Discloses a Breach of US Government Exchange Email Accounts by Chinese Hackers          *

SonicWall Alerts Customers to Critical Flaws in its GMS and Analytics Suites          *

Hackers Abuse Loophole in Windows Policy to Load Malicious Kernel Drivers          *

Microsoft Office Zero-Day Vulnerability Exploited in Attack Against NATO Summit          *

Apple Releases Critical iOS Update to Fix Zero-Day Vulnerability in WebKit          *

Deutsche Bank Confirms Data Breach: Customer Data Exposed through Provider Breach          *

HCA Healthcare Acknowledges Data Breach as Hacker Steals Data of 11 Million Patients          *

Microsoft Patch Tuesday Security Advisory - July 2023          *

Hackers Actively Targeting Latin American Businesses Using TOITOIN Banking Trojan          *

RomCom Threat Actors Target NATO Summit Attendees in Phishing Campaign          *

VMware Issues a Warning Regarding the Availability of Critical vRealize RCE Flaw Exploit Code          *

Apple Issues an Emergency Update Regarding Recent Attacks Using Zero-Day Exploitation          *

Hackers Exploit Revolut's Payment Systems, Stealing $20 Million          *

BlackByte 2.0 Ransomware Executes Infiltration, Encryption, and Extortion Within 5 Days          *

Nickelodeon Launches Investigation Following Leak of "Decades Old" Data          *

Charming Kitten APT Group Enhances Targeting of macOS Systems with 'NokNok' Malware          *

Hackers Targets the Cloud-Native Environments of JupyterLab and Docker APIs in Silentbob Campaign          *

The Latest Version of the 'Big Head' Ransomware Unveils a Bogus Windows Update Alert          *

A Critical Unauthenticated SQLi Flaw Patched in MOVEit Transfer Software          *

Mastodon Social Network Fixes Critical Flaws that Allow Server Takeover          *

Barracuda Addresses Ongoing Email Gateway Login Challenges          *

CISA Urges Govt Agencies to Patch Actively Exploited Android Driver          *

Threat Actors Employ Vishing Technique to Deploy New 'Letscall' Malware          *

CISA Raises Concerns of Netwrix Auditor RCE Bug Exploitation in Truebot Malware Attacks          *

Two Malicious File Management Apps on Google Play Steals User Data          *

Cisco Issues a Warning About a Flaw That Enables Attackers to Crack Traffic Encryption          *

New Linux Kernel Vulnerability 'StackRot' Exploit Enables Privilege Escalation          *

Microsoft Resolves Windows LSA Protection Warnings Bug          *

Android Security Patch For July Resolves Three Actively Exploited Vulnerabilities          *

New Stealer-as-a-Ransomware 'RedEnergy' Targets Energy and Telecom Sectors          *

TeamsPhisher Tool Exploits Microsoft Teams Bug, Enabling Malware Delivery to Users          *

Actively Exploited Flaw in SolarView Series Exposes Energy Organizations to Attacks          *

Japan’s Largest Port 'Port of Nagoya' Operations Disrupted          *

Mozilla Addresses 13 Vulnerabilities in the Firefox 115 Release          *

Ransomware Encryption Impacts Over Two-thirds of Manufacturing Companies          *

DDoSia Attack Tool Upgrades and Expands Targeting Across Multiple Businesses          *

New GuLoader Campaign Targets Law Firms in the United States          *

Threat Actor 'Neo_Net' Employs Android Malware to Target Global Financial Institutions          *

Microsoft Denies Anonymouns Sudan’s Data Breach Claim of 30 Million Customer Accounts          *

Researchers Warn that 300,000 Fortinet Firewall Appliances are Vulnerable to Attacks.          *

Sophisticated Threat Meduza Stealer Targeting 19 Password Managers and 76 Crypto Wallets          *

Hackers Target European Government Entities in SmugX Campaign          *

BianLian Ransomware Gang Targets Leading Global Business Conglomerate 'Piramal Group'          *

Hackers Exploiting WordPress's Ultimate Member Plugin Flaw in the Wild          *

Samsung Phone Vulnerabilities Listed in CISA's 'Must Patch' Catalog Likely Exploited by Spyware Vendor          *

BlackCat Ransomware Group Exploits WinSCP Search Ads to Distribute Cobalt Strike          *

Researchers Discovered an Upgraded Version of RustBucket Malware Targeting macOS Users          *

Charming Kitten, An Iranian Hacking Group Uses Updated POWERSTAR Backdoor in Espionage Attacks          *

TMSC's Hardware Supplier Kinmax Technology Suffers Ransomware Attack by LockBit Ransomware Gang          *

Hackers Target Vulnerable SSH Servers To Perform Proxyjacking          *

North Korean Hacker Group 'Andariel' Strikes with its New EarlyRat Malware          *

MuddyWater Employs a New C2 Framework Called PhonyC2          *

The Android Spy App LetMeSpy Suffers a Major Data Breach          *

New Windows-Based Info Stealer Malware 'ThirdEye' Steals Sensitive Information          *

Flutter-Based Fluhorse Android Malware Employed to Steal Credit Cards Details and 2FA Codes          *

Critical Flaws in Social Login Plugin and LearnDash LMS Plugin for WordPress Fixed by Vendors          *

SQL Injection Vulnerabilities Found in Gentoo Soko Leading To Remote Code Execution          *

ArcServe Patches a High-Severity Security Vulnerability In Its UDP Backup Software          *

8Base Ransomware Gang Engages in Double Extortion Attacks          *

Akira Ransomware's Linux Version Encryptor Targets VMware ESXi Servers          *

Google Chrome Releases New Update to Patch High-Severity Vulnerabilities          *

Siemens Energy and Schneider Electric Confirms Data Breach in MOVEit Data-theft Attack          *

Threat Actors Using New Unique Execution Chain to Target NPM Repository          *

Outlook Web Suffers Outage Impacting Users Across America          *

Mockingjay Process Injection Method Allows Malware To Evade Detection          *

Suncor Energy Suffers Cyber Attack Impacting Petro-Canada Gas Station Customers          *

Hackers Expose Data of 45,000 New York City Students in MOVEit Breach          *

Researchers Uncover New Cybercrime Group 'Muddled Libra' Using Social Engineering to Target BPO Sector          *

Japanese Cryptocurrency Exchange Hit by macOS Backdoor 'JokerSpy          *

New Malware Campaign Uses Android Banking Trojan 'Anatsa' to Target Banking Customers          *

Angry LastPass Users Locked Out as MFA Resets Cause Frustration          *

Super Mario Game Compromised to Distribute Windows Malware          *

American And Southwest Airlines Suffered a Data Breach Exposing Pilot's Credentials          *

Grafana Released Patches For Critical Auth Bypass Due to Azure AD Integration          *

New Strain of JavaScript PindOS Delivers Bumblebee and IcedID Malwares          *

Data Breach in MOVEit Transfer Impacts Genworth Financial and CalPERS, Exposing Data of 3.2 Million Individuals          *

Fortinet Resolves Critical Remote Command Execution Flaw in FortiNAC Devices          *

Newly Discovered Bug in Microsoft Teams Allows Malware Distribution by External Accounts          *

Phishing Campaign MULTISTORM Exploits India and U.S. with Remote Access Trojans          *

CISA Updates Known Exploited Vulnerabilities Catalog with Six Additional Security Flaws          *

New Cryptojacking Campaign Targets IOT and Linux Device using Trojanized OpenSSH Version          *

Mirai Botnet Exploiting Multiple Vulnerabilities in D-Link, Zyxel, and Netgear Devices          *

VMware Addresses Critical Vulnerabilities in vCenter Server Allowing Code Execution and Authentication Bypass          *

Zyxel Fixes a Critical Command Injection Vulnerability in its Network Attached Storage(NAS) Devices          *

Apple Fixes Three Zero-Day Exploits Used in Triangulation Spyware Attack          *

North Korean Hacking Group 'APT37' Employing FadeStealer Malware to Conduct Cyber Espionage          *

Microsoft Releases Workaround for Outlook Freezes and Slow Starts          *

iOttie Discloses Data Breach Post its Official Site Hack          *

Condi Malware Targets TP-Link Archer AX21 Wi-Fi Router with DDoS-as-a-Service Exploit          *

Tsunami Botnet Malware Infects Linux SSH Servers          *

Microsoft Resolves Critical Azure AD Authentication Flaw Allowing Complete Application Takeover          *

Info-Stealing Malware Compromises Over 100,000 ChatGPT Accounts          *

RDStealer Malware: Uncovering a Remote Desktop Exploitation for Data Theft from Shared Drives          *

Hackers Using Fake OnlyFans Content to Distribute 'DcRAT' Malware          *

ASUS Patches Critical Vulnerabilities in its Multiple Routers Models          *

Iowa's Des Moines Public Schools Confirms a Ransomware Attack          *

Malwarebytes Issued a Fix for the Chrome Display Issue Caused by the Windows 11 KB5027231 Update          *

Researchers Uncover Advanced Toolkit Specifically Targeting Apple macOS Systems          *

Massive Data Breach at India's Largest Tech Retailer Exposes Sensitive Employee and Customer Data          *

BlackCat Ransomware Gang Threatens to Leak Data Stolen During Reddit's System Hack          *

Microsoft States DDoS Attacks as the Root Cause of the Recent Azure and Outlook Outages          *

Russian Hackers Employ USB-Spreading Malware to Target Ukrainian Government and Military Officials          *

Hackers Promote New Mystic Stealer Via Malware as a Service          *

Researchers Uncover Location Tracking Attack Exploiting SMS Delivery Reports          *

Emerging Threat Actor Diicot Exploits Diicot Brute, a Go-based SSH Brute-Forcer, to Compromise Linux Systems          *

Chinese Cyberespionage Group 'UNC4841' Behind Barracuda Zero-day Attacks          *

Rhysida Ransomware Group Leaks Stolen Documents from Chilean Army          *

Clop Ransomware Group Initiates Extortion of MOVEit Data-Theft Victims          *

Abuse of Cloud Mining: Hackers and Threat Actors Exploit Services to Launder Cryptocurrency          *

GravityRAT Malware Targets WhatsApp Backups on Android Devices          *

Google Chrome's 114 Update Includes Patch for Critical Vulnerability          *

Chinese Hackers Exploit DNS-over-HTTPS Protocol for Distribution of Linux Malware          *

Ofcom, UK Media and Telecoms Regulator, Falls Victim to MOVEit Hack          *

Critical Security Flaws Uncovered in Microsoft Azure Bastion and Azure Container Registry          *

Malicious GitHub Repositories Disguised as Fake Security Researchers Distribute Zero-Day Malware          *

New ChromeLoader Campaign Detected Spreading 'Shampoo' Malware through Counterfeit Warez Websites          *

Microsoft Addresses Windows Kernel Vulnerability with Default Disabled Fix          *

Widespread Brand Impersonation Campaign Utilizes 6,000 Websites to Fake 100 Brands          *

Critical Vulnerability in WordPress Stripe Payment Plugin Exposes Customer Order Details          *

New DoubleFinger Loader Targets Cryptocurrency Wallets in Cyber Attacks          *

VMware Releases Patch for Zero-Day Vulnerability Exploited to Install Backdoors in Virtual Machines          *

Microsoft Patch Tuesday Security Advisory - June 2023          *

Pirated Windows 10 ISOs Utilize EFI Partitions to Install Clipper Malware          *

Swiss Government Suffers DDoS Attacks Post Data Leak          *

'Have I Been Pwned' Discloses Zacks Investment Research's Data Breach          *

Threat Actors Harness Powerful BatCloak Engine for Fully Undetectable Malware          *

Researchers Uncover Security Flaws in Honda's 'PETE' e-Commerce Platform          *

A Major Data Breach Exposed Personal Information of Users Via Govt’s CoWIN Portal          *

Researchers Uncover a Flaw in Popular Strava App's Heatmap Feature Exposing Home Address          *

University of Manchester Suffers a Cyberattack, Resulting in a Likely Data Theft          *

Russian Telecom Company 'Infotel' JSC Suffers an Outage          *

Critical Vulnerability in Microsoft Visual Studio Exploited to Distribute Malicious Extensions          *

Fortinet Patches Critical RCE Flaw in Fortigate SSL-VPN Devices          *

Hackers Impersonate Crypto News Journalists, Steal $3 Million in Digital Assets          *

New SPECTRALVIPER Backdoor Targets Vietnamese Public Companies with Advanced Tactics          *

New Stealth Soldier Backdoor Malware Targets North Africa in Espionage Attacks          *

New Critical SQL Injection Flaws Discovered in MOVEit Transfer          *

Microsoft Discovers AitM Phishing and BEC Attacks Targeting Major Financial Institutions          *

Microsoft Azure Portal Suffers an Outage Claimed to be the Result of DDoS Attacks          *

Asylum Ambuscade Group Combines Cybercrime with Espionage to Target Small and Medium Businesses          *

Security Researchers Publish PoC for Actively Exploited Windows Win32k Flaw          *

CLOP Ransomware Gang Actively Exploiting MOVEit Zero-day Flaw          *

Japanese Pharmaceutical Company 'Eisai' Suffers Ransomware Attack          *

AIIMS Suffers Another Cyberattack, Following November 2022 Cyberattack          *

Cisco Patches Critical-Severity Flaws in Expressway Series and TelePresence Video Communication Server (VCS)          *

Malicious Campaign Deploys Satacom Downloader for Spreading Crypto-Stealing Addons          *

Cisco Resolves AnyConnect Bug Allowing Windows SYSTEM Privileges          *

VMware Addresses Critical Vulnerabilities in Aria Operations for Networks          *

Hackers Exploit Minecraft Mods to Distribute Fractureiser Malware on Windows and Linux          *

Cyclops Threat Group Facilitates Distribution of Information Stealing Malware to Cybercriminals          *

Researchers Discovered Over 60,000 Android Apps Installing Adware on Mobile Devices          *

PowerDrop: New PowerShell Malware Targets the U.S. Aerospace Industry          *

Outlook Faces Multiple Outages Allegedly Caused by Hacktivist Group Anonymous Sudan          *

Google Releases Patch for Zero-Day Chrome Vulnerability Exploited in the Wild          *

Android Security Patch Resolves Critical Vulnerabilities, Including Mali GPU Flaw          *

Brazilian Cybercriminals Exploit LOLBaS and CMD Scripts to Target Online Bank Accounts          *

Magecart-Style Campaign Exploits Legitimate Websites to Steal Credit Card Information          *

Threat Actors Exploit Barracuda ESG Zero-Day Flaw to Distribute Backdoor          *

$35 Million Worth of Cryptocurrency Stolen in Atomic Wallet Breach          *

New Malware Campaign Targeting Online Sellers with Info-Stealer          *

Splunk Addressed High-Severity Vulnerabilities in its Enterprise Products          *

Chinese Hackers Camaro Dragon Employs New 'TinyNote' Backdoor for Intelligence Gathering          *

US and South Korea Warn Kimsuky Hackers Impersonating Journalists to Gather Intelligence          *

Google removed 32 Malicious Extensions from Chrome Web Store Downloaded by 75 Million Times          *

North Korean Hackers, ScarCruft Uses LNK Files to Launch RokRAT Malware          *

New MOVEit Transfer Zero-Day Vulnerability is Mass-Exploited in Data Theft Attacks          *

New Horabot Campaign Targets Latin Americans' Gmail and Outlook Accounts          *

Researchers warn Organisations about Saleforce 'Ghost Sites' Exposing Sensitive Information          *

iPhones on Kaspersky Networks are Being Targeted with Unknown Malware          *

Dark Pink APT Group Continues to Target Asia-Pacific Entities          *

Hackers Pushing SeroXen RAT To Target Gaming Community          *

Threat Actor 'Spyboy' Promotes Terminator Tool Capable of Bypassing AV, XDR, and EDR Solutions          *

Researchers Uncover Proof-of-Concept for RCE Flaw Affecting Popular Python Library ReportLab Toolkit          *

Researchers Warn About a Backdoor Functionality in Gigabyte Motherboards          *

Google Releases Chrome 114; Addressing 18 Security Vulnerabilities          *

Researchers Found DogeRAT Malware Targeting Indian Android Users          *

RomCom Malware Impersonating ChatGPT, GIMP Spreaded via Google Ads          *

Researchers Spotted 'SpinOk' Spyware Trojanized in 101 Android Applications          *

Researchers Found Vulnerability in WordPress's 'Gravity Forms' Plugin Used in 930,000 Websites          *

'Automattic' Rolls Security Patch to Address Critical Flaw in the Jetpack Plugin          *

Apple Critical 'Migraine' Flaw Enables Attackers to Bypass System Integrity Protection          *

MCNA Dental Suffers Ransomware Attack; Impacting 8.9 Million Patients          *

Hacking Forum Exposed the Data of 478,000 RaidForums Members          *

New GobRAT Malware Targeting Linux Routers in Japan          *

Jimbos Protocol Suffered Flash Loan Attack Resulting in Theft of Over $7.5 Million          *

BlackByte Ransomware Group Claims Responsibility for City of Augusta's Cyberattack          *

Researcher Uncovers 'File Archiver in the Browser' Phishing Toolkit to Exploit ZIP Domains          *

Emby Forced to Shutdown Hacked User-hosted Media Servers          *

Unpatched Zyxel Firewalls Exploited by New Variant of Mirai Botnet          *

New Bandit Stealer Malware Found Targeting Web Browsers and Cryptocurrency Wallets          *

Researchers Discovered a Critical OAuth Vulnerability in Expo Framework          *

QBot Malware Exploits DLL Hijacking Flaw in Windows WordPad EXE to Infect Devices          *

Buhti Ransomware Gang Exploits Leaked Encryptors to Target Windows and Linux Systems          *

Researchers Uncover Predator Android Spyware’s New Data Theft Capabilities          *

Critical Vulnerability in Google Cloud's Cloud SQL Service Exposes Confidential Data          *

D-Link Fixes Critical Vulnerabilities in its D-View 8.0 Network Device Management Platform          *

New Russian-linked Malware 'COSMICENERGY' Targets Industrial Systems          *

Threat Actors Found Using Encrypted RPMSG Messages in Microsoft 365 Phishing Attacks          *

Barracuda Networks Patches Zero-Day Vulnerability in its Email Security Gateway Appliance          *

Zyxel Patches Critical Flaws in its Firewall and VPN Products          *

Researchers Uncover New Version of Legion Malware Targeting SSH Servers and AWS Credentials          *

Lazarus Group Targets Microsoft IIS Servers to Deploy Malware          *

Microsoft Exchange Servers Infected with the New PowerExchange Malware          *

GitLab Issues an Emergency Update to Address a Critical Path Traversal Vulnerability          *

Hackers Attack 1.5 million WordPress Sites by Leveraging a Cookie Consent Plugin Vulnerability          *

Researchers Discover North Korean Kimsuky Group Leveraging Sophisticated Reconnaissance Toolkit          *

Asian Government Entities Targeted by Newly Discovered APT Group, GoldenJackal          *

Rheinmetall, German Arm Manufacturer, Falls Victim to BlackBasta Ransomware Attack          *

Newly Discovered AhRat Malware Disguised in Screen Recording App on Google Play Store          *

Newly Discovered Windows Kernel Driver Used by Iranian Hackers to Target Middle East Entities          *

'Crypto Phishing Service 'Inferno Drainer' Steals $5.9 Million from Victims          *

Microsoft 365 Suffers New Outage Causing Connectivity Issues          *

Threat Actor 'GUI-vil' Exploiting AWS EC2 Instance for Crypto-mining Operations          *

BlackCat Ransomware Group Employing Malicious Windows Kernel Drivers to Evade Detection          *

Hackers Could Chain Two Flaws to Achieve Code Execution in Pimcore          *

New Attack Method 'BrutePrint' Found Brute-Forcing Fingerprints on Android Devices          *

Threat Actors Use Fake CapCut Websites to Distribute Malware          *

Threat Actors Hide TurkoRAT Malware in npm Packages          *

Infamous Cyber Group FIN7 is Back With Cl0p Ransomware          *

Hackers Employ SIM Swapping to Target Microsoft Azure Machines          *

Dish Network Likely Paid Ransom Following the Recent Ransomware Attack          *

Luxottica Discloses a Data Breach; 70M Users Info Leaked          *

A Faulty Security Update Taken Down ASUS Routers Globally          *

CISA Issues a Warning on a Samsung ASLR Bypass Flaw          *

Cryptojacking Group Exploits Oracle WebLogic Server for Cryptocurrency Mining          *

'Lemon Group' Hacks Millions of Android Devices, Installing Guerilla          *

New Vulnerability Discovered in KeePass Exposing Cleartext Master Password          *

Retaliatory Cyberattack: Indian Hackers Target Pakistani Embassy Websites Following DDoS Attack on Indian State Police          *

Apple Addresses Three New Zero-day Vulnerabilities with Patch Releases          *

MalasLocker Ransomware Targets Zimbra Servers, Demands Charitable Donations          *

Houthi-Linked Cyber Threat Group OilAlpha Targets Android Users in the Arabian Peninsula          *

Unpatched Vulnerability Found in Belkin Wemo Smart Plugs by Researchers          *

Malicious Visual Studio Extensions Discovered on Microsoft's VSCode Marketplace by Researchers          *

Cisco Addresses Four Critical RCE Flaws in It's Smart Switches          *

Chinese Hacking Group "Camaro Dragon" Exploits TP-Link Routers to Target European Organizations          *

Hackers Exploit Geacon, a Cobalt Strike Port, to Target macOS Users          *

Multiple Flaws Discovered in Kiddoware's Android Application 'Parental Control - Kids Place'          *

Hackers Targeting Microsoft Azure Admin Account for Stealthy Access to VMs          *

K D Hospital, a Multi-Specialty Healthcare Facility, Falls Victim to Ransomware Attack          *

Researchers Found Vulnerabilities in Sierra Wireless, Teltonika Networks, and InHand Networks' Routers          *

New APT Group, Lancefly Employs 'Merdoor' Backdoor          *

PharMerica Suffers a Data Breach; Over 5.8 Million Patients Impacted          *

New Ransomware-as-a-Service Operation, MichaelKors Targets Linux and VMware ESXi Systems          *

Threat Actors Target Poorly Managed Microsoft SQL Servers Using CLR SqlShell Malware          *

New Ransomware Operation, RA Group Targets US and South Korean Companies          *

Rockwell Automation Fixed Multiple Vulnerabilities Present in its Products          *

Threat Actors Found Exploiting Recently Fixed WordPress Plugin Vulnerability          *

U.S. Transportation Department Suffers Data Breach; 237,000 Employees Impacted          *

Greatness, New Phishing-as-a-Service Platform helps Cybercriminals to Generate Convincing Phishing Pages          *

Researchers Uncovered a Vulnerability in Ferrari Website, Exposing Sensitive Information          *

Researchers Found Multiple Vulnerabilities in Netgear's NightHawk Routers          *

Toyota Disclosed Data Breach Exposing Car Location Data of 2 Million Customers for a Decade          *

Attackers Exploiting Follina Vulnerability to Distribute XWorm Malware          *

Discord Disclosed Data Breach After its Support Agent's Account got Compromised          *

FBI and CISA Warns Bl00dy Ransomware Targets Education Sector via PaperCut RCE Flaw          *

New APT Group Red Stinger Targeting East Europe's Critical Infrastructures          *

Researchers Uncover Stealthier Version of Linux BPFDoor Malware          *

ABB, a Swiss Automation Company Struck by the Black Basta Ransomware          *

Ransomware Gangs Targeting VMWare ESXi Servers with Leaked Babuk Ransomware Source Code          *

Researchers Found Critical Privilege Escalation Vulnerability in Elementor Plugins          *

North Korean Hackers Breach South Korea's Seoul National University; KNPA Issues Warning          *

Researcher Found New Variant of RapperBot Malware with Cryptojacking Capabilities          *

Threat Actors Employ DownEx Malware to Target Government Organizations in Central Asia          *

Threat Actors Deploying Aurora Stealer Via Popunder Ads          *

Researchers Disclose Info on Zero-Click Windows Vulnerability Enabling NTLM Credential Theft          *

New DDoS Botnet Malware AndoryuBot Exploits Critical Ruckus RCE Vulnerability          *

SideWinder APT Group Deploys Server-Based Polymorphism Technique in Attacks on Pakistani Government Organizations          *

Sysco, a Global Food Chain, Faces Data Breach Impacting Customer and Employee Information          *

Critical Linux Kernel Netfilter Vulnerability Enables Root Privilege Escalation          *

Microsoft Releases Optional Fix Guidelines for Secure Boot Zero-Day Vulnerability          *

Adobe Releases Patch for 14 Vulnerabilities in Substance 3D Painter Software          *

Microsoft Patch Tuesday Security Advisory - May 2023          *

Healthcare Solution Provider 'NextGen' Suffers Data Breach Impacting 1 Million Customers          *

After MSI Breach, Intel Investigates Intel Boot Guard Private Keys Leak          *

FBI Seizes 13 Domains Linked to DDoS-For-Hire Services          *

Critical Vulnerability in Siemens Industrial Control Systems Could Disrupt Power Grid          *

CERT-UA Warns of SmokeLoader and RoarBAT Malware Attacks Against Ukraine          *

Researchers Found SideCopy Group's Phishing Campaign with Indian Military Themed Lures          *

Researchers Uncover New Ransomware Operation Dubbed 'Cactus'          *

New Ransomware 'Akira' Targets Enterprise Networks          *

Vulnerability in OpenAI's Account Validation Process Allows Unlimited Credits          *

A Security Incident Exposed Private Tweets of Twitter Circle          *

Fortinet Releases Patches for High-Severity Vulnerabilities in FortiADC and FortiOS          *

New PaperCut RCE Exploit Bypasses Existing Detections          *

Dragon Breath APT Group Targets Gambling Industry Using Double-Clean-App Technique          *

Hackers Employ New Web-Inject Toolkit DrIBAN to Target Italian Banking Clients          *

Threat Actors Hack Packagist Repository; Dozen PHP Packages Compromised          *

New Android FluHorse Malware Targets Users with Malicious Apps          *

Updates for Android Fixes a Kernel Flaw used in Spyware Attacks          *

ALPHV Gang Breaches Constellation Software in a Ransomware Attack          *

Two WordPress Custom Field Plugins Exposes Over 1M Sites to XSS Attacks          *

Cisco Disclosed New RCE Vulnerability in Cisco SPA112-Port Phone Adapters          *

Meta Thwarts a Malware Campaign that Used ChatGPT to Steal Accounts          *

ALPHV Ransomware Added McDermott International to its Victim List          *

Researchers Found New Android Subscription Malware 'Fleckpe' on Google Play          *

Three New Vulnerabilities Found in Microsoft Azure API Management Service          *

City of Dallas Suffers Royal Ransomware Attack Resulting in Shutdown of its IT Systems          *

Russian Hacking Group 'Sandworm' Utilizes WInRAR to Erase Ukrainian Government's Data          *

New Info-stealing Malware 'NodeStealer' Steal Cookies to Hijack Facebook Accounts          *

Dragon Breath Group Employs New Double DLL Sideloading Technique to Evade Detection          *

A Data Breach at Brightline Affects 783,000 Pediatric Mental Health Patients          *

Hackers Exploit Authentication Bypass Vulnerability and RCE Vulnerability in DVR Devices          *

Iranian Government's BouldSpy Android Spyware Found Targeting Minority Groups          *

Researchers Uncover Three New Flaws in FRRouting Software          *

Cryptocurrency Exchange Platform Level Finance Hacked, Resulting in Loss of 214k LVL Tokens          *

CISA Added TP-Link, Apache, and Oracle Vulnerabilities to its Known Exploited Vulnerabilities Catalog          *

Servers Running Salesforce Software Are Leaking Sensitive Data          *

Researchers Found Threat Actors Distributing New LOBSHOT Malware via Google Ads          *

Vietnamese Threat Actor Employs Malverposting Tactics to Infect 500,000 Devices          *

Hackers Target AT&T Email Accounts to Steal Cryptocurrency          *

Russian Hackers Target Ukrainian Government with Phishing Emails          *

Sharpboys Breach Israeli Prime Minister Benjamin Netanyahu's Facebook Account          *

Americold, A Leading Cold Storage Company Suffered Outage Followed by Network Breach          *

Hackers Found Targeting Vulnerable Veeam Backup Servers Exposed on the Internet          *

Zyxel Addresses Critical Vulnerabilities in its Firewall Devices          *

Hackers Use Realistic Checkout Forms to Steal Credit Cards          *

CISA Issued a Warning about Critical Vulnerabilities in Illumina's DNA Sequencing Systems          *

Researchers Found New Variant of ViperSoftX Info-Stealing Malware with Broader Range of Targets          *

New macOS Info-stealing Malware 'Atomic' is being Sold Via Private Telegram Channel          *

Multiple Malicious Gaming Apps Found Distributing Adware on Google Play          *

Russian Hacking Group Found Operating New Politically Motivated Surveillance Campaign Paperbug in Tajikistan          *

Researchers Found RTM Ransomware Group Using New Linux Encryptor to Target VMware ESXi Servers          *

Researchers Found Chinese Hacking Group Gallium Using New Linux Malware Strains in Cyberespionage          *

PrestaShop Releases New Version to Fix a Critical SQL Filtering Vulnerability          *

Apache Superset Servers are Vulnerable to Authentication Bypass and RCE Attacks          *

Cisco Discloses New Zero-Day Vulnerability in its Prime Collaboration Deployment (PCD) Software          *

Evasive Panda Hacking Group Targets Tencent QQ Messaging App with MgBot Malware          *

Researchers Found New Version of Mirai Botnet Malware Exploiting a Vulnerability in TP-Link WiFi Routers          *

VMware Released Patches for Critical Vulnerabilities Discovered in its Workstation and Fusion Software Hypervisors          *

New Critical SLP Vulnerability Allows Massive 2200X DDoS Amplification Attack          *

Iranian Hackers Targeting Israel with a PowerLess Backdoor Via Phishing Attacks          *

APC Addresses Critical Vulnerabilities in its Easy UPS Online Monitoring Software          *

Canadian Directory Publisher Yellow Pages Suffers a Cyberattack Resulting in Data Leak          *

Researchers Found New Side Channel Attack Affecting Multiple Generations of Intel CPUs          *

Attackers Hacked KuCoin’s Twitter Account to Promote Crypto Scam          *

Microsoft 365 Search Outage Impacts Outlook, Teams, and Exchange Online          *

Hackers can Abuse Improperly Wiped Corporate-grade Routers to Gain Sensitive Data          *

CISA Adds Three More Security Flaws to its Known Exploited Vulnerabilities Catalog          *

Researchers Found a New Malware Toolkit Dubbed Decoy Dog via Anomalous DNS Traffic          *

In Both Europe and the US, EvilExtractor Seen an Uptick in Malware Activity          *

Alongside 3CX Breach, Lazarus X_TRADER Hack Affects Critical Infrastructure          *

Google Ads Support Ransomware Gangs to Employ the BumbleBee Malware          *

MediaWiki and TWiki-based University Websites Compromised to Spread Fortnite Spam          *

GhostToken Flaw Enable Attackers to Hide Malicious Apps in Google Cloud Platform          *

American Bar Association Suffers Data Breach, Affecting 1.4 Million Members          *

Kubernetes RBAC Exploited in a Large-scale Cryptocurrency Mining Campaign          *

African Telecommunication Service Providers are Targeted by Daggerfly Threat Group          *

Attackers Abuses Abandoned 'Eval PHP' WordPress Plugin to Compromise Websites          *

Lazarus Threat Group Found Using Linux Malware in Fake Job Campaigns          *

Two Critical Vulnerabilities Found In Alibaba Cloud's ApsaraDB RDS and AnlayticDB for PostgreSQL          *

VMware Addresses Critical Arbitrary Code Vulnerability in its Aria Operations for Logs          *

Threat Actors Using AuKill Hacking Tool to Disable EDR Software on Targeted Systems          *

PaperCut Warns of Critical Vulnerabilities that are Actively Exploited in the Wild          *

Blind Eagle Threat Group's New Multi-Stage Attack Pushes NjRAT Trojan on Compromised Systems          *

Researchers Found Attackers Deploying Trigona Ransomware on Unsecured Microsoft SQL Servers          *

Pakistani Hackers Transparent Tribe Target Indian Government Agencies Using Linux Malware Poseidon          *

Google Addressed Another Zero-Day Vulnerability in Chrome Browser          *

Vice Society Ransomware Gang Leaks Data Stolen from US Network Infrastructure Giant CommScope          *

Iranian Hackers Leveraging Legitimate Simplehelp Remote Support Software to Carry Out Persistent Attacks          *

CISA, FBI Alerts on Russian State-Sponsored APT28 Threat Group Targeting Cisco Routers          *

Iranian Hacking Group 'Mint Sandstorm' Targets US Critical Infrastructure in Retaliation to Iranian Attacks          *

CISA Adds macOS and Chrome Bugs to its Known Exploited Vulnerabilities Catalog          *

A Security Researcher Published New Sandbox Escape PoC Exploit for VM2 Library          *

Ex-Conti Members Collaborate with FIN7 Hacking Group to Push New Domino Malware          *

QBot Malware is Now Distributed Using Malicious PDFs and Windows Script Files          *

New Credential-Stealer Zaraza Bot Targets 38 Different Web Browsers, Including Google Chrome          *

Hackers Abused Google Command and Control Red Team Tool in Data Theft Attacks          *

New Android Malware Chameleon Targets Users in Australia and Poland          *

Researchers Found New LockBit Encryptors Targeting macOS Devices          *

The Indian Cybercrime Coordination Center Issued an Alert on 'Hacktivist Indonesia' Group Targeting Govt Websites          *

Researchers Found Hackers Using Action1 RMM in Ransomware Attacks          *

NCR’s Aloha POS Platform Suffers an Outage as a Result of BlackCat Ransomware          *

Attackers are Spreading Android Goldoson Malware Via 60 Google Play Apps          *

Kodi Suffered a Data Breach Exposing 400K User Records          *

Researchers Found Vice Society Ransomware Using New PowerShell-Based Data Theft Tool in Attacks          *

CISA Adds Two Actively Exploited Vulnerabilities in Android and Novi Survey to its KEV Catalog          *

Google Chrome Releases Emergency Update to Fix a Zero-Day Vulnerability          *

Russian State Sponsored APT29 Group Targeting NATO and European Union Countries          *

Researchers Uncover 'Read The Manual' Locker Cyber-criminals          *

Researchers Found New Legion Tool with Credential Harvester and SMTP Hijacking Capabilities          *

Microsoft Warns of a Phishing Campaign Targeting Tax Preparers and Accounting Firms          *

Pakistani Hackers 'Transparent Tribe' Targeting Educational Institutions of India          *

Security Researchers Warn to Patch Critical MSMQ Vulnerability in Windows          *

Hyundai Suffers Data Breach Exposing Customers’ Personal Data          *

Kyocera Addressed a Vulnerability in its Android Printing App that can be Abused to Install Malware          *

Fortinet Patches Critical Vulnerability in its FortiPresence          *

Microsoft Patch Tuesday Security Advisory - April 2023          *

A New 'By-Design' Flaw in Microsoft Azure Could Expose Storage Accounts to Hackers          *

Infected Websites Distributing Monero Malware via Fake Google Chrome Update Errors          *

Attackers Hacked iPhones via Invisible Calendar Invites to Drop Spyware          *

Microsoft Patched Actively Exploiting Zero-day Vulnerability in Windows CLFS          *

SAP Addresses Two Critical-Severity Vulnerabilities in its April 2023 Security Updates          *

European HR and Payroll Management Company SD Worx Suffers a Cyberattack          *

NPM Repository Flooded with Malicious Packages Causing DoS Attack and Service Unavailability          *

Apple Patches Two Zero-day Vulnerabilities on Older iPhones and iPads          *

Researchers Found New Cryptojacking Campaign Targeting Linux Machines          *

Scammers Using Authentic YouTube Email Address to Lure Users into Providing Credentials          *

Iran-based Hackers Carrying Out Destructive Attacks in Disguise as of Ransomware          *

Researchers Disclose Critical RCE Flaw in vm2 Sandbox Library          *

CISA Urges Agencies to Address Backup Exec Issues Exploited by a Ransomware Gang          *

Massive Balada Injector Campaign Targeting WordPress Sites Since 2017          *

MSI Affirms Security Breach Accusations Post Ransomware Attack          *

Apple Patches 2-Zero days Exploited to Hack iPhones and Macs          *

Cisco Released Patches for Multiple Vulnerabilities in its Various Products          *

Medusa Ransomware Acknowledges Cyberattack on the Open University of Cyprus          *

Money Message Ransomware Claims MSI Breach; Demands 4 Million USD          *

Google Patches Several Security Vulnerabilities with Chrome 112          *

Researchers Found Four Vulnerabilities in the Popular Japanese Word Processor 'Ichitaro'          *

CISA Warns on Vulnerabilities Discovered in Nexx Smart Devices          *

New Clipper Malware 'CryptoClippy' Targeting Portuguese Cryptocurrency Users          *

Researchers Found Threat Group Mantis Using Upgraded Malware to Target Palestinian Entities          *

Researchers Found New Version of Typhon Information-Stealer with Enhanced Anti-Analysis and Evasion Capabilities          *

Google Announced Android's April 2023 Security Update Addressing Over 65 Vulnerabilities          *

Researchers Found New Rilide Malware Targeting Chrome-Based Browsers to Steal Cryptocurrency          *

ALPHV Ransomware Exploits Three High-Severity Vulnerabilities in Veritas Backup Software          *

Check Point Researchers Spotted New Rorschach Ransomware Deployed Against a US-Based Company          *

IRS-Authorized 'eFile.com' Website was Found Serving JavaScript Malware          *

HP Announces Critical Information Disclosure Flaw in its LaserJet Printers to be Patched within 90 Days          *

Researchers Found New Information-Stealing Malware 'OpcJacker' Used in Malvertising Campaigns          *

Hackers Using Malicious WinRAR Self-Extracting Archives to Plant Backdoors on Devices          *

Hackers Target Victims of 3CX Supply Chain Attack with Gopuram Malware          *

Researcher Found Multiple Vulnerabilities in Osprey Pump Controller          *

American Telecommunication Company Lumen Technologies Suffered Two Cyberattacks          *

Researchers Discovered a New 'Money Message' Ransomware Extorting $1 Million          *

Fake Threat Group Midnight Extorting Previously Breached U.S. Companies          *

Researchers Found Cylance Ransomware Targeting Linux and Windows Systems          *

TMX Finance and its Subsidiaries Suffers Data Breach Affecting 4.8 Million Customers          *

Hackers Exploited a High Severity Flaw in the Elementor Pro WordPress Plugin to Upload Backdoors          *

Researchers Found Threat Actors Exploiting 10 Year Old Windows Vulnerability with 'opt-in' Fix in Recent Attacks          *

A Severe Super FabriXss Vulnerability has been Discovered in Azure Service Fabric Explorer          *

Researchers Found Malware Botnets Exploiting Realtek and Cacti Vulnerabilities          *

New AlienFox Toolkit Targets Popular Cloud Services for Credential Harvesting          *

Chinese Threat Group RedGolf Uses a Custom Backdoor KEYPLUG to Target Windows and Linux Systems          *

Threat Group Winter Vivern Exploiting a Zimbra Vulnerability to Steal NATO Emails          *

CISA Added Five Vulnerabilities Exploited to Drop Spyware to its Known Exploited Vulnerabilities Catalog          *

A Misconfigured Microsoft Bing Application Allows to Breach the Office 365 Users          *

Hackers Compromised 3CX Desktop App Using Digitally Signed and Trojanized Version of 3CX (VOIP)          *

Researchers Discovered a New Malware ‘Melofée’ Targeting Linux Server          *

QNAP Addresses High Severity Linux Sudo Vulnerability in NAS Devices          *

Hackers Exploited 'burn' Smart Contract Function in SafeMoon's Liquidty Pool to Drain $8.9 Million          *

Clop Ransomware Breached Crown Resorts' Network by Exploiting GoAnywhere Zero-day Vulnerability          *

Security Researchers Disclosed WiFi Protocol Vulnerability Allowing Attackers to Hijack Network Traffic          *

Researchers Found Trojanized Tor Browsers Targeting Russians with Crypto-Stealing Malware          *

Attackers Targeted European Entities to Distribute Remcos RAT and Formbook Malware          *

Pakistan-Based SideCopy APT Group Targeting India's DRDO with Action RAT          *

Researchers Found New Variants of IcedID Loader Delivering Other Malware          *

A New MacStealer Malware Targeted Mac Users and Stealing iCloud Keychain Credentials          *

Apple Fixes WebKit Zero-Day Bug on Older iPhones          *

Twitter Removes Source Code that Leaked on GitHub and Searching for Downloaders          *

Attackers Targeting U.S. Taxpayers in New Emotet Phishing Campaign          *

Critical Flaw in AI Testing Framework MLflow May Expose AI and Machine-Learning Models          *

OpenAI Reveals About ChatGPT User Data Exposure Incident          *

Microsoft Warn of Outlook Vulnerability Exploited by Russian Attackers          *

Procter & Gamble Discloses Data Breach via GoAnywhere Zero-day          *

Chinese Nuclear Energy Institutions Targeted by 'Bitter' Espionage Hackers          *

Lionsgate's Streaming Network Reveals Over 37 Million Subscribers' Data          *

Malicious Python Package Employ Unicode Technique to Evade Detection          *

Researchers Disclose Chinese Nation State Hackers' New Attack Strategies          *

Threat Actors Targeting 450 Financial Apps Using Android Banking Trojan          *

Code Hosting Platform 'GitHub' Swiftly Replaces Exposed RSA SSH Key          *

Play Ransomware Gang Publishes Data Stolen From Maritime Firm Royal Dirkzwager          *

WordPress Fixed a Critical Vulnerability in WooCommerce Payments Plugin          *

BlackGuard Stealer Targeting 57 Cryptocurrency Browser Extensions and Wallets          *

Cisco Addressed High Severity Vulnerabilities in its IOS and IOS XE Software          *

Microsoft Fixes Windows 11 Snipping Tool's Acropalypse Privacy Flaw          *

Researchers Warn About Kimsuky Threat Group Stealing Gmail Content          *

Researchers Published Proof-of-Concept (PoC) for Netgear Orbi Mesh Wireless System Vulnerabilities          *

A Trojanized ChatGPT Chrome Extension Found Stealing Facebook Accounts          *

CISA Warned on Critical Vulnerabilities in Industrial Control Systems Products          *

Play Ransomware Gang Released Data Allegedly Stolen From Logistics Services Company Royal Dirkzwager          *

Mozilla Fixes Firefox Crash Issue in Windows 11 and macOS Systems          *

Hackers Employing New CommonMagic and PowerMagic Malware To Steal Victims' Information          *

Threat Actors Targeting Linux Servers with Different Variants of ShellBot Malware          *

Fraudsters Extort 1 Crore INR from 81 Users Via a Mobile Payment App          *

Threat Actors Exploited a Zero-day Vulnerability in General Byte Bitcoin ATMs          *

Ferrari, Italian Luxury Sports Car Manufacturer Discloses a Data Breach          *

Realtek SDK, Huawei Routers, and Hadoop YARN Servers are Targeted by New HinataBot Botnet          *

FBI, CISA and MS-ISAC Releases Advisory to Warns About LockBit 3.0 Ransomware Attacks          *

New Trigona Ransomware Targets Australia, United States and European Countries          *

Threat Actors Now Distributing Emotet Malware via Malicious Microsoft OneNote Files          *

NBA Suffers Data Breach that Exposes its Fans' Personal Information          *

Scammers Abuse Twitter’s 'Quote Tweet' Feature to Target Bank Customers          *

Attackers Distributing Android Malware 'FakeCalls' in South Korea          *

A Cyberattack at Latitude Financial Services Leads to Data Theft at Two Service Providers          *

Google Warned About 18 Zero-Day Flaws in Samsung's Exynos Chipsets          *

Attackers Abuse Adobe Acrobat Sign to Deliver Redline Info-Stealing Malware          *

Mozilla Announced the Release of Firefox 111 with Dozen of Vulnerability Patches          *

Attackers Hacked U.S Federal Agencies Using Old Telerik UI Vulnerability          *

Researchers Discovered First Dero Cryptojacking Campaign Targeting Kubernetes          *

Healthcare Provider ILS Suffered a Data Breach Exposing 4.2 Million Patient Data          *

Researchers Disclosed the Technical Details of Critical Microsoft Outlook Vulnerability          *

Tick APT Group Compromised a Data-Loss Prevention Company in East Asia          *

CISA Added a Critical Adobe ColdFusion Vulnerability to its Known Exploited Vulnerability Catalog          *

New Threat Group YoroTrooper Running Cyber-Espionage Campaign Against CIS Government Organizations          *

Rubrik Suffers Data Breach in GoAnywhere Zero-Day Attack          *

SAP Addressed Five Critical Vulnerabilities in its Security Updates          *

Microsoft Patch Tuesday Security Advisory - March 2023          *

Euler Finance Lost $197 Million in Crypto in Flash Loan Attack          *

Dark Pink APT Group Using KamiKakaBot Malware Against Southeast Asian Government and Military Entities          *

A Massive Cyberattack Hijacks East Asian Websites to Redirect Victims to Adult Content          *

Threat Actors Using AI-generated YouTube Videos to Spread Info-stealer Malware          *

Researchers Discovered Critical Security Vulnerabilities in Akuvox E11 Video Doorphone          *

Unidentified Attackers Target Government Networks by Abusing New FortiOS Bug in Zero-Day Attacks          *

Researchers Disclosed a Cross-Site Search Vulnerability in OpenSea NFT Marketplace          *

Researchers Found a New CASPER Attack that Leaks Data from Air-gapped Computers          *

German Vehicle Manufacturer BMW Exposes Clients Data and Business Secrets          *

U.S. Office Supply Distributor Essendant Suffers Multi-Day Outage          *

Updated Version of Prometei Malware Found Infecting 10000 Systems Worldwide          *

Clop Ransomware Gang Starts Extorting GoAnywhere Zero-Day Exploit Victims          *

Researchers Found BATLOADER Malware Abusing Google Ads to Deliver Secondary Payload          *

New Threat Actor UNC2970 Targeting Security Researchers Using New Custom Malwares Families          *

Researcher Found New GoBruteforcer Malware Targeting Servers with phpMyAdmin, MySQL, FTP, Postgres Services          *

CISA Adds Two Vulnerabilities to its Known Exploited Vulnerabilities Catalog          *

Cerebral Healthcare Platform Suffered a Data Breach Affecting 3.18 Million Patients          *

Researchers Found the New Variant of Xenomorph Android Malware Targeting Over 500 Banks          *

Threat Actors Exploiting Remote Desktop Software Vulnerabilities to Spread PlugX Malware          *

New Variant of IceFire Ransomware is Now Actively Targets Linux Systems          *

Attackers Targeted Oracle WebLogic Servers with New ScrubCrypt Crypter          *

A Chinese Hacking Campaign Targets Unpatched SonicWall SMA Appliances to Install Custom Malware          *

AT&T Vendor Hack Results in the Disclosure of 9 Million Customer Records          *

Researchers Reported About Bitwarden's Autofill Feature Flaw that can be Abused to Steal Credentials          *

New Sharp Panda Campaign Targets Southeast Asian Government Entities with Soul Malware          *

Veeam Addressed a High Severity Backup Services Vulnerability Affecting its Backup Infrastructure          *

Fortinet Fixed a Critical RCE Vulnerability Affecting FortiOS and FortiProxy          *

SYS01stealer: A New Attack Targeting Critical Infrastructure Enterprises Using Facebook Ads          *

Transparent Tribe Hackers Employ Trojanized Messaging Apps to Distribute CapraRAT          *

Microsoft Releases a Fix for Outlook Login Issues in Exchange Environments          *

Acer Discloses Breach Following the Sale of 160GB of Data on a Hacking Site          *

The March 2023 Android Update Addresses Two Critical Code Execution Flaws          *

New HiatusRAT Malware Found Targeting DrayTek Vigor Routers for Data Theft          *

Researcher Found Blackfly APT Group Targeting Asian Entities          *

Experts Revealed About a Blind Spot in Google Cloud Platform that Leads to Data Exfiltration Attacks          *

Researcher Published Proof-of-Concept for Microsoft Word's Critical RCE Vulnerability          *

The Sandbox Blockchain Games’ Employee Account Hacked to Send Malware-Linked Emails          *

Threat Actors Using Malicious Microsoft OneNote Attachments to Infect Windows Systems          *

Researchers Found New FiXS ATM Malware Targeting Banks of Mexico          *

Tennessee State University and Southeastern Louisiana Universities Suffers Cyberattack          *

CISA and FBI Warn of Increased Royal Ransomware Attacks          *

Researchers Found Thousands of Websites Compromised Using Stolen FTP Credentials          *

Threat Actors Launch New Cryptojacking Campaign, Targeting Misconfigured Redis Database Servers          *

Microsoft Fixed MMIO Information Disclosure Vulnerabilities in Intel CPUs          *

Experts Uncover a Full-Featured Information Stealer and Trojan in a Python Package on PyPI          *

Scammers Target Trezor Customers with Fake Data Breach Notifications          *

Aruba Networks Patched Six Critical-Severity Vulnerabilities Impacting ArubaOS Versions          *

Iron Tiger Attackers Create New Linux Version of their Custom SysUpdate Malware          *

Cisco Addresses Critical RCE Vulnerability in Web UI of Multiple IP Phones          *

BlackLotus is the First UEFI Bootkit Malware to Bypass Secure Boot Defenses on Windows 11          *

Microsoft Addressed a Global Outage Impacting its Exchange Online Mailboxes          *

Blind Eagle Hackers Targeting Colombian Entities via Spear-Phishing          *

Attackers Using Advanced Hacking Operation SCARLETEEL to Infiltrate Cloud Services          *

Researchers Identified Pair of Security Defects in Trusted Platform Module (TPM) 2.0          *

American TV Giant Dish Network Confirms Ransomware Attack Behind Multi-Day Network Outage          *

CISA Alerts on Active Exploitation of ZK Java Framework RCE Flaw          *

Attackers Promoting New Exfiltrator-22 Post-Exploitation Framework to Spread Ransomware          *

LastPass Releases Additional Information on December 2022 Password Vault Data Breach          *

Researchers Found Mysterious Nevada Group Targeting Thousands of Cloud Servers          *

Attackers Use LinkedIn URL Shortener to Send Amazon Prime Phishing Emails          *

Two Critical Flaws in WordPress Houzez Theme and Plugin are Being Actively Exploited in the Wild          *

U.S. Marshal Service Suffered a Data Breach Followed by Ransomware Attack          *

Ohio’s Largest Oil Producer Encino Energy Targeted by Cyberattack          *

ChromeLoader Campaign Now Distributing Malicious VHD Files Disguised as Game Programs          *

Cyberattacks Target Data Center Organizations to Steal Information          *

News Corp's Data Breach Statement Reveals Hackers were on it's Network for 2 Years          *

Attackers Flood NPM Repository with 15000 Malicious Packages Containing Phishing Links          *

American TV Giant Dish Network Suffers an Outage          *

Stanford University Suffers Data Breach Affecting 897 PhD Applicants          *

Researchers found Unknown Threat Actors Targeting Government Entities with PureCrypter Malware          *

Pirated Final Cut Pro Software Targets macOS for Cryptocurrency Mining          *

Researchers Discover a Cyber Group Employing Lilith RAT and Atharvan Malware to Target the Material Research Industry          *

Dole, a Fruit and Vegetable Company, Hit by a Ransomware Attack          *

Analysts Warn of Increasing Attacks Leveraging Zoho ManageEngine Products          *

Canada’s Second Largest Telecom TELUS Investigating a Possible Data Breach          *

Cisco Addresses High-Severity Vulnerabilities in its Application Centric Infrastructure Components          *

Attackers Exploited R1Soft Server Backup Manager Vulnerability to Deploy Backdoor          *

New S1deload Info-Stealer Malware Targets YouTube and Facebook Accounts          *

Shipping and Medical Laboratories are Targeted by New Threat Actor Hydrochasma          *

Hackers Using Fake ChatGPT Apps to Distribute Windows and Android Malware          *

VMware Fixed a Critical Injection Flaw in Carbon Black App Control          *

CISA Adds Three New Security Flaws to its Known Exploited Vulnerabilities Catalog          *

Security Researchers Release the Proof-of-Concept Exploit for Critical Fortinet's FortiNAC RCE Flaw          *

Researchers Found MyloBot Botnet Infecting Thousands of Systems Everyday          *

Video Game Publisher Activision Suffered a Data Breach          *

Pakistani Threat Actor SideCopy Targeting Indian Government Agencies Using ReverseRAT Backdoor          *

Apple Updated its Security Advisories to Add New Class of Vulnerabilities          *

Researchers Found a New Stealc Malware with Wide Range of Capabilities          *

HardBit 2.0 Ransomware Operators Use Victim’s Insurance Details to Set Up Ransom Payment          *

Samsung Adds New Security Feature to Protect Against Zero-Click Attack          *

Indian Ticketing Platform RailYatri Suffered a Data Breach Affecting 31 Million Customers          *

Attacker Targeted Coinbase Employees in Smishing Attack          *

Attackers Using New Version of OxtaRAT Backdoor to Target Armenian Entities          *

Researchers Found a New WhiskerSpy Backdoor Delivered via Trojanized codec Installer          *

Threat Actors Exploiting Microsoft Exchange ProxyShell Vulnerabilities to Deploy Cryptocurrency Miners          *

Experts Found Attackers Targeting South Korean Journalists with RambleOn Malware          *

Researchers Found New Mirai Botnet Variant Targeting Linux and IoT Devices          *

GoDaddy Reports a Multi-Year Security Breach it Suffered          *

Threat Actors Targeted Microsoft IIS Servers with New Frebniis Malware          *

Fortinet Patches Two Critical Security Flaws in FortiNAC and FortiWeb Product          *

CISA Alerts on Windows and iOS Vulnerabilities Exploited as Zero-Days          *

Louisiana HBCU's Xavier University Reported a Data Breach that Occurred in November 2022          *

Researchers Found an Authenticated RCE Vulnerability in Arris Router          *

Scandinavian Airlines Suffered Cyberattack Exposing Customer Data          *

Burton Snowboards Cancelled Online Orders Following Cyber Attack          *

RedEyes APT Group Using New Malware 'M2RAT' to Steal Victims' Data          *

Splunk Patches High Severity Vulnerabilities in its Enterprise Solution Update          *

New Stealthy Malware 'Beep' is Very Focused in Avoiding Detection          *

Tonga Communications Corporation Suffers Ransomware Attack          *

Hyundai and Kia Car Thefts Rise due to TikTok Challenge          *

Hackers Using New MortalKombat Ransomware and Laplas Crypto-Hijacker Targeting U.S Victims          *

Community Health Systems Suffers Data Breach Affecting One Million Patients          *

Microsoft Exchange Server 2013 Reaches End of Support Lifecycle in April 2023          *

Al-Toufan Hacking Group Targets Websites of Bahrain Airport and News Sites          *

Microsoft Patch Tuesday Security Advisory - February 2023          *

United States’ Largest Bottler Pepsi Bottling Ventures Suffers Data Breach          *

Garrison Women's Health Suffered Data Breach Affecting 4,000 Patients          *

Apple Addressed New Actively Exploited WebKit Zero-Day Vulnerability          *

Cloudflare Detects and Mitigates Largest Recorded DDoS Attack          *

Modified Version of ESXiArgs Ransomware Blocks VMware Host Recovery          *

New Ransomware Group DarkBit Targets Israel's Top Research University Technion          *

Threat Actors Hacked Namecheap’s Email Account to Send Phishing Emails          *

CISA Warns About North Korean Hackers Targeting Healthcare Organizations in Ransomware Attacks          *

CISA Adds Three More Security Flaws to its Known Exploited Vulnerabilities Catalog          *

Multiple Medical Groups in California Suffered a Ransomware Attack          *

Researchers Found Malicious Packages on PyPI and NPM Repositories          *

Play Ransomware Claims Attack on A10 Networks          *

Clop Ransomware Gang Claims Exploiting GoAnywhere Zero-Day Flaw          *

Microsoft Announces Retirement of Microsoft Support Diagnostic Tool (MSDT) and Troubleshooters          *

Researchers Found Multiple Vulnerabilities in Wireless Industrial Internet of Things (IIoT) Devices          *

NewsPenguin Threat Actor Targets Pakistani Entities in Phishing Campaign          *

Russian Hackers Use Fake Crypto Job Offers to Push Enigma Malware          *

Reddit Hit by Cyberattack that Allowed Hackers to Steal Source Code          *

The Largest Canadian Bookstore Indigo Suffered a Cyberattack          *

Researchers Found Russian Hackers Using New Graphiron Malware to Target Ukraine          *

Ross Memorial Hospital in Lindsay Hit by a Cyberattack          *

Munster Technological University (MTU) in Ireland Suffers a Major IT Breach          *

Multiple Document Management Systems Found with Unpatched Security Vulnerabilities          *

Google Released Chrome 110 that Addresses 15 Vulnerabilities          *

Pharmaceutical Distributor AmerisourceBergen Hit by a Cyberattack          *

Researchers Found New Medusa Botnet Targeting Linux Users          *

GuLoader Malware Targets E-commerce Industry Using Malicious NSIS Executables          *

Developers Release an Emergency Patch for GoAnywhere MFTaaS's Actively Exploited Zero-Day Flaw          *

Researcher Disclosed a Flaw Detected in Toyota's Global Supplier Management System (GSPIMS)          *

Google Chrome to End Support for Windows 7,8,8.1, Windows Server 2012, and 2012 R2 Starting February 2023          *

OpenSSL Releases a Patch to Fix High-Severity Vulnerabilities          *

U.S. Cellular's Third-Party Vendor Suffers Data Breach Affecting its 52000 Customers          *

Researchers Disclosed About High-Severity Format String Vulnerability Present in F5 BIG-IP          *

India’s Largest Truck Brokerage Company FR8 Exposes 140GB of Information in a Data Leak          *

TgToxic Malware is Targeting Android Users from Southeast Asia          *

Hackers Mimicking Ukrainian Ministry Officials to Deploy Malware          *

TruthFinder and Instant Checkmate Discloses a Data Breach Affecting 20 Million Consumers          *

A New Wave of Ransomware Attacks Targeting ESXi Systems Using a VMware Flaw          *

Major Internet and Power Outages Struck Bermuda          *

A New Android Banking Trojan is Aimed at Brazilian Financial Institutions          *

A GoAnywhere MFT Zero-day Flaw Enables Server Intrusion          *

Florida Hospital Shuts Down its IT Systems Post a Cyberattack          *

Threat Actors Targeting Vulnerabilities in SugarCRM and Oracle E-Business Suite          *

Jira Software from Atlassian has a Critical Authentication Vulnerability          *

Hackers from Iran's Oil Rig Using a New Backdoor to Steal Data from Government Agencies          *

Hackers Use KoiVM Virtualization Technology to Evade Detection when Installing the Formbook Data Stealer          *

North Korean Lazarus Hacking Group Stole 100GB of Data Via Campaign Named "No Pineapple!"          *

Financial Software Provider, ION Group, has been Hit by a Ransomware Attack Affected Global Markets          *

Cisco Addressed High-Severity Vulnerability in its IOx Application          *

Car Retailer Arnold Clark Suffers a Data Breach Claimed by Play Ransomware          *

Hackers Stolen the Details of 240,000 Skating Customers from Planet Ice          *

Fraudulent Crypto Apps Infiltrate Apple App Store and Google Play Store          *

BlackCat Ransomware Gang Claims an Attack on Solar Industries, an Industrial Explosives Manufacturer          *

Hackers Used Google Fi Data Breach to Carry Out SIM Swap Attacks          *

A Phishing Attack Against Latvia’s Ministry of Defense Linked to Russian Hacking Group          *

Guildford County School Suffers a Cyberattack Resulting in Outage          *

US Telecommunications Company Charter Communication Impacted by Third-Party Data Breach          *

Indianapolis Housing Agency Suffers Ransomware Attack Affecting 212,910 Peoples          *

Hackers Advertising New Golang-Based Malware via Telegram Channel          *

Attackers Stole Encrypted Code-Signing Certificates of GitHub Desktop for Mac and Atom Apps          *

Developers Disagree with a New Vulnerability Reported in KeePass Software          *

QNAP Fixes a Critical Vulnerability in its NAS Devices          *

UK Retail Company JD Sports Suffered a Data Breach Affecting 10 Million Customers          *

A Critical Vulnerability in Lexmark Printers Affects Over 120 Models          *

Researchers Found Gootkit Malware with New Components and Obfuscation Techniques          *

ISC Patched Multiple High-Severity DoS Vulnerabilities in DNS Software Suite BIND          *

Researchers Warn About Multiple Vulnerabilities in Healthcare Software OpenEMR          *

Researchers Found Attackers Using Portable USB Storage Devices to Spread New Variant of PlugX Malware          *

Several Malicious Apps have been Found on Google Play Store with Over 5 Million Downloads          *

Hackers Using New SwiftSlicer Data Wiper to Infect Windows OS          *

A Major Microsoft 365 Outage was Caused by a Change in WAN Router IP Address          *

A Hacker Group Called Sandworm Attacked a Ukrainian News Agency with Five Data Wipers          *

Researcher Found 75,000 WordPress Sites Still Using Vulnerable LearnPress Plugin Version          *

Data Breach Against Two Health Service Organizations Affected 400,000 Individuals          *

BayCare Clinic Suffers Data Breach Due to Tracking Pixel Used by Third Party Vendor          *

German Airport's Websites, Administration Bodies, and Financial Sector Organizations Suffers DDoS Attack          *

New Mimic Ransomware Uses 'Everything' Windows Search Tool to Encrypt Files          *

The CISA of Federal Organizations Breached Using Legit Remote Desktop Software          *

Phishing Campaigns Employ New Python RAT Malware to Target Windows          *

Threat Actors Leveraging Critical Realtek SDK Flaw in Millions of Attacks          *

North Korean Hackers Actively Harvesting Credentials in the Latest Cyberattacks          *

Zacks Investment Research Security Breach Affects 820,000 Customers          *

Researchers Found Threat Actors Abusing Google Ads to Spread Malware          *

DragonSpark Attackers Group Use Golang Malware to Evade Detection          *

Several Microsoft Services Including Teams, Outlook, Store Stop Responding: Microsoft Probes Outage          *

Arm Mali GPU Vulnerability Leads to Arbitrary Kernel Code Execution and Root on Pixel 6 Phones          *

A Vulnerability in Diksha App Exposed Personal Information of Millions of Indian Teachers and Students          *

Zendesk Suffered Data Breach After its Employee Fell into Phishing Attack          *

Security Researchers Disclosed Two Security Flaws in Samsung's Galaxy Store App for Android          *

Apple Backported Security Patches for Zero-Day Vulnerability in Older iPhone and iPad Models          *

Nunavut Energy Supplier Qulliq Energy Corporation Suffered a Cyberattack          *

Roaming Mantis Adds New DNS Changer to its Android Malware to Hack WiFi Routers          *

Costa Rica's Ministry of Public Works and Transport (MOPT) Hit by Ransomware Attack          *

Riot Games’ Development Environment Compromised Via Social Engineering Attacks          *

Drupal Patches Vulnerabilities that Lead to Information Disclosure          *

Chinese Hackers Leverages a Fortinet Flaw as a Zero-day Exploit to Drop Malware          *

Hackers Actively Using OneNote Attachments to Spread Malware          *

Researchers Dismantle Massive Ad-fraud Operation Dubbed 'Vastflux'          *

Over 19,000 End-of-life Cisco Routers Vulnerable to RCE Attacks          *

The Windows 10 KB5019275 Preview Update Comprises 14 Fixes          *

Vulnerabilities of Critical Significance OpenText Enterprise Content Management System Patched          *

Gamaredon Company Utilizes Telegram to Launch Cyberattacks Against Ukraine          *

Hackers May Abuse GitHub Codespaces Functionality to Host and Disseminate Malware          *

Researchers Discovered a New Banking Trojan Hook with RAT Capabilities          *

Researchers Discovered a Critical RCE Flaw Dubbed EmojiDeploy in Microsoft Azure Services          *

T-Mobile Disclosed Data Breach Affecting 37 Million Customers' Personal Information          *

Attackers Hacked 34,942 PayPal Users Accounts in Credential Stuffing Attack          *

Cisco Announced Patches for a High-Severity SQL Injection Vulnerability in Unified CM and CM SME          *

Oracle Addresses 327 Security Vulnerabilities in its January 2023 Critical Patch Update          *

HR Management Platform Myrocket.co Exposed Personal Information of Millions of Job Candidates          *

CERT Coordination Center Disclosed Critical Security Flaws in Netcomm and TP-Link Routers          *

Researcher Found NjRAT Trojan Being Distributed Via New Earth Bogle Campaign          *

MailChimp Suffers a Breach After Attackers Gained Employee Credentials          *

CISA Alerts on Vulnerabilities in Siemens, GE Digital, and Contec ICS Products          *

Researchers Warn of Critical RCE Vulnerability in Zoho ManageEngine Products          *

Nissan North America Suffers Data Breach Due to Poorly Configured Third-Party Vendor Database          *

Microsoft Azure Services were Vulnerable to Unauthorized Access to Cloud Resources          *

Git Patched Two Critical Severity Security Flaws that Allow Hackers to Execute Arbitrary Code          *

Threat Actor ‘Lolip0p’ Uploaded Three Malicious Packages on PyPi Platform          *

ODIN Intelligence's Website Defaced and Breached          *

DNV's ShipManager Software Suffers a Ransomware Attack Affecting Thousands of Shipping          *

Vice Society Ransomware Gang Leaked Sensitive Data from University of Duisburg-Essen          *

Hackers Leaked Sensitive Files From San Francisco Transit Police Online          *

Researcher Found Android TV Box with Pre-installed Malware          *

Cryptocurrency Wallet Provider MetaMask Warns Users of a New Address Poisoning Scam          *

Majority of Cacti Servers Found Unpatched against Critical Vulnerability Resulting in Attacks          *

The Website of Canada's Largest Alcohol Retailer Hacked to Steal Credit Card Information          *

Researchers Found CircleCI Security Incident was Caused by Info-Stealing Malware          *

Hackers Breached NortonLifeLocks's Password Manager Accounts          *

Polyglot Files are Used by Cybercriminals to Distribute Malware Undetected          *

WordPress Plugins Found Vulnerable to Critical SQL Injection Flaws along with PoCs          *

Researchers Found EyeSpy Malware Being Spread Via Trojanized VPN Installers          *

Attackers Exploiting a Patched FortiOS SSL-VPN Zero-day Vulnerability Against Government Networks          *

IcedID Malware Attack Compromised Active Directory Domain          *

Researchers Found Hackers Actively Exploiting a Critical Flaw in Control Web Panel          *

Cisco Discovers Three Vulnerabilities in Asus Router Software          *

Researchers Disclosed SymStealer Security Vulnerability in Google Chrome and Chromium-Based Browser          *

Australia's Fire Rescue Victoria Suffers Data Breach Claimed by Vice Society Ransomware Gang          *

Gootkit Loader Abuses VLC Media Player to Infect Australian Healthcare Organizations          *

Google Released Chrome 109 to Fix 17 Vulnerabilities          *

New Advanced Threat Actor Dark Pink Using Custom Malware Against Government and Military Entities          *

Cisco Warns About Critical Auth Bypass Vulnerability Found in End-of-Life Routers          *

Scattered Spider Threat Actors Employing Vulnerable Intel Drivers to Evade Detection          *

UK's Leading Mail Delivery Service Royal Mail Suffers Severe Service Disruption Following Cyberattack          *

CISA Adds Two More Security Flaws to its Known Exploited Vulnerabilities Catalog          *

Security Researchers Found Cryptographic Weaknesses in Threema Messaging App          *

Zoom Fixes Multiple Flaws Exposing Windows and macOS Users          *

Iowa's Largest School District Des Moines Public School Hit by Cyberattack          *

StrongPity Hackers Targeted Android Users with a Trojanized Version of Telegram App          *

Over 1,300 Fake AnyDesk Sites Found Delivering Info-Stealing Vidar Malware          *

Auth0 Project Releases a Patch for RCE Flaw in the JsonWebToken Library          *

Scammers Abusing Open Redirect on the UK DEFRA Website to Redirect Visitors to Fake Dating Sites          *

Hackers Breached Kubernetes Clusters as Part of a Malware Campaign Via PostgreSQL Database          *

CISA Alerts on High-Severity Vulnerabilities Affecting Hitachi Energy Products          *

Russian Threat Group Cold River Targets Three US Nuclear Research Laboratories          *

Attackers Spreading NetSupport Malware Masquerading as Pokemon Card Game to Infect Users          *

MedStar Mobile Healthcare Suffers Ransomware Attack Affecting 612,000 Customers          *

Threat Actors Using CAPTCHA Bypass Tactics on GitHub in Freejacking Campaign          *

Hackers Bypass Firewalls Restrictions Using CloudFlare Tunnels          *

Air France and KLM Suffers Data Breach; Several Customers Accounts Hacked          *

Fast Food Restaurant Chain 'Chick-fil-A' Suffers Data Breach          *

Rackspace's Customer Data Accessed in Ransomware Attack          *

Microsoft Releases Temporary Patch for ODBC Database Connection Issues          *

A New Variant of Dridex Malware Actively Attacking Windows OS and macOS Systems          *

CircleCI Releases a Security Alert to Warn Users about Cyber Attack          *

Bluebottle Hackers Attacked Banks Using Signed Windows Drivers          *

Database of Cricketsocial.com Exposed Private Customer Data and Administrator Credentials          *

Five Guys Burger Chain Suffers Data Breach Impacting Job Applicants          *

Researchers Found Sudden Increase in SpyNote Android Malware Infection Rates          *

New SHC-Compiled Linux Malware Found Installing Cryptominers and DDoS Bots          *

Multi-Flaw Updates are Released for Qualcomm Chipsets and Lenovo ThinkPad          *

Zoho Patches a Critical SQL Injection Vulnerability in its ManageEngine Products          *

Multiple Car Brand's API Flaws Exposed Owner's Personal Data          *

Fortinet Released Patches for High-Severity Vulnerabilities Found in FortiADC and FortiTester          *

LockBit Ransomware Group Claims Ransomware Attack on Los Angeles Housing Authority          *

Royal Ransomware Group Claims Data Breach Attack on Queensland University of Technology          *

Threat Actors Using Stolen Information of Colombian Bank Customers as Lures in Phishing Emails          *

Synology Fixed Critical Vulnerability in VPN Plus Server Software          *

PyTorch Admins Reveals About Malicious PyTorch-nightly Dependency          *

Bristol Community College Hit by Ransomware Attack          *

A Telekom Malaysia Company Suffers a Data Breach Affecting Over 250,000 Customer Accounts          *

Scripps Health Agrees to Pay $3.5 million to the Victims Affected in the 2021 Data Breach          *

Jakks Pacific Toy Production’s Servers Suffers Ransomware Attack, Hive and BackCat Group Leak Data          *

Royal Ransomware Group Claims Cyber attack on Iowa’s Public Broadcasting Network          *

The LockBit Ransomware Gang Claims Cyberattack on Port of Lisbon in Portugal          *

CISA Warns of Vulnerabilities Impacting TIBCO Software's JasperReports Product          *

A Canadian Mining Firm Shuts Down a Mill After it was Attacked by Ransomware          *

WordPress Sites are Being Backdoored by New Linux Malware Using 30 Plugin Exploits          *

Cert-In Warns Indian Users on LastPass Data Breach and NetApp OnCommandInsight Vulnerability          *

Anonymous Twitter User Published 10,000 API Keys of Crypto Trading Platform 3Commas          *

CISA Warns of Several Vulnerabilities in Rockwell Automation Controllers          *

Royal Ransomware Gang Claims Responsibility for Cyberattack on Telecom Company Intrado          *

NETGEAR Fixes a High Severity Vulnerability Affecting Multiple Models of its Wi-Fi Routers          *

Hackers Moved their Initial Infection Vector Towards Malicious Excel Add-in Files          *

Attackers Abusing Google Ads to Spread Trojanized Software Products          *

Hive Ransomware Claims Attack on Louisiana Hospital Impacting 270,000 Patients          *

Citrix Patches Critical Severity Vulnerabilities in its ADC and Gateway Servers          *

Sargent and Lundy Energy Firm Suffered a Data Breach that Impacted Personal Information of 6,900 Individuals          *

A Hacker Claims to have Stolen Data of 30 Million Indian Railways Users          *

New YouTube Bot Malware Found Stealing Sensitive Data          *

North Korean Lazarus APT Group Targeting NFT Investors in Phishing Campaign          *

BlueNoroff Threat Actors Adopted New Techniques to Bypass Windows MotW Protection          *

Researchers Found a Password Vulnerability in ZyXEL Indoor Routers          *

BTC.com Suffers a Cyberattack Losing Cryptocurrency Worth $3 Million          *

New GuLoader Malware Found Adopting New Anti Analysis Techniques to Evade Detection          *

Hackers Targeted Bitkeep Wallet Users in Cryptojacking and Drained $8M in Assets          *

Researchers Warn of Critical Linux Kernel Vulnerability Affecting SMB Servers Enabled with ksmbd          *

Cincinnati State Technical Community College Suffers a Cybersecurity Breach          *

Researchers Disclosed a High-Severity Flaw in Kyverno’s Container Image Signature Verification Mechanism          *

Researchers Discovered Critical Authentication Bypass Vulnerability in Ghost CMS          *

Microsoft Silently Fixed Cross Tenant Network Bypass Flaw in its Azure Container Service          *

Researchers Uncover W4SP Stealer in Multiple PyPI Packages Under Various Names          *

Threat Actors Deploy New Info-stealer Malware to Infect Software Pirates          *

Hackers Actively Exploit WordPress Gift Card Plugin with 50K Installations          *

Researchers Warn Indian Officials About Kavach 2FA Phishing Attacks          *

Widespread 2FA Bypass Attacks Hit Comcast Xfinity Accounts          *

LastPass Suffers a Data Breach Exposing Customer Vault Data          *

FIN7 Hackers Use an Auto-Attack Platform to Breach Vulnerable Exchange Servers          *

A Hacker Leaked Customer Data of Betting Firm BetMGM on Hacking Forum          *

Researchers Disclosed Multiple High-Severity Flaws in Password Management Solution Passwordstate          *

The Zerobot Botnet is added with New Capabilities and Exploits New Vulnerabilities          *

Researchers Discovered Banking Trojan 'GodFather' Targeting 400 Banks and Crypto Exchanges Applications          *

Hackers Gained Profit from Hacking JFK Airport's Taxi Dispatch System          *

Hackers Targeted Telecom and Government Systems with Raspberry Robin Worm          *

Attackers Hacked Private GitHub Repositories of Okta Company          *

Researchers Found Malicious Packages with 'W4SP' Info-Stealer Malware on PyPi Platform          *

Hackers Targeting Brazilian Banking Users with New Android Trojan BrasDex          *

Security Researchers Suspect KMSdBot Botnet Offering DDoS-for-Hire Services for Attackers          *

Researchers Found New Microsoft Exchange Exploit Used by Play Ransomware to Breach Servers          *

Phishing Sites Distributing DarkTortilla Malware          *

Researchers Found Fake Malicious ‘SentinelOne’ Package on PyPi Repository          *

Meta Platforms Took Down Fake Accounts Operated by Nearly 200 Spyware Vendors Across the Globe          *

Play Ransomware Gang Claims Cyberattack on Hotel Chain 'H-Hotels'          *

Microsoft Reclassified a Windows Vulnerability as Critical Severity          *

Department of Healthcare and Human Services Reports Data of 254K Patients Being Compromised          *

Colombian Energy Company EPM Hit by BlackCat Ransomware Attack          *

CRM Platform SevenRooms Suffers Data Breach Exposing Customers’ Information          *

Samba Releases Security Updates to Address Multiple High Severity Vulnerabilities          *

After Being Disrupted by Google, Glupteba Malware is Back          *

FBI Warns About BEC Attacks Targeting Food Shipments          *

CISA Adds Critical Veeam Backup and Replication Vulnerabilities to its Known Exploited Vulnerabilities Catalog          *

Microsoft Warns New Minecraft DDoS Malware Infecting Windows, Linux and IoT Devices          *

Researchers found a New MirrorStealer Malware Targeting Japanese Politicians          *

Ukrainian Government Networks Breached Using Trojanized Windows 10 Installers          *

New Phishing Campaign Uses Facebook Posts to Evade Email Security          *

Hacker Posted Social Blade's User Data on Hacking Forum Stolen in Data Breach          *

5.7M Gemini Users’ Personal Information Leaked in Third-Party Vendors’ Data Breach Incident          *

FuboTV Suffers Streaming Outage Due to Cyberattack          *

Australia's TPG Telecom Suffers a Data Breach Affecting 15,000 Customers          *

Ransomware Hackers Using Microsoft-Signed Drivers to Access Systems          *

FBI Seizes 48 Booter or Stresser Online Platforms that Used for DDoS Attacks          *

Unknown Threat Actors Uploaded 144,000 Phishing Packages on NuGet, NPM, and PyPi Open-Source Package Repositories          *

Microsoft Fixes the LSASS Memory Leak Flaw Affecting Windows Servers          *

VMware Releases Patches for Critical Security Vulnerabilities in ESXi and vRealize          *

Microsoft Patch Tuesday Security Advisory - December 2022          *

Stalkware Application Xnspy Found Stealing Data from Thousands of iPhone and Android Devices          *

A New Python Backdoor Allows Hackers to Access Compromised VMware ESXi Servers Remotely          *

The Global Pravasi Rishta Portal of the Indian Foreign Ministry Leaks Passport Information          *

Apple Addressed New Actively Exploited Zero-Day Vulnerability in its Security Updates          *

LockBit Ransomware Gang Claims Ransomware Attack on Finance Department of California          *

Hive Ransomware Group Claims Attack on Knox College          *

Fortinet Released Emergency Patch for Already Exploited FortiOS SSL-VPN Vulnerability          *

Nearly 360,000 Individuals' Information was Affected in Ontario COVID-19 Vaccine Data Breach          *

A Cryptocurrency Mining Campaign Infects Linux Users with Go-Based Malware Called CHAOS          *

Uber Suffers a Data Breach After an Attack on its Third-Party Vendor          *

An Iran-Backed MuddyWater Campaign Abuses the Syncro Remote Administration Tool          *

Australian Telecom Firm Telstra Apologizes for Data Leak that Exposed 130,000 Customer's Data          *

Air Gapped PCs Highly Vulnerable to Data Theft via Power Supply Radiation          *

Rackspace Issues a Phishing Warning Following a Ransomware Incident          *

Cisco Warns Companies of High Severity Unpatched Flaw Affecting IP Phones Firmware Globally          *

Researchers Disclose a Novel Attack Method to Bypass Popular Web Application Firewalls          *

An Updated TrueBot Variant Exploiting the Netwrix Auditor Bug and the Raspberry Robin Worm          *

Researchers Discover Drokbk a New Malware that Leverages GitHub as a Dead Drop Resolver          *

Iranian Hackers Target the Diamond Industry with Fantasy Data-Wiping Malware          *

Formbook Malware is Distributed via Trojanized OneNote Document          *

Hive Ransomware Group Targeted French Sports Brand Intersport          *

CommonSpirit Health Suffered Ransomware Attack that Exposed Data of 623,000 Patients          *

Cisco Discloses a High Severity Vulnerability Affecting its IP Phones 7800 and 8800 Series          *

New Zerobot Malware Leveraging more than 21 Flaws in Zyxel Firewalls, F5 BIG-IP, D-Link Routers          *

Compromised WordPress Plugins Redirect Website Visitors to Push Notification Scam          *

Attacker Tried Over 6,000 Attempts to Hack ICMR Server          *

The Vice Society Ransomware Gang Targeted more than 30 Schools in 2022          *

Hackers Breached CloudSEK's Confluence Server Using Stolen Employee Credentials          *

Attackers found Vulnerability in SiriusXM Platform to Unlock and Start Cars Remotely          *

Amnesty International Canada was Allegedly Targeted in Cyberattack by Beijing          *

Researchers Discovered Largest Dark Web "In The Box"          *

Antwerp's Digital Partner Suffered a Cyberattack Disrupting the City's Digital Services          *

VTB Bank, Russia's Second Largest Financial Institution, Suffers Massive DDoS Attack          *

Hackers Selling Personal Data Of 150,000 Patients of Tamil Nadu's Sree Saran Medical Centre          *

The André-Mignot Teaching Hospital in France Suffers a Ransomware Attack          *

A Chain of Three Harmless Linux Vulnerabilities could Allow Hackers to Gain Full Root Privileges          *

A Vulnerability in IBM Cloud Databases for PostgreSQL Allows Unauthorized Access          *

Researchers Found Malicious Android Apps with More than Two Million Downloads on Google Play Store          *

New Zealand Health Insurer Accuro Suffered a Cyberattack Affecting 34,000 Customers’ Data          *

North Korean Hacking Group Using New and Fake Crypto Apps to Breach Networks and Steal Cryptocurrency          *

Google Fixes a Ninth Zero Day Vulnerability in its Chrome Browser Update          *

The Previously Undocumented Data Wiper CryWiper Masquerades as a Ransomware          *

Attackers Targeting Unpatched Redis Servers to Drop New Redigo Backdoor          *

Multiple Platform Certificates Used by Android OEM Device Vendors used to Digitally Sign the Malware          *

Colombian Healthcare Provider Keralty Suffers Ransomware Attack that Disrupts its Operations          *

The Schoolyard Bully Malware Infected more than 300,000 Devices to Harvest Facebook Account Credentials          *

New DuckLogs Malware-as-a-Service Found to Be Used By Thousands of Cybercriminals          *

Researchers Found Some NPM Tools Fail to Display Security Flaws          *

NVIDIA Patches Critical GPU Display Driver Vulnerabilities in Windows and Linux          *

North Korean Attackers Using New Dolphin Backdoor to Spy on South Korean Targets          *

Google Released Chrome 108 to Fix High-Severity Memory Safety Vulnerabilities          *

Hackers Breached GoTo's Dev Environment and Cloud Storage; Impacting its Affiliate 'LastPass'          *

Researcher found Outdated OpenSSL used in Dell, HP, and Lenovo Devices          *

Hive Ransomware Claims Responsibility for Attack on Guilford College in North Carolina          *

Attackers using Trigona Ransomware in Increasing Worldwide Attacks          *

Malicious Android App 'Symoo' Detected with 100,000 Installs on Google Play Store          *

Lanner Patched Over a Dozen BMC Firmware Vulnerabilities          *

Southampton County in Virginia Disclosed Theft of Individuals' Personal Information Following Ransomware Attack          *

Acer Releases Patches for High Severity Vulnerability Allowing to Disable Secure Boot          *

Scammers Used FC Barcelona's Website Domain for Third-Party Fraud Campaign          *

Over 5.4 Million Twitter Users' Records are Freely Available on a Hacking Forum          *

Researchers Discovered A Critical Remote Code Execution Vulnerability in Windows Internet Key Exchange          *

A Ransomware Group Aimed at Belgian Municipality But Hits the Police Instead          *

New Ransomware Attacks Targeting Ukraine Organizations Linked to Russian Sandworm Group          *

Google Patches a Zero-Day Vulnerability in its Chrome Browser Update          *

The Vice Society Ransomware Group Claims Responsibility of Attack on Cincinnati State College          *

Hackers Target Windows Gamers with Miners and Info-Stealers via Fake MSI Afterburner          *

Researchers Detected New Stealthy Variant of RansomExx Ransomware Developed Using Rust Programming Language          *

Hackers Included Spyware in New Variants of SoftVPN and OpenVPN Trojan Software          *

Millions of Android Devices Require Patches for ARM Mali GPU Vulnerabilities          *

Ducktail Threat Actors Targeting Facebook Business Accounts via WhatsApp          *

Security Researchers Disclosed a Cross-Tenant Vulnerability in AWS AppSync Service          *

Pro-Russian Hackers Claim Responsibility for DDoS Attack on European Parliament Website          *

Delhi's AIIMS Server Suffers a Cyberattack Disrupting Patient Care Services          *

Issue in Sophos and McAfee Scanning Engines results in Bypass of Cisco Secure Email Gateway Filter          *

Researchers found Sudden Spike in World Cup-Themed Phishing Emails          *

The Sharkbot Banking Trojan Distributed via Fake Android File Managers          *

Threat Actors Targeted Discontinued Boa Web Servers to Infiltrate Energy Organizations          *

More than 1500 Mobile Applications Leaking Algolia API Keys          *

An Info-Stealing Google Chrome Extension 'VenomSoftX' is Used to Steal Cryptocurrency and Passwords          *

Researchers Found Cybercriminals Increasingly Adopted Aurora Infostealer Malware in their Operations          *

Attackers Trying to Bypass 2FA of Crypto Exchange Platforms Via Team Viewer and Fake Support Chat          *

Hacking Group Daixin Team Claims to have Stolen 5 Million AirAsia Passengers' and Employees' Data          *

DraftKings’ Customers Suffer Credential Stuffing Attack Resulting in Loss of $300,000          *

New AXLocker Ransomware Group Stealing Discord Accounts of Infected Users          *

Attackers Using Google Ads to Spread Royal Ransomware          *

New Variants of LodaRAT Malware are Being Deployed in Conjunction with Other Sophisticated Malwares          *

Hackers Employing a Windows Zero-day Vulnerability to Deploy QBot Malware          *

Indian Central Depository Services Limited Reveals About its Network Being Compromised by Malware          *

Over 22000 Students Targeted in Credential Phishing Attack Impersonating Instagram          *

Critical Omron PLC Vulnerability Exploited by Sophisticated Malware Targeting Industrial Control Systems          *

Atlassian Fixes Critical Vulnerabilities in Crowd Server and Bitbucket Server          *

Samba Addresses Vulnerability Resulting in DoS Attacks and Remote Code Execution          *

Chinese Hackers Deliver Custom Malware to Government Organizations via Google Drive          *

Previously Unknown ARCrypter Ransomware Expanding its Attacks Worldwide          *

Researchers Discovered a New Version of RapperBot Malware Targeting Gaming Servers          *

Researchers Discovered a Phishing Kit Impersonating Well-Known Brands to Target US Consumers          *

Attackers Abusing a DLL Hijacking Flaw in the Windows 10 Control Panel to Infect Systems          *

Disneyland Cybercrime Group Uses Punycode to Spoof Popular Bank Brands`          *

F5 Addresses Several Security Flaws and Issues in its Products          *

CISA Revealed About Federal Agency Being Hacked by Iranian Hackers Using Log4Shell Exploit          *

Pro-Russian Hackers Claim Responsibility for DDoS Attack on FBI Websites          *

Mozilla Announced the Release of Firefox 107 with Patches of High Impact Vulnerabilities          *

Hundreds of Amazon RDS Instances Leak Users’ Personal Information          *

PCspooF Vulnerability in TTE Affecting Network Technology used in Aircraft and Spacecraft          *

State-Sponsored Chinese Hacking Group Targeting Government and Defense Organizations in Asian Countries          *

Security Researchers Disclosed Details of Security Flaws in Zendesk Analytics Service          *

Spotify's Backstage Developer Platform is Vulnerable to Critical RCE Flaw          *

Researchers Discovered New Version of DTrack Backdoor Targeting European Organizations          *

Researchers Discovered New KmsdBot Malware Mining Cryptocurrency and Launching DDoS Attacks          *

'Fangxiao' A Malicious For-Profit Group Uses 42,000 Sites for Brand Impersonation Scheme          *

Researchers Identified an Information Disclosure Vulnerability in Aiphone Intercom Products          *

Russian Hackers Infected Ukrainian Organizations with New Somnia Ransomware          *

New Phishing Campaign Targeting Spain Taxpayers to Steal Bank Details          *

Cisco Addresses 33 Vulnerabilities in its Enterprise Firewall Products          *

Foxit Patches Four Code Execution Vulnerabilities in its PDF Reader          *

A New Extortion Scam Threatens to Leak Websites Sensitive Information Globally          *

A 24 Hour Outage has Rendered Royal Mail Tracking Unavailable          *

Sobeys a Canadian Food Retail Giant Hit by Black Basta Ransomware          *

New Android Spyware BadBazaar Linked to Chinese Cyberspies          *

Two Malicious Android Apps Spotted Distributing Xenomorph Banking Trojan          *

US Confiscates 18 Domains Used for Recruiting Money Mules          *

New Version of IceXLoader Malware is Dropped Via Phishing Emails          *

Threat Group ‘Worok’ Concealing New Information-Stealing Malware in PNGs          *

Android Spymax RAT Malware Targets the Indian Defense Forces          *

Lenovo Fixes High Severity Vulnerabilities Allowing Attackers to Deactivate UEFI Secure Boot          *

New Information-Stealing Malware StrelaStealer Targeted Outlook and Thunderbird Accounts          *

Intel and AMD Addresses Multiple Vulnerabilities in its Patch Tuesday Updates          *

SAP Released Patches for Critical BusinessObjects and SAPUI5 Vulnerabilities          *

Massive Google SEO Poisoning Campaign Hacks 15,000 Sites          *

LockBit 3.0 Ransomware Distributing Amadey Bot Malware Via Phishing Emails          *

Cloud9 Chrome Botnet Using Malicious Extensions to Remotely Control Victim's Browsers          *

Citrix Patches a Critical Authentication Bypass Vulnerability in its ADC and Gateway Product          *

VMware Patches Three Critical Vulnerabilities in Workspace ONE Assist          *

Siemens and Schneider Electric Addresses Several Security Vulnerabilities in its Products          *

SocGholish Operators Expands its Malware Staging Infrastructure to Counter Defenders          *

Cyberattack on PNORS Technology Leads to the Breach of Victorian School Students' Health Records          *

The Largest Canadian Food Company Maple Leaf Foods Encountered Cyberattack          *

The Robin Banks Phishing-as-a-Service (PhaaS) Platform Back to Steal Bank Accounts          *

Hackers Abusing Microsoft Dynamic 365 Customer Voice in Phishing Attack          *

CISA Warns About Critical Vulnerabilities in Three ICS Software          *

Apple Releases Xcode Update to Patch Git Vulnerabilities          *

Verified Twitter Users are Targeted by New Phishing Attack          *

New Crimson Kingsnake Group Impersonating Law Firms in Business Email Compromise BEC Attacks          *

Indian Government Employees are Being Targeted by a New Malware Campaign          *

Users Across the Globe are Facing Issues in Accessing Twitter          *

RomCom RAT Malware Distributed via Websites Impersonates SolarWinds NPM, KeePass, Veeam Software          *

LockBit Ransomware Gang Claims Cyberattack Against German Manufacturing Company Continental          *

Cisco Fixed High-Severity Vulnerabilities in Email, Identity, and Web Security Products          *

ALMA Radio Telescope Suffers Cyberattack Forcing it to Suspend All Operations          *

Splunk Addresses 9 High-Severity Vulnerabilities in its Enterprise Product          *

Fortinet Fixed 6 High-Severity Vulnerabilities in its Multiple Products          *

Researchers Disclosed Multiple Vulnerabilities in Checkmk's IT Infrastructure Monitoring Software          *

Threat Actor Distributing Malware Via Hundreds of U.S. News Sites          *

Malicious PyPI Packages Found Dropping 'W4SP' Info-Stealing Malware          *

Infamous Emotet Malware Resumed its Operation After Five-Month Break          *

Vodafone Italy Disclosed Data Breach After their Reseller FourB Hit by Cyberattack          *

Hacker Steals 130 GitHub Repositories from Dropbox in Data Breach          *

Malicious VPN Application Infects Android Users with SandStrike Spyware          *

Malicious Android Apps Downloaded Over One Million Times Spotted on Google Play Store          *

OpenSSL Releases Patches to Fix Two High Severity Vulnerabilities in Open-Source Library          *

Microsoft Fixed a Critical RCE Vulnerability Detected in Azure Cosmos DB Jupyter Notebooks          *

Cyberattack on Air New Zealand Compromises Multiple User Accounts          *

Threat Actors Abusing Antivirus Software to Drop LODEINFO Malware Targeting Japanese Organizations          *

Australian Defense Contractor Suffers Ransomware Attack          *

Researchers Discovered a Security Vulnerability in Galaxy Store App for Samsung          *

Label Printing Giant Multi-Color Corporation Confirmed Data Breach          *

Bed Bath & Beyond Inc Suffers a Data Breach          *

U.S. Bank Reveals Data Leak Affecting 11,000 Customers          *

See Tickets Suffers a Major Card Data Breach Lasting for 2.5 Years          *

Michigan Medicine Suffered Data Breach Impacting 33K Patients          *

ConnectWise Fixes the RCE Flaw that Left Thousands of Servers Vulnerable to Attacks          *

Twilio, A Cloud Communications Company Discloses Another Data Breach          *

Google Patches the Seventh Zero-Day Vulnerability in its Chrome Browser          *

Cyberattack on Aurubis Forces IT Systems to Shut Down          *

Researchers Discover Android Malware Droppers on Google Play with 130K Installations          *

Threat Actors using Clop Ransomware to Encrypt Devices Previously Infected with Raspberry Robin Worm          *

The Latest Fodcha Botnet Featuring Ransom Demands has Emerged          *

Drinik Android Malware Impersonating Official Tax Management Tool Targeting Users of 18 Indian Banks          *

Australian Clinical Labs Disclosed Data Breach After Months of Data Leak Post          *

Microsoft Fixed Sync Issue in the Vulnerable Driver Blocklist          *

Medibank Confirms Hackers had Accessed the Customer's Personal Information During Ransomware Attack          *

New Version of FurBall Android Malware Used for Spying Iranian Citizens          *

Advocate Aurora Health (AAH) Suffers Data Breach that Exposing Data of 3 Million Patients          *

Ursnif Malware Switches from Stealing Bank Accounts to Gaining Access to Computers          *

Hackers Exploit Microsoft Azure SFX Vulnerability to Hijack Service Fabric Clusters          *

Apache Patched RCE Vulnerability in its Open-Source Commons Text Library          *

WordPress Fixed 16 Vulnerabilities with Security Update 6.0.3          *

Researchers Uncovered a Previously Undetected PowerShell Backdoor Infected Over 60 Users          *

Microsoft Suffers Data Breach Due to Misconfigured Server that Exposes Customers’ Information Online          *

Cobalt Strike Releases Out-of-Band Security Update for Critical RCE Vulnerability          *

DiceyF Attackers Deploying GamePlayerFramework in Attacks Against Asian Casinos          *

Hackers Targeted Hong Kong Government Agency's Network in a Year-Long Campaign          *

Ransom Cartel Ransomware Shares Similar Traits with the Notorious REvil Ransomware          *

Black Basta Ransomware Gang Employing Qakbot to Drop Brute Ratel C4 Framework          *

MyDeal Suffers Data Breach where 2.2 Million Customers' Personal Information was Stolen          *

Australia's Largest Health Insurance Company Medibank Suffers Ransomware Attack          *

A Zero-Day Vulnerability in Windows Mark of the Web Receives Free Unofficial Patch          *

End of Life for Over 45,000 VMware ESXi Servers          *

Venus Ransomware Encrypting Windows Devices via Publicly Exposed Remote Desktop Services          *

New PHP Version of Ducktail Malware Targeting Facebook Business Accounts          *

Zimbra Zero-Day Vulnerability Leveraged to Compromise Over 900 Servers          *

Microsoft Researchers Discovered A New Prestige Ransomware Targeting Organizations in Ukraine and Poland          *

Colombian Govt Suffers Data Leak Exposing Secret Australian Police Agents          *

India's Largest Electric Utility Company Tata Power Hit by Cyberattack          *

Microsoft Office 365 Could Expose the Content of Messages due to Vulnerable Email Encryption Mode          *

Hackers Distributing Android Banking Malware Copybara Via TOAD Tactics          *

Magniber Ransomware Target Windows Users Via Fake Antivirus and Security Updates          *

A Critical Flaw in Siemens SIMATIC PLCs Allows Hackers to Steal Cryptographic Keys          *

Cloudflare Mitigates Largest DDoS Attack Aimed at Gaming Platform Minecraft's Server          *

Windows, MacOS, and Linux Systems Targeted by New Alchimist Attack Framework          *

Scammers Abusing Google Forms in New Covid-19-Themed Phishing Campaign          *

Unofficial WhatsApp Application 'YoWhatsApp' is Stealing User's Account          *

Hackers Creating Typo-Squatted Clone Packages to Trick Developers for Supply Chain Attacks          *

Aruba Addressed Critical RCE and Authentication Bypass Bugs in its EdgeConnect Enterprise Orchestrator          *

POLONIUM Threat Group Uses Creepy Malware in Cyber Espionage Against Israeli Organizations          *

Microsoft Exchange Servers Targeted to Drop Lockbit Ransomware          *

Researchers Warn of a Critical RCE Vulnerability in VM2 Sandbox Library          *

Adobe Fixes Critical Flaws in ColdFusion, Adobe Commerce and Other Products          *

Microsoft Patch Tuesday Security Advisory - October 2022          *

Caffeine, a Phishing-as-a-Service Platform Makes it Easy to Launch Phishing Attacks          *

Researchers Disclosed New Emotet's Delivery and Evasion Techniques          *

Toyota's Access Key Mistakenly Exposed on GitHub Leaking Customer Data          *

Pro-Russian Hackers Take Down US Airports' Websites with Large-scale DDoS Attacks          *

Android Security Updates for October Patches Critical Vulnerabilities          *

Hackers Targeting Solana Cryptocurrency Owners via Fake Phantom Security Update          *

Dark Web Carding Market BidenCash Leaks Details of 1.2 Million Stolen Credit Cards          *

Source Code of Intel Alder Lake's UEFI Firmware has been Leaked          *

Callback Scammers Strengthen their Social Engineering Techniques          *

Taiwanese Chipmaker 'ADATA' Denies RansomHouse's Recent Data Breach Claims          *

Fortinet Patches Critical Auth Bypass Flaw in FortiGate Firewalls and FortiProxy Web Proxies          *

Threat Actors Actively Exploiting a Zero-Day RCE Vulnerability in Zimbra Collaboration Suite          *

Eternity Hackers Group Offering New LilithBot Malware-as-a-Service Via Telegram Channel          *

Newly Patched macOS Archive Utility Vulnerability Details Released          *

Telstra's Third-Party Platform Suffers a Breach Exposing its Employee Information          *

A New Bug found in Linux Kernel 5.19.12, Which Damages Intel Laptop Displays          *

Hackers Breach the Tucson City's Network and Stolen the Information of Over 125,000 People          *

Researchers Discovered New 'Maggie' Backdoor Targeted Several Microsoft SQL Servers          *

Consumer Banking Company Chase Bank Suffers Outage which Affects UK Customers          *

Live Chat App Comm100 Trojanized to Spread Malware in Supply Chain Attack          *

US Alert: Hackers Using New Custom Malware to Steal Data from US Defense Organization          *

Hackers Injecting Malicious JavaScript on Scammer's Crypto Sites to Steal Crypto Funds          *

A Popular Chinese-language YouTube Channel found Distributing Malicious Tor Browser Installer          *

A High-severity Vulnerability in Packagist PHP Repository could Lead to Supply Chain Attack          *

Cheerscrypt a Linux-Based Ransomware Linked to Chinese Hackers          *

Researchers Warn Microsoft Exchange Zero-Day Mitigation can be Bypassed for On-premise Servers          *

Hackers Selling Fake Microsoft Exchange ProxyNotShell Exploits on GitHub          *

BlackCat Added NJVC to its Data Leak Site          *

Threat Actors Abusing Web Browser App Mode to Create Desktop Phishing Pages          *

After Data Leak, Retail Chain 'DNS' Confirmed Data Breach          *

CISA Adds Critical Bitbucket Server and Microsoft Exchange Vulnerabilities to Known Exploited Vulnerabilities (KEV) Catalog          *

Hackers Exploiting Vulnerable WordPress Websites to Inject SolarMarker Malware          *

Unknown Attacker Hacked Shangri-La Hotel Group's Customer Database          *

Researchers Discovered Several Fake LinkedIn Profiles for CISOs of Large Organizations          *

Cisco Fixed Several High-Severity Vulnerabilities in its Networking Software          *

Lazarus Attackers Using New BYOVD Technique in Cyberattacks          *

Scammers Dropping Cobalt Strike Beacons via Fake US Govt Job Offers          *

Microsoft Confirms New Exchange Zero-Day Flaws are Being Exploited in Wild          *

Microsoft Discovered Lazarus Hackers Weaponizing Open-Source Software          *

Indian Government Swachh City Platform Suffers Data Breach          *

Researchers Discovered New Zero-Day Vulnerabilities in Microsoft Exchange Being Actively Exploited in Attacks          *

Hackers Using New Malware to Backdoor VMware ESXi Servers          *

Hackers are Exploiting Ethernet VLAN Stacking Flaws to Launch DoS, MiTM attacks          *

Researchers Uncovered New Secret Attack Campaign Targeting Military Contractor Companies          *

World's Leading Business Media Brand Fast Company Hacked by Attackers          *

New Chaos Malware Launches DDoS Attacks on Windows and Linux Devices          *

The Internal Revenue Service Warned American about Huge Rise in Smishing Attacks          *

Cybercriminals Distributing macOS Malware via Lucrative Job Offers Impersonating Crypto.com          *

Optus Suffers a Breach Leading to Release of 10,200 Customer Records          *

NullMixer Malware Distributed via Malicious Websites Mimicking Cracked Software          *

Hackers Distributing Graphite Malware Using New Code Execution Technique          *

New Info-stealing Malware Erbium Target Popular Video Games Via Fake Cracks and Cheats          *

Tibetan Entities Targeted by Chinese Hacker using New LOWZERO Backdoor          *

WhatsApp Patched 2 Major Zero-Day Bugs that Affect Both iOS and Android Versions          *

Researchers Found 'Scylla' Ad-fraud Campaign on Google Play Store and Apple Store          *

An Attack Targeting Universities, Telcos, and ISPs is Discovered by Researchers          *

Android Users Targeted with Info-stealing Malware Via Fake Indian Banking Rewards Apps          *

Several npm Packages Published by Crypto Exchanges have been Compromised          *

Microsoft Patched Spoofing Vulnerability in Microsoft Endpoint Configuration Manager          *

Microsoft SQL Servers Targeted in New TargetCompany Ransomware Attacks          *

A New RCE Firewall Bug Exploited by Attackers in Sophos Firewall; Hotfix Available          *

A Worldwide Outage Affects YouTube Live Streams          *

GitHub Users Targeted with New Phishing Campaign          *

Threat Actors Actively Exploiting Critical Magento Vulnerability          *

Threat Actor Hacked Microsoft Exchange Servers to Spread Phishing Campaign          *

CISA adds Critical ManageEngine RCE Bug to its Known Exploited Vulnerabilities Catalog          *

Threat Actors Using LinkedIn Smart Links to Evade Detection in Phishing Campaign          *

Over 39,000 Unauthenticated Redis Servers are Exposed to the Internet          *

CISA Warns of Multiple Vulnerabilities Detected in the Dataprobe's Power Distribution Units          *

15-year Old Python Vulnerability Affects more than 350,000 Open-source Repositories          *

Oracle Addressed a Critical Vulnerability in its Cloud Infrastructure          *

Hackers Steal $162 Million Worth of Digital Assets from Crypto Trading Firm Wintermute          *

Attackers Hacked 2K Game's Support Platform to Infect Players with Malware          *

Security Company Imperva Stopped a Long-lasting 25.3 Billion Request DDoS Attack          *

Hive Ransomware Claimed Responsibility for Cyberattack on New York Racing Association          *

Attack on Financial Technology Company Revolut Exposes 50,000 Users' Data          *

Microsoft and VMware Alert on Chromeloader Malware Campaign          *

U.S. Government Agencies Targeted with Better-Crafted Lures in Phishing Attacks          *

American Airlines Suffered a Data Breach Exposing Employee and Customer Data          *

Uber Accuses Contractor for Breach, Claims Lapsus$ Threat Group Behind the Cyberattack          *

LastPass's Development Systems were Accessed for Four Days in a Data Breach          *

Hacker Claims to have Stolen GTA 5 and 6 Source Code and Assets          *

Security Researchers Found New Attacks of Notorious Hacking Group TeamTNT          *

North Korean Attackers Targeted Media Companies with Malicious PuTTY SSH Client          *

BlackCat and Quantum Ransomware Groups Using Emotet Malware to Deploy Payloads          *

A Ransomware Attack Results in a Data Breach at New York Ambulance Service          *

A Hacker Sells the Personal Information of 219,000 Starbucks Customers in Singapore          *

Organizations Must Patch Stuxnet Vulnerabilities, Says CISA          *

Uber's Internal Systems Breached Exposing Vulnerabilities Reports          *

Threat Actors Distributing New Malware Bundle via YouTube          *

Akamai Mitigates Another Record-Breaking DDoS Attack in Europe          *

Hive Ransomware Takes Responsibility for the Attack Against Bell Technical Solutions          *

Phishing Campaign Targeting Greek Taxpayers to Steal Victims' Passwords          *

Scammers Using Queen’s Death to Steal Users' Microsoft Credentials in Phishing Attacks          *

Lenovo Addressed Several BIOS Vulnerabilities in September 2022 Security Updates          *

FBI Warns on Hackers Targeting Healthcare Payment Processors          *

Hackers Target Nuclear and Genome Researchers Via Multi-Persona Impersonation Phishing Technique          *

Hackers Compromise Software Provider Magento's in a Supply Chain Attack          *

Cyber Espionage Attacks Targeting Asian Governments and Organizations          *

WPGateway Zero-Day Vulnerability Actively Exploited in the Wild          *

Apex One RCE Vulnerability is Actively Exploited, Warns Trend Micro          *

Microsoft Patch Tuesday Security Advisory - September 2022          *

Lorenz Ransomware Gang Exploiting Mitel MiVoice VOIP Appliance Vulnerability          *

Hacktivist Gang GhostSec Claims Responsibility for Compromising 55 Berghof PLCs in Israel          *

Researchers Discovered New Android Banking Trojan 'Zanubis' Targeting Peru Banks          *

Steam Community User Accounts are being Stolen Via New Browser-in-the-Browser Attacks          *

Apple Addressed Actively Exploited Zero-Day Vulnerability in its Security Updates          *

American Rental Company U-Haul Confirms Data Breach, Exposed Customers' Driving License Information          *

Ransomware Developers Adopting a New Encryption Technique to Evade Detection          *

Six High-Severity HP Firmware Vulnerabilities Left Unpatched For Over a Year          *

Admins are Urged to Patch a High-Severity Vulnerability in ConnectWise Automate Tool          *

The Lampion Malware Abusing File Sharing Service WeTransfer in Phishing Attacks          *

Albania Hit by Another Cyberattack, Blamed on Iran          *

5 Million Attacks Blocked Targeting Zero-Day in BackupBuddy WordPress Plugin          *

Bumblebee Malware Now Using New Stealthy Infection Technique          *

New Attack Technique GIFShell Used to Create Reverse Shell Using Microsoft Teams GIFs          *

North Korean APT Group Lazarus Targets U.S. Energy Sector          *

Iranian Threat Group DEV-0270 Abusing BitLocker Feature to Encrypt Windows Systems          *

The Armed Forces General Staff Agency of Portugal Suffers a Cyberattack          *

Threat Actors Found Utilizing PowerShell Empire After Initial Compromise          *

New Moisha Ransomware Actively Targeting Several Organizations          *

Attackers Hacked 200,000 The North Face Accounts in Credential Stuffing Attack          *

Threat Group APT42 Distributing a Custom Android Spyware via SMS Phishing Campaigns          *

Cisco Refuses to Patch Zero-Day Vulnerability in EoL Routers          *

HP Patches a High Severity Flaw in its Support Assistant Tool          *

New Linux Malware Shikitega Evade Detection Via Multi-Stage Deployment          *

Ransomware Attack Hits Second Largest U.S. School District Los Angeles Unified          *

Mirai Variant Moobot Botnet Targeting Vulnerable D-Link Routers          *

InterContinental Hotels Group Hit by Cyberattack Disrupts IT Systems          *

Zyxel Addressed a New Critical RCE Vulnerability in NAS Firmware Security Updates          *

Ransomware Attackers Abusing Genshin Impact Game's Anti-Cheat Driver to Kill Antivirus          *

EvilProxy Phishing Toolkit Allows Hackers to Steal Authentication Tokens to Bypass MFA          *

TikTok Denies Security Breach Claims, Stating the Leaked Data is Unrelated          *

QNAP Fixes a Photo Station Zero-Day Vulnerability Leveraged in Deadbolt Ransomware Attacks          *

Italy’s Energy Sector Hit by BlackCat Ransomware Group          *

NFL's San Francisco 49ers Confirms Data Breach; Information of 20K People Stolen          *

French Clothing Store, Damart Hit by Hive Ransomware; $2 Million Ransom Demanded          *

The SharkBot Malware Strikes Back to Steal Login Credentials          *

Threat Actors Stole Victim Data with Prynt Stealer's Backdoor          *

Internal Revenue Service Accidentally Leaked Personal Information of 120,000 Taxpayers          *

Google Chrome Emergency Update Patches New Zero-Day Vulnerability          *

Chilean Government Agency Hit by a New Ransomware Attack          *

New Instagram Phishing Campaign Targets Thousands of Accounts Via Blue-Badge Offer          *

Over 1,000 iOS Applications Detected Exposing AWS Credentials          *

Famous Social Media Platform Twitter Suffers Outage, Thousands of Users Reported Connection Problems          *

Ragnar Locker Ransomware Gang Claims Cyberattack Against TAP Air Portugal Airline          *

Malicious Google Chrome Web Browser Extensions were Downloaded by 1.4 Million Users          *

A TikTok Android App Vulnerability Enable Hackers to Hijack Accounts          *

New Bug in Google Chrome Lets Websites Write to Clipboard Without User Approval          *

Apple Fixed an Actively Exploited iOS Zero-Day Vulnerability in Older iPhone Models          *

Microsoft Azure Outage Knocks Ubuntu Virtual Machines Offline Globally          *

Russian Streaming Platform START Discloses Data Breach          *

Threat Actors Hide Malware in the Images of the James Webb Telescope          *

Chinese Threat Actors Actively Targeting Australian Government Via ScanBox Malware          *

New Golang-based 'Agenda' Ransomware Targeting Healthcare and Education Entities          *

Vodafone Idea Denies Data Breach Exposing Call Data of 20 Million Customers          *

Baker & Taylor the Largest Library Solution Distribution Firm Hit by Ransomware Attack          *

2.5 Million U.S Students Loan Accounts Details Exposed in Nelnet Data Breach          *

Akasa Air's Data Breach Exposes Passengers' Personal Information          *

Russian Attackers Employing New Malware to Hijack ADFS          *

Iranian Hackers Leveraging Log4j 2 Vulnerabilities in Attacks Against Israeli Entities          *

CISA Added 10 New Actively Exploited Vulnerabilities to its Catalog          *

Threat Actors Exfiltrated LastPass Source Code Using a Compromised Developer Account          *

The DoorDash Service Reveals a New Data Breach Linked to Twilio Hack          *

Threat Actors Using the Fake "Cthulhu World" P2E Project to Spread Malware that Steals Data          *

A Critical RCE Vulnerability Discovered in Atlassian Bitbucket Server          *

A Database Leak in India Exposed Federal Police and Banking Records          *

Researchers Identified that Over 130 Entities Hit by Okta Phishing Attack          *

Canadian Manufacturing Company Bombardier Recreational Products (BRP) Hit by Cyberattack          *

Phishing Campaign Targets PyPI Maintainers Leading to Hijacking of PyPI Packages          *

Cisco Fixes Two High Severity Vulnerabilities Affecting its Nexus-Series Business Switches          *

Mozilla Fixes Several Vulnerabilities in Firefox and Thunderbird Products          *

New Evil PLC Attack Weaponizes PLCs to Hack OT and Enterprise Networks          *

Researchers Found New BEC Campaign Using MITM Attack to Monitor Microsoft 365 Accounts          *

Plex Alerts Users to Reset Passwords After Detecting a Data Breach          *

IBM Fixes High-Severity Vulnerabilities in its MQ Messaging Middleware          *

Dominican Republic's Government Agency Suffers Quantum Ransomware Attack          *

Researchers Reveal 8-Year-Old Vulnerability DirtyCred Found in Linux Kernel          *

Google Researchers Identified Iranian Hackers Using a New Tool to Steal Victims’ Email Data          *

France Hospital Hit by a Ransomware Attack Demanded $10 Million Dollar Ransom          *

Attackers Targeted Hotel and Travel Firms Via Phishing Campaigns          *

Greek Natural Gas Operator DESFA Hit by Cyberattack          *

GitLab Patches a Critical RCE Vulnerability Impacting its Community and Enterprise Edition          *

Researchers Find RTLS Systems Vulnerable to MiTM Attacks and Location Tampering          *

Scammers used Compromised PayPal Account to send Phishing Invoice Mail to PayPal Users          *

Novant Health Disclosed Data Breach; Impacts 1.3 Million Patient Records          *

Researchers Discovered New 'Escanor' Malware Weaponized in Microsoft Office and Adobe PDF Documents          *

Grandoreiro Banking Malware Spotted Targeting Spanish and Mexican Manufacturer Employees          *

CISA Warned About a Critical SAP Vulnerability Exploited in the Wild          *

Researchers Detected 241 NPM and Python Packages Drop Cryptominers on Linux Systems          *

Attackers Infecting Vulnerable WordPress Websites to Deliver RAT and Trojan Malware          *

FBI Alert: Attackers Using Proxy and Configurations in Credential Stuffing Attacks          *

Attackers Compromised General Bytes Bitcoin ATM Servers Using a Zero-Day Flaw          *

Chinese APT41 Group Targeted 13 Entities Worldwide in 2021          *

Amazon Fixes a High-Severity Flaw in its Ring Application          *

Cozy Bear Attackers Actively Targeting Microsoft 365 Users          *

Researchers Describe Evasive DarkTortilla Crypter Used to Deliver Malware          *

Threat Actors Employing Bumblebee Malware Loader to Compromise Active Directory          *

Cisco Fixes a High Severity Vulnerability in Secure Web Appliance          *

Google Blocked the Largest HTTPS DDoS Attack of All Time          *

A New MailChimp Data Breach Exposing DigitalOcean Customers' Email Addresses          *

North Korean Attackers Infecting Job Seekers with macOS Malware          *

Malicious Browser Extensions Downloaded by More than 7 Million People Since 2020          *

Google Released Security Update to Address a Zero-Day Flaw in Chrome Browser          *

Apple Patches Two Actively Exploited Vulnerabilities in iPhone, iPad, and macOS Security Updates          *

Clop Ransomware Gang Breaches UK Water Supply Company But Misattributes the Victim          *

BharatPay Suffers Data Breach Exposing 37,000 Users’ Personal and Transaction Details Online          *

Hacker Loots 20,000 Items Worth $6 Million from CS:GO Trading Site          *

Researchers Detected AEPIC Leak and SQUIP Bugs in Intel and AMD Processors          *

Twilio Data Breach Exposed Phone Numbers of 1,900 Signal Users          *

Behavioral Health Group Notifies Customers of Data Breach Affecting 198K Patients          *

Malicious PyPi Packages Targeting Counter-Strike Servers with DDOS Attacks          *

Argentina's Judiciary of Cordoba Suffers Play Ransomware Attack          *

Security Researchers Disclosed a Security Flaw in Microsoft Signed UEFI Boot Loaders          *

A New SOVA Malware Variant Now Encrypts Android Files          *

Realtek eCos SDK Vulnerability Expose Multiple Routers to Remote Attacks          *

CISA and FBI Alerts on Zeppelin Ransomware Attacks          *

VLC Media Player Banned in India, Website and Download Link Blocked          *

A Malicious MiMi Chat App Drops New Backdoor rshell on Mac, Linux Systems          *

Researchers Detected Security Flaws in Xiaomi Smartphones Powered by MediaTek Chips          *

Scammers Abusing Google Sites and Microsoft Azure Web App to Steal Cryptocurrency Wallets          *

Zimbra Authentication Bypass Vulnerability Actively Exploited to Breach Over 1000 Email Servers          *

Security Researchers Identified Critical Bugs in Device42 IT Asset Management Platform          *

A Threat Actor Employs a New RAT Malware in Cuba Ransomware Operation          *

Cisco Confirms Yanluowang Ransomware Group Breached its Network in May,2022          *

Cybersecurity Firm Detects Vulnerabilities in Indian Insurance Company Policybazaar          *

Cisco Patched a Vulnerability which Allowed to Steal RSA Private Keys on ASA, FTD Devices          *

Microsoft Linked Service Outage to Cisco Meraki Firewall's IDR False Positive Alert          *

Palo Alto Networks Fixed a Security Vulnerability Detected in PAN-OS Firewall Configuration          *

IBM Fixes Several Vulnerabilities in Cloud, Voice, Other Security Products          *

CheckPoint Researchers Discovered Ten Malicious Python Packages Steal Developer's Credentials          *

CISA Alerts Administrators on Windows and UnRAR Vulnerabilities Exploited in the Wild          *

Cloudflare Also Hit by Threat Actors Responsible for Twilio Data Breach          *

New Android Spyware 'Dracarys' is Distributed via Fake Signal Messaging App          *

Microsoft Patch Tuesday Security Advisory - August 2022          *

Chinese Attackers Employed a New Malware to Backdoor Government and Defense Organizations          *

Cloud Communications Company Twilio Discloses a Data Breach          *

New Orchard Botnet Utilized Bitcoin Founder’s Account Information to Create Malicious Domains          *

Email Marketing Firm Klaviyo Suffers a Data Breach          *

Multinational Retail Company 7-Eleven Suffers a Cyberattack Forced to Close All Stores in Denmark          *

Threat Actors Abused Hostinger’s Preview Domain Feature in Phishing Attacks          *

F5 Addressed 21 Vulnerabilities in its Quarterly Security Updates          *

North Korean Attackers Impersonating World's Largest Cryptocurrency Firm Coinbase to Target Fintech Industry          *

Hackers Abused Snapchat and American Express Websites in Phishing Attacks          *

A New Ransomware 'GwisinLocker' Encrypts Vulnerable ESXi Servers          *

Slack Resets Users Passwords After a Bug Exposed Hashed Passwords          *

Akamai Reports Largest Ever DDoS Attack, with 659.6 Million Packets per Second          *

Cyberattack on UK Managed Service Provider Causes NHS Outage          *

A Zero-Day Bug Exposes 5.4 Million Twitter Accounts          *

The Association of German Chambers of Industry and Commerce (DIHK) Hit by a Cyberattack          *

Over 280 Million Indian Citizens' Sensitive Data Exposed Online          *

CISA Urges Users to Patch Vulnerable Zimbra Email Suites          *

Community Healthcare "First Choice" Impacted by a Data Breach          *

New Phishing Campaign Targeting Microsoft Email Services to Launch BEC Attacks          *

Researchers Detected a Critical Vulnerability Affects 29 Models of DrayTek Vigor Routers          *

Vulnerability in WordPress's Download Manager Plugin Hosted on Over 100,000 Sites has been Fixed          *

Researchers Detected a New 'ParseThru' Flaw Impacts Golang-Based Applications          *

NVIDIA fixed several Security Flaws in GeForce Security Update          *

Google Addressed Multiple Security Vulnerabilities in Chrome Browser Updates          *

Cisco Patches Critical Security Vulnerabilities in its VPN Routers          *

CERT-In Identifies High Severity Vulnerabilities in Mac, iPhone, iPad, ChromeOS and Firefox Browser          *

Attackers Stolen Wiseasy’s Employee Passwords to Access Nearly 140,000 Wiseasy Payment Terminals          *

VMware Fixed a Critical Authentication Bypass Vulnerability Affecting its Multiple Products          *

Taiwanese Websites Suffers DDoS Attacks Ahead of House Speaker Nancy Pelosi's Visit          *

Google Released its Android OS Security Bulletin August 2022          *

A Major German Semiconductor Manufacturer Semikron Suffers Ransomware Attack          *

Vulnerable GitHub Actions Workflow Allows Command Execution          *

Over 3,200 Apps Leak Twitter API Keys Allow Hackers to Hijack Users' Twitter Accounts          *

Security Researchers Detected a Directory Traversal Arbitrary File Deletion Flaw in CompleteFTP Software          *

Cybersecurity Firm Halborn Warns of New MetaMask Phishing Campaign          *

Microsoft Notifies About Outlook Crashing When Reading Uber Receipt Mails          *

European Natural Gas Pipeline Operator 'Creos Luxembourg' Hit by BlackCat Ransomware Attack          *

Subzero Malware Exploiting Windows and Adobe Vulnerabilities          *

North Korean Threat Actor Deploying Malicious Browser Extensions to Spy on Email Accounts          *

A Security Researcher Detected XSS Bugs in Google Cloud, DevSite, and Google Play          *

LockBit Ransomware Hackers Abusing Windows Defender to Side-Load Cobalt Strike          *

Researchers Discovered Giant Network of 11,000 Fake Investment Sites Targeting Europe          *

OneTouchPoint Suffers a Data Breach Affecting 30 Healthcare Entities          *

Android Adware Apps are being promoted by Facebook Ads          *

Federal Communications Commission warned Americans about increasing Smishing Attacks          *

Malicious Android Apps are Dropping Banking Malware on User Devices via Google Play Store          *

LibreOffice addresses Multiple Security Vulnerabilities          *

Microsoft 365 Suffers an Outage Impacting North American Admin Center          *

Threat Actors Using Hacked Microsoft SQL Servers as Proxies to Steal Bandwidth          *

Hackers Stealing Discord Users’ Payment Card Info Using Malicious npm Packages          *

Cloud Services Have Been Disabled by a Kansas MSP to Fend Off Cyberattack          *

Hackers Exploiting Nuki Smart Lock Vulnerabilities to Open Doors          *

New ‘Robin Banks’ Phishing Service Targeting Customers of Financial Organizations          *

Threat Actors Hacking Microsoft Exchange Servers with IIS Backdoors          *

New Phishing Campaign ‘Ducktail' Aimed at Professionals on LinkedIn          *

Hackers Employ Malware and Adware to Infect 28 Google Play Store Apps          *

Threat Actors Hack Blockchain Music Platform 'Audius'; $6 million Stolen          *

Hackers Employing WebAssembly-Coded Cryptominers to Avoid Detection          *

New Version of Amadey Malware Distributed in SmokeLoader Campaign Via Software Cracks          *

Hackers Leveraging GoMet Backdoor to Target an Ukrainian Software Company          *

FileWave MDM Vulnerabilities Expose 1,000 Organizations to Remote Attacks          *

Researchers Found CosmicStrand UEFI Malware in Gigabyte and ASUS Motherboards          *

A Zero-Day Vulnerability in PrestaShop is Being Actively Exploited to Steal Customer's Payment Information          *

Policybazaar Confirms a Network Breach in its IT Systems          *

Atlassian Fixed Critical Bug Enables Hackers to login Unpatched Confluence and Data Center Servers          *

Attackers Using DLL Side-Loading Technique to Drop QBot Malware on User Systems          *

Zyxel Releases Security Patches to Fix Vulnerabilities in its Firewall Products          *

Fraudsters Targeting Punjab State Power Corporation Limited (PSPCL) Consumers in New Online Scam          *

A Threat Actor 'Devil' claimed to have stolen Account Data of 5.4 million Twitter Users          *

Russian Attackers Breach Ukrainian Media Company TAVR Media to Spread Fake News About President Volodymyr Zelenskiy          *

Konni RAT Malware is Used by North Korean Hackers to Attack European Nations          *

SonicWall Immediately Patches a Critical SQL Injection Vulnerability          *

Hackers Employing New ‘Lightning Framework’ Linux Malware to Install Backdoors and Rootkits          *

Hackers Leveraged High-Severity Google Chrome Bug to Infect Journalists          *

Cryptomining Group '8220 Gang' targeting Linux and Cloud Application Vulnerabilities          *

Rouge ‘YouTube’ Google Advertisement Redirect Users to Windows Support Scams          *

Oracle Addresses 349 New Security Vulnerabilities in its July 2022 Critical Patch Update          *

Apple Addressed Multiple Security Vulnerabilities in its All Devices          *

A New CloudMensis Spyware Targeting Apple macOS Users          *

A New Cryptocurrency Scam Swindle Users Via Fake Nvidia Giveaway          *

Russian SVR Attackers Employing Google Drive Cloud Services to Evade Detection          *

Belgium Claims Chinese Threat Groups Targeting its Ministry of Defense and Interior Ministries          *

Attackers Steal 50,000 Payment Card Details from 300 U.S. Restaurants in Web-Skimming Campaigns          *

German-Based Giant Building Materials Producer Knauf Hit by Black Basta Ransomware Attack          *

FBI Alerts of Fraudulent Cryptocurrency Apps used to trick U.S. Investors          *

Flipkart owned Cleartrip Suffers Data Breach          *

Albania Government Hit by a Massive Cyberattack Forced to Shut Down Websites and Online Services          *

Windows Network File System Vulnerability Leads to Arbitrary Code Execution          *

The Infamous Pegasus Spyware Infected Thailand Pro-Democracy Activists' Smartphones          *

Threat Actors Comproised Popular Premint NFT Website and Stolen Nearly $375k Worth of NFTs          *

Israel's Health Ministry Website Hit by a Cyberattack Prevented Access to Users from Abroad          *

Microsoft 365 Service Outage Impacts Outlook and Exchange Online          *

The Qakbot Trojan Malware Increased its Infection Rate with New Techniques          *

Juniper Fixes Critical Vulnerabilities in Junos OS and Contrail Networking Products          *

Attackers Spoofing GitHub Commit Metadata to Mask Malicious GitHub Repositories          *

Colorado Springs Utilities Issued Warning to Customers After Identifying a Data Breach          *

Researchers Detected a New Netwrix Auditor Flaw which Enables Hackers to Compromise Active Directory Environment          *

Researchers Disclose Use-after-free Condition in Google Chrome WebGPU          *

Threat Actors Using Digium Phone Software To Actively Exploit VoIP Servers          *

Threat Actors Actively Exploiting Modern WPBakery Page Builder Addons Vulnerability          *

Threat Actors Targeting Industrial Operators Using Trojan Horse Malware and Password Cracking Ecosystem          *

DDoS Attacks by the Mantis Botnet Hit Hundreds of Cloudflare Users          *

Microsoft Attributed Holy Ghost Ransomware Operation to North Korean Attackers          *

Pakistani Hackers Targeting Indian Students in a New Spear-Phishing Email Campaign          *

Hackers Targeting PayPal Users Using Phishing Kit Installed on Hacked WordPress Sites          *

Nation-State Hacking Groups Targeting Journalists in Espionage and Malware Campaign          *

New Retbleed Speculative Execution Attacks Impacts Intel and AMD Processors          *

Famous Social Media Site, Twitter Suffers Outage; Prevented Users from Posting Tweets          *

SAP Fixed Multiple Security Vulnerabilities in its July 2022 Security Patch Day          *

Lenovo Fixes Three UEFI Firmware Security Flaws Impacting more than 70 Product Models          *

Bandai Namco Confirmed the Cyberattack and Investigating Data Leak          *

Lithuanian Energy Company 'Ignitis Group' Hit by DDOS Attack          *

Researcher Detected a New Android Malware 'Autolycos' on Google Play Store, Downloaded 3 Million Times          *

Uniswap Lost $8 Million Worth of Ethereum Crypto in Large-Scale Phishing Attack          *

Microsoft Uncovered the Exploit Code for macOS Sandbox Escape Vulnerability          *

New Data Extortion Group 'Luna Moth' Breaching Organizations Via Fake Subscription Renewals          *

Microsoft Detected AiTM Phishing Campaign Targeting Over 10,000 Entities Since 2021          *

Malaysia and Indonesia Hackers Launch Cyber War Against Indian Entities Due to Nupur Sharma's Controversial Comments          *

The New York Department of Motor Vehicles (DMV) Warned of Smishing Attacks          *

Siemens and Schneider Electric Addressed Several Flaws in its ICS Products          *

VMware Fixes Eight-Month-Old High Severity Vulnerability in vCenter Server          *

CISA Urges Federal Agencies to patch the new Windows High-Severity Vulnerability          *

Adobe Fixes Critical Vulnerabilities in its Acrobat, Reader, Photoshop Products          *

Microsoft Patch Tuesday Security Advisory - July 2022          *

North Korean Hackers Stole $620 Million from Axie Infinity in Spear-Phishing Attack          *

India’s Central Public Works Department (CPWD) Experiencing Targeted Cyberattacks Across its Offices          *

Scammers Started Phishing Campaign Targeting Amazon Prime Day-Shoppers          *

Attackers Leveraging Azure VMs and GitHub Actions for Cloud-Based Cryptocurrency Mining          *

A Rolling-PWN Vulnerability Enables Attackers to Start Honda Vehicle Remotely          *

Hackers Disguise as Cybersecurity Companies to Trick Victims into Installing Malware          *

Attackers Compromised Goa’s Water Resource Department (WRD) Server and Demanded Cryptocurrency as Ransom          *

New 0mega Ransomware Gang Targeting Organizations in Double-Extortion Attacks          *

A New Phishing Campaign Leveraging Follina Vulnerability to Deploy Rozena Backdoor          *

Hackers Targeting Russian Users by Employing a Malicious Browser Extension          *

Cisco Fixes a Critical Vulnerability in its Enterprise Communication Solutions          *

Fortinet Addressed Several Security Vulnerabilities in its Multiple Products          *

Mangatoon Data Breach Exposed 23 Million Accounts Information          *

Microsoft Patched a Flaw Crashing Office Apps While Opening with Cloud Documents          *

A Canadian Communications Firm Rogers Suffers Massive Outage Affecting Mobile Service          *

New Stealthy OrBit Malware Harvesting Information from Linux Systems          *

Hackers Sending Fake Copyright Complaint Emails to Deploy IcedID Banking Malware          *

Hackers can Exploit Online Programming Learning Websites to Launch Remote Cyberattacks          *

CuteBoi Threat Group Deploys Over 1,200 NPM Malicious Packages in Large-Scale Cryptomining Campaign          *

Checkmate Ransomware Attacks Targeting QNAP NAS Devices Exposed to Internet          *

Hacking and Ransomware Groups Switch from Cobalt Strike to Brute Ratel Post-Exploitation Toolkit          *

Bitter APT Threat Group Still Targeting Bangladesh Military Entities          *

Federal Agencies Alerted on Maui Ransomware Attacks Targeting Healthcare Entities          *

OpenSSL Patches a High Severity Vulnerability in Cryptographic Library          *

North American Giant IT Service Provider 'SHI' Hit by a Potential Malware Attack          *

Marriott Hotels Suffers a Data Breach that Exposed 20 GB of Guests Information          *

USA Professional Finance Company Suffers Data Breach Affecting Patients of 650 Healthcare Providers          *

Microsoft Silently Patches the ShadowCoerce Windows NTLM Relay Vulnerability          *

NPM Supply Chain Attack Employed Typosquatting Technique to Launch Supply Chain Attack          *

New RedAlert Ransomware Gang Targeting Windows and Linux VMware ESXi Servers          *

UK Army's YouTube and Twitter Account Hacked to Promote Crypto Scams          *

Google Patches An Actively Exploited New Chrome Zero-Day Vulnerability          *

Django Patches A High Severity SQL Injection Vulnerability in its New Release          *

One Billion Chinese Citizens' Stolen Data is Being Sold by Hackers for Bitcoins          *

Jenkins Revealed Several Zero-Day Vulnerabilities in its Multiple Plugins          *

Several Flaws in Brocade SANnav Storage Area Network (SAN) Affects Multiple Major Entities          *

Evilnum APT Group Makes Comeback with Updated TTPs, Targeting Fintech Entities          *

Microsoft Warns of Raspberry Robin Worm Infecting Hundreds of Windows Networks Via Infected USB Drives          *

A Cyberattack Over Geographical Solutions Inc. (GSI) Disrupted Unemployment Services Across the United States          *

Hackers Sent Fake Suspension Notices to Verified Twitter Accounts          *

Google Alerts Users about Slice Payments App which Steals Photos, Audio Records, and Call Histories          *

RCE Exploit Discovered in Zoho Manage Engine AD Audit Plus Bug          *

A XFiles Info-Stealing Malware Now Leveraging Follina Vulnerability in Cyberattacks          *

Toll Fraud Malware Targets Android Devices by Automatically Subscribing to Premium Services          *

NFT Giant OpenSea Reports Data Breach and Warned Users of Phishing Attacks          *

Macmillan Publishers Suffers a Ransomware Attack; Forced to Shut Down Network          *

Norway's Government Websites Suffers Multiple DDoS Attacks          *

Attackers Employing New Stealthy Malware to Backdoor Microsoft Exchange Servers Worldwide          *

A New Info-Stealer 'YTStealer' Targets YouTube Content Creators to Steal Authentication Tokens          *

MITRE Published Top 25 Most Dangerous Software Bugs List of 2022          *

Walmart Denies Yanluowang Ransomware Attack          *

CISA Urged Administrators to Patch High-Severity Linux PwnKit Vulnerability          *

Microsoft Patches Azure FabricScape Vulnerability Enable Hackers to Hijack Vulnerable Linux Clusters          *

Amazon Patches High Severity Security Flaw in its Android Photos Application          *

A Famous Raccoon Stealer Malware Returned With New Malicious Capabilities          *

Researchers Found Over 900,000 Internet-Exposed Kubernetes Instances Vulnerable to Data-Exposing Cyberattacks          *

Hackers Reused Same Compromised Account Credentials of Zola Website to Gain Access to User Accounts          *

Threat Actors Installing New 'ZuoRAT' Malware on Unpatched SOHO Routers          *

Microsoft Released Windows 10 KB5014666 Cumulative Update Include Several Bugs Fixes and New Printing Features          *

American Famous Semiconductor Company AMD Investigating RansomHouse Data Theft Claims          *

Unknown Threat Actor Installed Credit Card Skimmers on Bank of the West's ATMs          *

A New Android Banking Malware 'Revive' Masquerades BBVA Bank’s 2FA Application          *

Chinese APT Group Compromising Building Automation Systems by Leveraging Microsoft ProxyLogon Vulnerability          *

The National Institute of Standards and Technology (NIST) Issues New Guidance on Securing macOS Systems          *

A Cyberattack Hit Iran’s Major Steel Companies and Forced to Stop Factory Production          *

The Vice Society Ransomware Group Claims Responsibility of Attack on Medical University of Innsbruck          *

A New Phishing Technique Uses Microsoft WebView2 Apps to Bypass Multi-Factor Authentication          *

LockBit Ransomware Gang Infecting Users Via Fake Copyright Violation Emails          *

U.S. Federal Trade Commission Warns on Extortionists Targeting LGBTQ+ Community          *

Microsoft Downplays High Severity Vulnerabilities in Edge Web Browser, Affecting Over 150 Million Users          *

Fast Shop, a Brazilian Retailer, Disclosed a Cyberattack Involving Extortion          *

Cybercriminals leveraging Mitel Zero Day to Launch Suspected Ransomware Attack          *

Malicious PyPi Python Packages Sending stolen AWS keys to Unsecured Websites          *

A Japan Based Automotive Fabrics Distributor TB Kawashima Confirmed on a Cyberattack          *

ISGEC Heavy Engineering Limited data is Encrypted by Hackers and They Demand Bitcoin to Decrypt It          *

Automotive Hose Maker Nichirin's USA Based Subsidiary Suffers Ransomware Attack          *

CISA Warns on Threat Actors Leveraging Log4Shell Vulnerability to Hack VMware Servers          *

New Quantum Builder Enable Attackers to Easily Launch Malicious Windows 'LNK' Attacks          *

A New Phishing Campaign Targeting Microsoft 365 Users to Steal MetaMask Recovery Phrases          *

Vulnerable QNAP NAS Devices are Targeted by DeadBolt Ransomware Attacks          *

Italian Spyware Vendor Infects Android and iOS Users with help of Internet Service Providers          *

SMA Technologies’ Critical OpCon UNIX Agent Vulnerability Receives A Patch          *

Chinese Hacking Group Disguising Cyber Espionage Operation as Ransomware Attacks          *

Lithuanian NCSC Warned of an Increase in DDoS Attacks on Government Websites          *

Google Fixed 14 Vulnerabilities with the release of Chrome 103 Version          *

Chinese Hackers Distributing 'Nimbda' Loader Bundled in 'SMS Bomber' Tool to Install Info-Stealer Trojan Payload          *

MEGA Patches Several Critical Vulnerabilities in Encryption Algorithm          *

Cloudflare Suffers Massive Outage Caused by Network Configuration Error          *

Icefall 56 Vulnerabilities are affecting Operational Technology Devices used in Various Industries          *

New APT Group ToddyCat Targets Microsoft Exchange Servers          *

Yodel Parcel Company Suffers Cyberattack Disrupting Delivery Services          *

Microsoft 365 Service Outage Impacts Microsoft Exchange Online and Teams          *

A New Phishing Campaign Steals Microsoft 365 Credentials Via Fake Voicemails          *

New DFSCoerce NTLM Relay Attack Enables Attackers to Take Control Over Windows Domain          *

RobertHalf, Global HR Firm Warns Users About Credential Stuffing Attack          *

Android Banking Trojan BRATA Now Evolving Into Advance Persistence Threat          *

A New Surge in ECh0raix Ransomware Attacks Detected Targeting QNAP NAS Devices          *

Hackers Dropping Malicious Cobalt Strike Beacons in a New Phishing Campaign          *

Cisco Confirmed on not Patching RCE Flaw in Obsolete VPN Routers          *

A New 'MaliBot' Android Banking Malware Distributing as Crypto-Mining or Chrome Browser Application          *

Researchers Identified Dozen of Flaws in Industrial Network Management System of Siemens          *

The United States Department of Justice Dismantled Russian RSocks Botnet Infrastructure          *

A Vulnerability in Cisco Appliances Allows Hackers to Bypass Authentication          *

WordPress Force-Updated Ninja Forms Plugin Patch on Millions of Websites          *

Chinese Hackers Exploited Sophos Firewall Zero-day Bug Weeks Before Official Patch Release          *

Africa's Largest Supermarket 'Shoprite Holdings' Hit by Ransomware Attack          *

Citrix Fixed Critical ADM Vulnerability in its Security Updates          *

New Peer-to-Peer Panchan Botnet Compromised Several Linux Servers in Education Sector          *

Public Travis CI API Logs Exposed Thousands of GitHub, AWS, Docker Tokens          *

A New Side-Channel Attack 'Hertzbleed' Affects Intel and AMD Processors          *

Cloudflare Detects and Mitigates Largest HTTPS DDoS Attack          *

Microsoft Fixed Actively Exploited Windows MSDT Zero-Day Vulnerability in its June 2022 Security Updates          *

ALPHV Ransomware Group Created a New Technique for Extortion          *

Unknown Threat Group Hacked Over 500 Indian Websites, Demanding an Apology to Muslims All Over the World          *

Android Adware and Info-stealing Malware Downloaded Over Two Million Times on Google Play Store          *

Nonprofit Health Care Company Kaiser Permanente Confirms on Data Breach, Affected Over 69,000 Individuals          *

Microsoft Patch Tuesday Security Advisory - June 2022          *

Gallium Hackers Targeting Financial and Government Organizations Using New 'PingPull' Malware          *

Attackers Deploying BlackCat Ransomware on Compromised Microsoft Exchange Servers          *

Threat Actors Employing a New Linux Rootkit Malware ‘Syslogk’ in Cyberattacks          *

A Stealthy Linux Malware 'Symbiote' Targeting Latin American Financial Entities          *

Malicious PyPI Package ‘keep’ Contains Password Stealer Due to Typographical Error          *

Hello XD Ransomware Group Now Dropping a Backdoor While Encrypting Systems          *

New PACMAN Hardware Attack can Bypass Pointer Authentication (PAC) in Mac Systems          *

AvosLocker and Cerber2021 Ransomware Gang Actively Targeting Unpatched Atlassian Confluence Servers          *

Google Fixed Several Security Vulnerabilities in Chrome Browser Updates          *

Iranian Hackers Use DNS Backdoor to Attack Energy Sector          *

Hackers Distributing New Info-Stealer Malware Via Pirated CCleaner Pro Software          *

Several Botnets Now Exploiting Critical Atlassian Confluence RCE Vulnerability to Deploy Cryptominers          *

Researchers Identified a New Chinese-Linked APT Group Spying on Organizations for 10 Years          *

The New Advanced Malware 'Symbiote' Infects All Linux Processes and Steal Account Credentials          *

Threat Actors Compromised US Online Gun Shops to Steal Customers' Credit Card Details          *

Emotet Malware is Now Harvesting Credit Card Information from Google Chrome Browser          *

Medical Service Provider 'Shields Health Care Group' Suffers a Data Breach, Exposed Over 2,000,000 People Data          *

Google Fixed Several Critical Android Flaws in June 2022 Security Updates          *

Hackers Abused Facebook Messenger in Large-Scale Phishing Campaign to Steal Victims' Credentials          *

Two Critical U-Boot Vulnerabilities Disclosed in Linux-Based Embedded Systems          *

Black Basta Ransomware Strikes Vulnerable VMware ESXi Servers          *

Threat Actors Deploying New Malware 'SVCReady' Via Phishing Campaigns          *

Chinese Govt Hackers Compromise US Telecommunication Companies to Snoop on Network Traffic          *

Black Basta Ransomware Group Employing QBot Malware in their Operations          *

Italian City of Palermo Hit by Cyberattack, Impacting Wide Range of Operations and Services          *

The LockBit Ransomware Group Claims to Infiltrate Mandiant Company's Network          *

Hackers Actively Exploiting Critical Windows Zero-day Vulnerability in a Phishing Campaign          *

Sensitive Data of Pharmaceutical Giant 'Novartis' Exposed in a Recent Cyberattack          *

WatchDog Hacker Group Mining Crytpocurency in a Newly Launched Cryptojacking Campaign          *

The Android Malware 'SMSFactory' Discreetly Subscribes Users to Premium Services          *

Hackers Stolen NFTs From the Bored Ape Yacht Club Via Yuga Lab's Discord Server Hack          *

GitLab Patches a Critical Account Takeover Vulnerability in its Enterprise Edition          *

Malware Controlling Thousands of Sites in the Parrot TDS Network Identified by Researchers          *

Chinese Threat Group LuoYu Using WinDealer Malware in Man on the Side Attacks          *

Foxconn's Mexico-Based Manufacturing Unit Hit by Ransomware Attack          *

Microsoft Suspended Malicious OneDrive Applications Used in Polonium's Attacks          *

A New Clipminer Malware Brought its Operators $1.7 Million Via Transaction Hijacking          *

Hackers Actively Exploiting New Atlassian Confluence Zero-Day Vulnerability in the Wild          *

Attackers Targeted Hundreds of Unsecured Elasticsearch Databases in Ransom Attack          *

SideWinder APT Group Creates Fake Android VPN App on Official Google Play Store          *

RuneScape-Themed Phishing Campaign Steals Users' Account Details and In-Game Item Bank PIN          *

A Zero-Day Vulnerability in Windows Microsoft Office Receives Free Unofficial Patch          *

Researchers Found Over 3.6 Million MySQL Servers are Exposed to Public          *

Costa Rica’s Public Health Service Network Hit by Hive Ransomware Attack          *

Attackers can Hijack WhatsApp Accounts Using Call Forwarding Method          *

Chinese APT Hackers Actively Exploiting New Microsoft Office RCE Vulnerability in the Wild          *

A New XLoader Botnet Variant Hides its C2 Servers Using Probability Method          *

Zoom Released Security Patches to Fix Four Critical Vulnerabilities in its Video Conferencing App          *

Cisco Researchers Discovered Several Flaws in Open Automation Software Platform          *

Hackers Leveraging a New Microsoft Office Zero-Day Flaw to Run PowerShell Commands          *

Austrian Federal State Carinthia Hit by BlackCat Ransomware Gang          *

Attackers Employing a New WSL-Based Malware to Steal Web Browser Cookies          *

EnemyBot Malware Includes New Exploits for Critical Web Servers, Content Management Systems Vulnerabilities          *

FBI: Attackers Marketing Network Access Credentials for U.S. Education Institutions in Hacking Forums          *

Security Researchers Released Proof-of-Concept (PoC) Exploit for Critical VMware Flaw          *

Microsoft Detected Multiple Security Vulnerabilities in Android Applications          *

Threat Actors Stole Around 100,000 NPM User Account Credentials in GitHub OAuth Breach          *

Zyxel Fixed Multiple Security Vulnerabilities in its Products          *

Windows 11 KB5014019 Patch Affects Trend Micro UMH Driver, Breaking Ransomware Protection          *

Scammers Impersonating QuickBooks Support Team in Phishing Attack          *

Threat Actor Leveraging Stealthy BPFDoor Malware to Infect Linux and Solaris Systems          *

Microsoft Shared Guidelines to Mitigate KrbRelayUp LPE Attacks on Windows Systems          *

New Linux-Based Ransomware 'Cheers' Targeting Vulnerable VMware ESXi Servers          *

Researchers Detected a Rise in ChromeLoader Malware Infection Rate, Targeting Windows and Mac Systems          *

Developers Warned Users to Stop Using Tails 5.0 Linux Distributions Until Next Release          *

Popular Python and PHP libraries Compromised to Steal Users' Amazon AWS Keys and Credentials          *

Russian Government Agencies Targeted by Fake Windows Updates Campaign          *

Researchers Discovered a New Chaos Ransomware Variant          *

Trend Micro Fixed a DLL Hijacking Vulnerability in its Security Solution          *

Mozilla Fixed Zero-Day Vulnerabilities in its Multiple Products          *

Indian Airline SpiceJet Suffers Ransomware Attack, Impacted Flight Departures          *

Hackers Targeted Security Researchers with Fake Windows PoC Exploits          *

US Car Manufacturer General Motors (GM) Suffers Credential Stuffing Attack, Exposed its Customers Information          *

Chinese Twisted Panda APT Group Targets Russian’s Defense Institutes in Espionage Attacks          *

A New Unpatched Vulnerability in PayPal Allows Hackers to Steal Money From PayPal Users          *

Microsoft Store App Issues are Fixed with Emergency Updates for Windows 10          *

Russian IoT Botnet Fronton Used to Launch Social Media Disinformation Campaigns          *

Chicago Public Schools Suffers Massive Data Breach After Ransomware Attack          *

Predator Spyware Actively Infecting Android Users in Zero-day Attacks          *

Hackers Employing PDF Documents to Drop Snake Keylogger Malware          *

Threat Actors Promoting New Cryptocurrency Scam Using Fake Elon Musk YouTube Videos          *

Cisco Addressed a Zero-Day Vulnerability in IOS XR Router Software          *

Vidar Malware is Distributed via Fake Windows 11 Downloads          *

Malicious PyPI Package Drops Backdoors Targets Windows, Linux, and Mac OS          *

North Korean Lazarus Hacking Group Leveraging Log4J Vulnerability to Infect VMware Servers          *

QNAP Warned Customers on New DeadBolt Ransomware Attack          *

Media Giant Nikkei’s Singapore Unit Suffers Ransomware Attack          *

Microsoft Detects a Massive Rise in XorDDoS Malware Activity Targeting Linux Devices          *

Most Sophisticated BlackCat Ransomware (ALPHV) Gang Targeting Various Organizations          *

NVIDIA Addressed Ten Flaws in the Windows GPU Display Drivers          *

Microsoft Warns About Brute-Force Attacks Targeting MSSQL Database Servers          *

VMware Fixed Critical Vulnerabilities in its Multiple Products          *

WordPress Fixed Critical Vulnerabilities in Jupiter Theme and JupiterX Core Plugins          *

Over 200 Apps Found Distributing Facestealer Spyware Via Google Play Store          *

Millions of Attacks Exploiting Vulnerable WordPress Tatsu Builder Plugin          *

Multiple Third-Party Web Trackers Steal User's Entered Data Before Submitting          *

CISA Alerts on Actively Exploited Spring And Zyxel Vulnerabilities          *

A Custom PowerShell RAT Targeting German Users Looking for Ukraine Crisis Information          *

Apple Patches a Zero-Day Vulnerability in its MacOS and Watch Devices          *

Manufacturing Firm Parker-Hannifin Discloses Data Breach Post Ransomware Attack          *

HTML Attachments Still Used in Phishing Emails as it Avoids Detection          *

Sophos Fixes BSODs Flaw in Antivirus Driver Triggered After Windows KB5013943 Update          *

CISA Warns May Windows Updates on Domain Controllers          *

Fake Pixelmon NFT Site Infect Users with Password-Stealing Malware          *

Attackers Promoted Fake Binance NFT Mystery Box Bots on YouTube to Install RedLine Malware          *

SonicWall Patches New Vulnerabilities in its SSLVPN SMA1000 Devices          *

Pro-Russian Hackers DDoS Italian Govt Sites Via “Slow HTTP” Technique          *

Sysrv Botnet Variant is Now Exploiting New Vulnerabilities to Deploy Cryptomining Malware          *

Massive WordPress JavaScript Injection Campaign Redirecting Visitors to Malicious Sites          *

Zyxel Pacthes Critical Vulnerability in its Firewall Products          *

Cobalt Mirage Attackers Using BitLocker and DiskCryptor in Ransomware Attacks          *

A Stealthy BPFdoor Backdoor Targeting Linux and Solaris Systems          *

FBI and CISA Warns on Supply Chain Attacks Targeting MSPs          *

Bitter Hacking Group Targeting Bangladesh Government Entities via Spear-Phishing Campaigns          *

HP Patches High-Severity BIOS Vulnerabilities Enabling Kernel Privileges          *

Hackers Deploy a New Post-Exploitation Framework IceApple on Microsoft Exchange Servers          *

Attackers Spreading Another Set of Malicious Apps Through Google Play Store          *

Researchers Alerts on DCRat Backdoor Being Sold on Russian Hacking Forums          *

Costa Rica Declares National Emergency Following Cyberattacks from Conti Ransomware Group          *

Scammers Distributing Jester Stealer Malware in Phishing Attacks          *

Microsoft Patches an Actively Exploited Windows LSA Spoofing Zero-Day Flaw          *

Hackers Employing Critical F5 BIG-IP Vulnerability in Destructive Attacks          *

FluBot Android Malware Aims at Finland in a New SMS Phishing Campaign          *

German Automotive Industry Targeted by a Month-Long Malware Campaign          *

Microsoft Patch Tuesday Security Advisory - May 2022          *

Microsoft Patches a Flaw in Azure Synapse and Azure Data Factory Pipelines          *

QNAP has Fixed a Critical Vulnerability Affecting Remote Command Execution in QVR          *

New Windows Worm Spreading Through Infected USB Drives          *

US Agricultural Machinery Company 'AGCO' Suffers Ransomware Attack          *

Google Docs Crashes at the Sight “And. And. And. And. And.”          *

Attackers Hijacked Ferrari's Subdomain to Host Fake NFT Scam          *

New NetDooka Malware Framework Distributed via PrivateLoader Malware Distribution Service          *

Unsecured ElasticSearch Server Instance Exposed Thousands of Borrower's Data          *

New Chinese Threat Group Moshen Dragon Targeting Asian Telecommunication Entities          *

Security Researchers Disclose Years-Old Bugs in Avast and AVG Antivirus Solution          *

Google Patches an Actively Exploited Linux Kernel Flaw in its Android Security Updates          *

North Korean Hacker Group 'APT38' Linked to New Ransomware Strains          *

Threat Actors Targeting Microsoft Logins from Compromised UK NHS Email Accounts          *

Cisco Patches NFVIS Vulnerabilities Enabling Access to Root Privileges          *

F5 Alerts Users on Critical BIG-IP RCE Vulnerability Allowing Device Takeover          *

Hackers Targeting Pixiv, DeviantArt Artists to Push an Info-stealer Malware          *

Pro-Ukraine Hackers Actively Exploiting Docker Images to DDoS Russian Sites          *

Threat Actors Distributing Magniber Ransomware in a Fake Windows 10 Upgrade Campaign          *

Over Millions of Routers and IoT Devices are Vulnerable to Unpatched DNS Vulnerability          *

Aruba and Avaya Network Switches Highly Vulnerable to "TLStorm 2.0" Vulnerabilities          *

Threat Actors Abusing Google’s SMTP Relay Service to Distribute Phishing Emails          *

Car Rental Giant Sixt Hit by Cyberattack, Disrupting its Operations          *

Threat Actors Employing Bumblebee Malware Instead of BazarLoader Malware in Cyberattacks          *

Attackers Targeting Ukraine Websites from Compromised WordPress Sites in DDoS Attacks          *

Synology Alerts Customers on Critical Netatalk Bugs, Affecting its Several Products          *

Russian Threat Group Targeted Romanian Government Sites with DDoS Attack          *

Austin Peay State University Suffers Ransomware Attack          *

A YouTuber Encouraging Followers to Perform DDoS Attacks Against Russia          *

Popular Social Media App Whatsapp Suffers Outage, Users Reported Connection Issues          *

A NPM Flaw Enable Attackers to Add Other Developers to their Malicious Packages          *

Microsoft Fixed Critical Vulnerabilities in Azure Database for PostgreSQL Flexible Server          *

The RIG Exploit Kit Leverages an Internet Explorer Flaw to Spread RedLine Malware          *

Chinese-Linked Threat Group 'Mustang Panda' Now Targeting Russian State Officers          *

Threat Group Hive0117 Targeting Eastern European Organizations in Phishing Campaign          *

QNAP Warned Customers to Disable AFP Until Critical Bugs Fixed          *

Microsoft Disclosed a New 'Nimbuspwn' Vulnerability in Linux Operating System          *

Threat Actors Actively Exploiting Critical VMware RCE Vulnerability to Deploy Backdoors          *

Threat Actors Actively Spreading Emotet Malware Via Windows Shortcut Files          *

Multinational Beverage Corporation Coca-Cola Suffers a Network Breach          *

American Dental Associations Sensitive Data Stolen by Black Basta Ransomware          *

North Korean APT Group Targeting Journalists with Malware 'Goldbackdoor'          *

French Hospital Group Suffers Cyberattack; Administrative and Patient Data Exposed          *

A Critical Flaw in Ever Surf Wallet Enable Attackers to Steal Victim's Cryptocurrencies          *

Atlassian Patched Critical Authentication Bypass Flaw in Jira Seraph          *

Hackers Slipping 'More Eggs' Malware Into Resumes Sent to Corporate Hiring Managers          *

A Critical Flaw in Cisco Umbrella’s Default SSH Key Enabled Credential Theft          *

UPI Suffers Outage, Social Media Flooded with Payment Failure Complaints          *

T-Mobile Confirms Lapsus$ Threat Group Breached its Internal Network          *

Several Critical Flaws Disclosed in SmartPTT and SmartICS Industrial Products          *

QNAP Urges Users To Mitigate Critical Apache HTTP Server Flaws          *

LemonDuck and TeamTNT Hacking Docker Servers in Cryptomining Malware Campaigns          *

A Critical Android Chipset Vulnerability Enables Attackers to Access User's Media Files          *

New BotenaGo Botnet Variant Targeting Lilin Security Camera DVR Devices          *

Amazon Web Services Patches Container Escape in Log4Shell Hotfix          *

Russian Threat Group Employing New Pteredo Variants to Infect Targeted Ukrainian Entities          *

Hive Ransomware Group Targeting Vulnerable Microsoft Exchange Servers          *

Emotet Botnet Increased its Infection Rate in March 2022          *

CISA Warns About an Actively Exploited Windows Print Spooler Vulnerability          *

QNAP Warned Customers to Secure NAS Devices from Cyberattacks          *

Lenovo Disclosed UEFI Firmware Driver Vulnerabilities, Affecting Over 100 Laptop Models          *

Israelian NSO Group Leveraging New iOS Flaw to Drop Spyware on iPhone Devices          *

CISA Issues a Warning Regarding a North Korean Hacking Group Targeting Cryptocurrency Industries          *

A Threat Actor Stole $655,388 in Cryptocurrency from Apple's iCloud          *

Hackers Using Fake Windows 11 Upgrade Campaign to Infect Users          *

Decentralized Finance Project Beanstalk Lost $182 Million in Flash-loan Attack          *

Cisco Patches a Critical Authentication Bypass Vulnerability in its WLC Software          *

'JekyllBot:5' Bugs Enable Hackers to Compromise Aethon TUG Hospital Robots          *

Hackers Accessed Several GitHub's Private Repositories Using Stolen OAuth Tokens          *

Scammers Targeting T-Mobile Customers in SMS Phishing Attacks          *

A Vulnerability in Rarible NFT Marketplace Let Attackers Steal Users' Crypto Assets          *

Wind Turbine Manufacturer 'Nordex' Suffers Conti Ransomware Attack          *

Oil India Limited (OIL) Suffers Ransomware Attack          *

Threat Actors Targeting Ukrainian Government Entities with IcedID Malware and Zimbra Exploits          *

'OldGremlin' Ransomware Group Returns with New Malware Targeting Russian Entities          *

CISA Warns About an Actively Exploited Windows Local Privilege Escalation Vulnerability          *

Google Fixes An Actively Exploited Vulnerability in its Chrome Browser          *

Malware Campaigns Targeting African Bank Employees with RemcosRAT Malware          *

Russian Hackers Employ the Industroyer2 Malware to Attack Ukraine Power Grid          *

Federal Agencies Issues a Joint Advisory on APT Groups Targeting ICS/SCADA Devices          *

Hackers Actively Exploiting An Already Patched Critical VMware Vulnerability          *

WordPress Developers Patches a Critical Flaw in Elementor Plugin          *

A New Malware Tarrask Hides Scheduled Tasks Using Windows Vulnerability          *

HP Patches Critical Bugs Impacting 15 Million Endpoints in Teradici PCoIP Software          *

Hashnode Blogging Platform Reported to Have Critical LFI Vulnerability          *

Microsoft Patch Tuesday Security Advisory - April 2022          *

Italian Luxury Fashion House 'Ermenegildo Zegna' Confirms Ransomware Attack          *

Threat Actors Leveraging Spring4Shell Exploits to Install Mirai Malware          *

American Manufacturing Company 'Snap-on' Suffers a Data Breach          *

Researchers Issue Alert About Information-Stealing Malwares FFDroider & Lightning          *

Qbot Operators Now Distributing Malware via MSI Windows Installer Packages          *

The Android Banking Trojan Mimics Bank Customer Service Calls          *

Atlassian's Ongoing Outage Might Extend Another Two Weeks          *

Threat Actors Distributing a New META Malware in Spam Campaigns          *

Chinese Threat Actors Actively Targeting Indian Power Grid Organizations          *

New Octo Malware Let Attackers Take Control of Android Devices Remotely          *

A New Traffic Direction System 'Parrot' Infects 16,500 Sites to Deploy Malware          *

New Malware 'Denonia' Targets Serverless AWS Lambda with Cryptominers          *

Hackers Harvesting Data Via Malicious Android Apps with Million of Downloads          *

Threat Actors Using New 'FFDroider' Malware to Steal Social Media Accounts          *

An Ongoing Atlassian Outage Affects Jira and Confluence Customers          *

OpenSSL Infinite Loop Vulnerability Affects Palo Alto Networks Firewalls and VPNs          *

Scammers Using Malicious Shopping Apps to Steal Bank Credentials of Malaysian Customers          *

UK Retail Chain The Works Hit by Cyberattack          *

VMware Patches Critical Vulnerabilities in its Multiple Products          *

CISA Issues an Alert Relating the Active Exploitation of a Critical Spring4Shell Vulnerability          *

Researchers Link Chinese Threat Group 'Cicada' to Widespread Espionage Attacks          *

Hackers Breach Email Marketing Company 'Mailchimp' to Conduct Phishing Attacks          *

FIN7 Hacking Group Employing Stolen Credentials and Software Supply Chain Attacks          *

Several Hacking Groups Capitalizing on Russia-Ukraine War To Distribute Malware          *

Threat Actors Marketing New Sophisticated Malware on Russian Hacking Forums          *

Beastmode DDoS Botnet Exploiting New TOTOLINK Bugs to Enslave Routers          *

New RAT Malware 'Borat' Appears on Hacking Forums, Offering Several Features          *

Brokenwire Hack Could Let Attackers Disrupt Charging for Electric Vehicles Remotely          *

VMware Fixes Critical Spring4Shell RCE Vulnerability in its Multiple Products          *

A 15 Year Old Bug in Pear PHP Repository could Lead to Supply Chain Attack          *

Trend Micro Patches Actively Exploited Vulnerability in its Apex Central Product          *

Threat Actors Employ New Android Spyware to Harvest Sensitive User Data          *

American Express Suffers Massive Outage, Affects Payment Services          *

Threat Actors Abusing Microsoft Azure Static Web Pages in Phishing Attacks          *

Hackers Using Fake Trezor Data Breach Emails to Harvest Users Cryptocurrency Assets          *

CISA Warns Federal Civilian Agencies to Patch Critical Sophos Firewall Vulnerability          *

Critical GitLab Vulnerability Enables Hackers to Take Over User Accounts          *

Palo Alto Networks Error Leaks Customer Support Cases, Attachments          *

Apple Patches Two Zero-Days in its iPhones, iPads, and Macs Devices          *

Zyxel Patches Critical Authentication Bypass Vulnerability in its Firewall and VPN Products          *

Vulnerable Wyze Cam Devices Allow Hackers to View Video Feeds          *

Chinese Hackers Installing New 'Fire Chili' Rootkit on Vulnerable VMware Horizon Servers          *

Viasat Confirmed Satellite Modems were Compromised with AcidRain Malware          *

Developers Release a Fix for a Zero-Day Vulnerability in Spring Java Framework          *

A New Zero-Day Vulnerability in Spring Java Framework Allows Remote Code Execution          *

A Severe OpenSSL Bug Affects the Majority of QNAP NAS Devices          *

Globant, an IT and software Firm, Suffers a Data Breach; 70GB of Data is Stolen          *

Viasat's KA-SAT Satellite Service Suffers From Cyberattack          *

A New Spear-phishing Campaign Targets Russian Govt Dissidents with Cobalt Strike          *

Russian Phishing Attacks Target NATO, and European Military Forces          *

FBI Warns Election Officials of Credential Phishing Campaigns          *

Transparent Tribe Hackers Targeting Indian Government Officials Via Modified MFA Tool          *

Mars Stealer Malware Spreads Through OpenOffice Ads on Google          *

New Malware 'Verblecon' Infects Hacked PCs with Cryptocurrency Miners          *

CISA Wans of Attacks on Internet-connected UPS Devices          *

Shutterfly Discloses Data Breach Post Suffering Conti Ransomware Attack          *

Threat Actors Using Infected WordPress Sites to Launch DDoS Attacks          *

Remote Keyless System of Honda Vehicles Vulnerable to Replay Attacks          *

Threat Actors Targeting Vulnerable Microsoft Exchange Servers Via Reply Chain Hijacking Attacks          *

'Purple Fox' Hackers Actively Using New Variant of FatalRAT in Recent Malware Attacks          *

Muhstik Botnet Targeting Redis Servers Recently Disclosed Vulnerability Via Recently Disclosed Vulnerability          *

An Emergency Google Chrome Update Fixes Zero-Day Flaw Used In Attacks          *

A Critical Vulnerability in Sophos Firewall Enables Remote Code Execution          *

Chinese Hacking Group 'Scarab' Spotted Targeting Ukraine Amid Russia Invasion          *

Threat Actors Distributing a Vidar Infostealer Via Malicious Email Attachments          *

Hackers Targeting Azure Developers Via Over 200 Malicious NPM Packages          *

Social Engineering Attacks Compromise Morgan Stanley Client Accounts          *

Western Digital Updates My Cloud OS To Patch Critical Vulnerability          *

Threat Actors Distribute a New Version of JSS Loader RAT Via Malicious Microsoft Excel Add-ins          *

North Korean Hackers Actively Exploiting Recently Patched Chrome Zero-day Flaw          *

VMware Releases Patches For Carbon Black App Control Flaws          *

New WPS Office Flaws Give Hackers Access To Betting Firms          *

China-Linked Threat Actor 'Mustang Panda' Targets European Diplomats and ISPs          *

Thousands of MikroTik Routers Abused in Glupteba, TrickBot Campaigns          *

Microsoft Confirms the Hack by LAPSUS$ Extortion Group, 37GB of Source Code Leaked          *

New Dell BIOS Flaws Affect Millions of Inspiron, Vostro, XPS, Alienware Systems          *

Several HP Printer Models Vulnerable to Remote Code Execution Attacks          *

Greece's Public Postal Service ' ELTA' Suffers Ransomware Attack          *

Researchers Expose Custom macOS Malware of Chinese Hackers          *

A New Crypto Scam Dubbed 'CryptoRom' Abusing iPhone Features to Target Mobile Users          *

New Backdoor 'Serpent' Targets French Entities via Open-Source Package Installer          *

Hackers Targeting Bank Networks with New Rootkit to Compromise ATM Machines          *

Threat Actors Spreading BitRAT Malware as Windows 10 License Activator          *

Hackers Impersonating Legit Domains by Using New Browser-in-the Browser (BITB) Attack          *

Opatch Releases an Unofficial Patch For Windows Zero-Day Flaw Giving Admin Rights          *

Hackers Infecting Android Users Via Password Stealing Malware 'FaceStealer'          *

Internet Systems Consortium (ISC) Patches High-severity Bugs in BIND Server          *

A New Variant of Cyclops Blink Botnet Actively Targeting ASUS Routers          *

Europe Warns of Aircraft GPS Outages Linked To Russian Invasion          *

Unsecured Microsoft SQL and MySQL Servers are Targeted by Gh0stCringe Malware          *

SolarWinds Warns Against Attacks Aimed at Web Help Desk Instances          *

Over Hundreds of GoDaddy-Hosted Sites Were Backdoored In One Single Day          *

CISA Added 15 Known Vulnerabilities Exploited in Attacks          *

OpenSSL Patches a High-Severity DoS Vulnerability          *

Hackers Employing Log4j Exploits to Infect Linux Machines          *

A Massive Phishing Campaign Employs 500+ Domains to Steal Credentials          *

Giant Automotive Manufacturer DENSO Suffers Data Breach          *

QNAP Alerted on Linux 'Dirty Pipe' Vulnerability, Affecting its NAS Devices          *

Threat Actors Employed CaddyWiper Data Wiping Malware in Ukraine Attacks          *

New Linux Vulnerability Allows Hackers to Elevate Privileges          *

Researchers found New Evidence linking Kwampirs Operators to Shamoon Malware          *

Bridgstone Americas Suffers Data Breach Post Ransomware Attack          *

Vulnerable Package Managers let Attackers to Infect Developers' Systems          *

Giant Video Game Developer Ubisoft Disclosed a Cyberattack, Services Disrupted          *

New Variant of Aberebot Trojan Harvest Users' Google Authenticator MFA Codes          *

Attackers Using YouTube Platform to Infect Video Games Players with Malware          *

Threat Actors Using Custom-made Hacking Tools in Cyberattacks          *

Emotet Botnet Employing Over 100,000 Bots to Carryout Cyberattacks          *

Iranian Threat Group Targeting Turkey and Arabian Peninsula in Malware Attack          *

Threat Actors Employing Mitel Devices to Launch DDoS Reflection Attacks          *

Russian Federal Agencies' Websites Compromised in a Supply Chain Attack          *

CISA Updated Conti Ransomware Alert with 100 Domains used in Cyberattacks          *

Chinese Threat Actors Targeting European Diplomatic Entities in Phishing Attacks          *

Scammers Impersonating Government Officials and Law Enforcement in Fraud Scams          *

Coinbase Blocks Over 25,000 Blockchain Addresses Linked to Russian Individuals          *

A New Linux Vulnerability Enable Hackers to Gain Root Access on Vulnerable Systems          *

Microsoft Fixes a Critical Azure Bug Exposing Other Customers Data          *

Romania's Rompetrol Gas Station Network Suffers Hive Ransomware Attack          *

Ukraine's Computer Emergency Response Team Warns of New Phishing Attacks          *

TerraMaster Patches Critical Vulnerabilities in its Network-attached Storage (NAS) Devices          *

Researchers Identify SharkBot Malware Disguised as an Android Antivirus on Google Play Store          *

Threat Actors Using Stolen NVIDIA's Code-signing Certificates in Cyberattacks          *

Russian Government Shares a List of IP Addresses DDoSing Russian Organizations          *

Vulnerable Linux Kernel Versions Enable Hackers to Execute Arbitrary Commands          *

New Security Bug Affects Thousands of Self-Managed GitLab Instances          *

Mozilla's Security Updates address two critical zero-day vulnerabilities in Firefox          *

'Lapsus$' Hacking Group Allegedly Leaks Samsung Electronics Confidential Data          *

Cisco Issue Patches for Expressway Series, TelePresence VCS Products          *

Researchers Propose New Side-Channel Attack on Homomorphic Encryption          *

New York State Office of the Attorney General Warns Users Impacted by T-Mobile Data Breach          *

Over 71,000 NVIDIA Employees Credentials Compromised as a Result Of a Data Breach          *

Researchers Disclose a Malware Campaign Impersonating VC Firm Using Phishing Emails          *

Developers Address Critical Security Flaws in Famous Multimedia Library PJSIP          *

Researchers Disclose Critical Security Vulnerabilities in VoIPmonitor Monitoring Software          *

Threat Actors Leveraging Log4Shell Vulnerabilities to Launch DDoS and Cryptomining Attacks          *

Belarusian Nation-state Threat Group Actively Targeting European Government Entities          *

TrickBot Operators Updates its AnchorDNS Backdoor to AnchorMail          *

Threat Actors Abusing Google Ads to Push Hundreds of eBike Phishing Sites          *

China-linked Daxin Malware Actively Targeting Several Governments Infra in Espionage Attacks          *

TeaBot Malware Resurfaces on Google Play as a QR Code Scanner App          *

Insurance Giant 'AON' Suffered Cyberattack Over the Weekend          *

Second New Malware 'IsaacWiper' Targets Ukraine Amid Russian Invasion          *

Automobile Giant 'Toyota' Halts Production Amid Cyberattack on Supplier          *

Video Surveillance Giant 'Axis Communications' Suffers Massive Network Breach          *

Threat Actors Abusing Content Filtering Devices in DDoS Amplification Attacks          *

An Infostealer Malware 'Jester Stealer' Updated with New Malicious Capabilities          *

Threat Actors Using Ransomware as Decoy in Ukraine Cyberattacks          *

Android Visual Voice Mail App Vulnerability Let Attackers to Steal User Passwords          *

NHS Urges Users to Patch Okta Advanced Server Client RCE Vulnerability          *

American Multinational Technology Corporation 'Nvidia' Hit by Cyberattack          *

Targeted Citibank Customers Suffer Phishing Attack with Fake Suspension Alerts          *

Threat Group 'UNC2596' Exploiting Microsoft Exchange Vulnerabilities to Install Ransomware Payload          *

Hackers Using Microsoft Official Store to Deploy Malware on Victims' Systems          *

Threat Actor Group 'APT27' Hit US Defense Contractors Using Stealthy SockDetour Backdoor          *

Deadbolt Ransomware Operators Actively Targeting ASUSTOR NAS Devices          *

Researchers Identify a New Destructive Wiper Malware Leveraged in Ukraine Attacks          *

CISA Warns About an Actively Exploited Flaws in Zabbix Network Monitoring Platform          *

Researchers Unveil New Malware 'Small Sieve' Used by MuddyWater Hackers          *

Researchers Warn of New Russian Botnet Built from Hacked Firewall Devices          *

25 Malicious JavaScript Libraries Enable Hackers to Steal Users' Discord Tokens and Environment Variables          *

Threat Actors Employing Dridex Bots to Deploy Ransomware Payload on Infected Networks          *

Chinese Researchers Uncover Details About Equation Group's Bvp47 Backdoor          *

Researchers Disclose a 9-Year-Old Bug in Horde Webmail Software          *

Massive DDoS Attacks Hit Ukrainian Government Agencies and Banks Once Again          *

Researchers Disclose a New Phishing Technique Bypassing Multi-factor Authentication          *

Chinese Threat Group 'APT10' Targeting Taiwan Entities in a Supply Chain Attack          *

Hancom Office Software Vulnerable to Code Execution and Memory Corruption Attacks          *

Fraudsters Stolen $1.7 Million Worth NFTs from OpenSea Users' in a Phishing Attack          *

Threat Actors Actively Scanning Vulnerable MS SQL Servers to Deploy Cobalt Strike Beacons          *

A New Android Banking Trojan Spotted on Google Play Store, Targeting Europeans          *

American Logistics Company 'Expeditors International' Hit by Massive Cyberattack          *

Giant Cookware Distributor 'Meyer Corporation' Suffers Data Breach Following Ransomware Attack          *

Islamic Republic of Iran Broadcasting (IRIB) Hit by Cyberattack          *

WordPress Force-Updating UpdraftPlus Plugin Patch on Million of Sites          *

Iranian Threat Group Leveraging Log4j Vulnerabilities to Affect VMware Horizon Servers          *

PseudoManuscrypt Botnet Followed CryptBot Techniques Since May 2021          *

Monzo Online Banking Users Targeted by New phishing Attack          *

Popular E-cigarette Online Store was Compromised to load Credit Card Skimmer          *

Adobe Updated its Security Advisory for Critical Vulnerability          *

Cisco Patched high severity vulnerability Impacts Cisco Email Security Appliance          *

Hackers Use Microsoft Teams Chats to Spread Malware          *

Researchers Alerts on Golang-based Kraken Botnet Targeting Windows Systems          *

Cyber Threat Group 'Moses Staff' Targeted Israeli Organizations          *

Red Cross Claimed State-Sponsored Hacking Group Responsible for the Attack          *

BEC Scammers Impersonating CEOs in Virtual Meetings          *

Trickbot Malware Targeting Well-known Companies to Steal Users Credentials          *

Researchers Disclosed a High-Severity Vulnerability in Apache Cassandra          *

VMware Patched High Severity Vulnerabilities Affecting Several Products          *

BlackCat Ransomware Group Claims Swissport Ransomware Attack          *

Ukrainian Defense and Two Bank Sectors Hit By Massive DDOS Attack          *

Threat Actors Employing Mylobot Malware to Send Cyberbulling Emails          *

Researchers Attribute ShadowPad Malware Attacks to Chinese Threat Groups          *

Japanese Sportswear Company Mizuno Hit by Ransomware Attack          *

Moxa Patches 5 Critical Security Vulnerabilities in its MXview Software          *

Ukraine Suffers from Ongoing Massive Hybrid Warfare          *

NFL’s San Francisco 49ers Team Hit by Blackbyte Ransomware Attack          *

Google Pushes a Chrome Update to Fix Zero-day in its Chrome Browser          *

Adobe Fixed Critical Zero-day Vulnerability, Affects Adobe Commerce and Magento Users          *

Croatian Mobile Network Operator 'A1 Hrvatska' Suffers Data Breach          *

Researchers Identified New Sophisticated Rust-based Ransomware Attack          *

CISA Added 16 New Flaws to its Known Exploited Vulnerabilities Catalog          *

Threat Group ModifiedElephant Installed Fake Digital Evidence on Indian Activists          *

Apple Patches an Actively Exploited Zero-Day Flaw in its Security Updates          *

Threat Actor Group 'APT29' Targeted European Diplomats Via COVID-19-Themed Phishing Emails          *

FritzFrog Botnet Infects 1500 Hosts Within a Span of One Month          *

Researches Disclose Advanced Threat Group 'ModifiedElephant' Stealth Mode Operation Strategies          *

Vulnerable 'PHP Everywhere' Plugin Pose High Risk for Thousands of WordPress Sites          *

Iranian Threat Group Deploying Backdoor Dubbed Marlin in a New Espionage Campaign          *

Hackers Infected Hundreds of Magento Sites in MageCart Attacks          *

FBI Alerts Users of Increased SIM Swap Fraud Hijacking Victims Numbers          *

Advance Threat Group Employing New Implant to Infect Middle East Entities          *

Threat Actors Targeting European Android Users in Smishing Attacks          *

Kimsuki Hacker Group Using Commodity RATs with Custom Gold Dragon Malware          *

Google Patches Two Critical Bugs Via Android Security Updates for Feb 2022          *

Vulnerable Mimosa Wireless Broadband Products are Exposed to Remote Attacks          *

SAP Patches Multiple Security Vulnerabilities in its February 2022 Security Patch Day          *

Vodafone Portugal Hit by Massive Cyberattack          *

Microsoft Patch Tuesday Security Advisory - February 2022          *

Politically Motivated Threat Group Targeting Indian Military and Diplomatic Resources          *

Medusa Malware Targeting Android Users in Smishing Campaigns          *

Leading Sportswear Manufacturer Puma Suffers Data Breach Following Ransomware Attack          *

DPD Group's Parcel Tracking Flaw May Expose Customers' Personal Information          *

Vulnerable Argo CD Exposes Sensitive Information from Kubernetes Apps          *

American Media Giant News Corp Hit by Persistent Cyberattack          *

Researchers Identified a New Ransomware-as-a-Service (RaaS) Operation in Cyberattacks          *

Israeli Company QuaDream Abusing iPhone Security Vulnerability to Deploy Spyware          *

Switzerland's Aviation Firm Swissport Hit by Ransomware Attack          *

Chinese Threat Actors Actively Exploiting a Zimbra Zero-day Vulnerability to Steal Emails          *

Cisco Patches Several Flaws Discovered in Small Business RV Series Routers          *

Intuit Warns of Phishing Campaign Sending Fake Account Suspended Mails          *

Antlion Hackers Targeting Financial and Manufacturing Institutes Using Custom Backdoor          *

Threat Actor Group 'Moses Staff' Using New StrifeWater RAT in Ransomware Attacks          *

UEFI Firmware Vulnerabilities Impact at least 25 Computer Vendors          *

Threat Actors Using SEO Poisoning Technique to Install Malware Package          *

New Malware Used by SolarWinds Hackers Went Undiscovered for Many Years          *

Kenyon Produce (KP) Snacks Company Suffers Ransomware Attack          *

Morley Companies Inc. Discloses a Data Breach Post Ransomware Attack          *

ESET Patches High Severity Vulnerability Affecting its Multiple Products          *

Threat Actor Group 'Charming Kitten' Using New PowerShell Backdoor in Cyber Espionage Attacks          *

SolarMarker Malware Employing Novel Techniques to Persist on Hacked Systems          *

Researchers Disclose New Iranian Hacking Campaign Targeting Turkish Users          *

Researchers Found a New Oski Malware Variant Dubbed ' Mars Stealer' in Cyberattacks          *

Phishing Scammers Employing Malicious CSV Files to Drop Malware          *

German Petrol Supply Firm Oiltanking Severely Impacted by Cyber-attack          *

British Council Suffers Data Leak, 144000 Records Exposed          *

Gamaredon Threat Group Using New Malicious Files in Phishing Attack          *

Samba Patched a Critical Vulnerability that Let Hackers Gain Root Access          *

Hackers Abusing UPnP Routers to Perform Malicious Activities          *

WordPress Addresses a Critical Vulnerability in a Plugin with Over a Million Downloads          *

Russian Threat actors Employ Stealthy Malwares in Cyber Espionage Campaign Dubbed 'StellarParticle'          *

Taiwanese Electronics Manufacturer, Delta Hit by Conti Ransomware          *

Hackers Taking Over CEO accounts Using Rogue OAuth Apps          *

Phishing Operators Using a Windows Update to Install Malware          *

Researchers Discover Over 20,000 Vulnerable DCIM Systems Prone to Attacks          *

Finnish Diplomats’ Mobiles Infected with Pegasus Spyware          *

Patched Windows Vulnerability with New Public Exploits Lets Hackers Become Admin          *

Linux Version of LockBit Ransomware Targeting VMware ESXi Servers          *

Discord Suffers Major Outage Caused by API and Database Issues          *

Chaes Banking Trojan Hijacking Chrome with Malicious Extensions          *

New FluBot and TeaBot Campaigns Abusing Android Devices Worldwide          *

Phishing Attack Impersonate Shipping Giant 'Maersk' to Deploy Malware          *

A Video Game Company BANDAI NAMCO Shutdown Servers to Prevent Cyberattacks          *

Apple Patches New Zero-day Exploited to Hack macOS, iOS Devices          *

German Government Warns of APT27 Group Backdooring Business Networks          *

Linux System Service Flaw Enables Root on all Major Distros          *

DazzleSpy Malware Targets macOS Users in Watering Hole Attack          *

Threat Actors Employing Compromised Accounts to Deliver Large-scale Phishing Emails          *

Premium Subscription-Based Scam Targeting Android Users          *

TrickBot Malware Operators Added New Techniques to Elude Detections          *

Russian Threat Group Targeting Government and Defense Industries          *

New DeadBolt Ransomware Targets QNAP Devices, Demands 50 BTC for Master Key          *

Initial Access Broker Attack VMware Horizon Servers in Log4Shell Attacks          *

Canadian Government Hit by Cyberattack, Few Services Disrupted          *

Threat Actors Hacked Segway Store to Steal Customers' Credit Card Data          *

Emotet Spam Campaign Using Unconventional IP Address to Evade Security Detections          *

Phishing Campaign Employing Malicious PowerPoint Files to Push Malware          *

Threat Actors Now Actively Targeting a Patched Critical SonicWall RCE Bug          *

Two CWP Bugs Allow Code Execution as Root on Linux Servers          *

Android Malware BRATA Strikes Back with Enhanced Features, Wipes Device After Stealing Data          *

Hackers Encrypted Belarusian Railway's Internal Servers in Protest          *

Researchers Identified a New UEFI Firmware Implant in Cyberattacks          *

Hackers Backdoored Over 90 WordPress Themes, Plugins in Supply Chain Attack          *

Researchers Uncover 2 Flaws in Zoom Software, Resulting in Zero-click Attack          *

SonicWall Provides Temp Fix For Firewalls Stuck in Reboot Loop          *

CISA Discloses New 17 Vulnerabilities Exploited in Attacks          *

Threat Group Molerats Targeting Middle East in Cyberespionage Campaign          *

McAfee Agent Update Fixes Two High-Severity Vulnerabilities          *

F5 Patches 24 Vulnerabilities in its BIG-IP, BIG-IQ, and NGINX Controller API Products          *

Dutch National Cybersecurity Centre Warns of Lingering Log4j Threats          *

WordPress Plugin Flaw Puts Users of 20,000 Sites at Phishing and Code Injection Risk          *

Several Spyware Campaigns Stealing Credentials in Industrial Firms          *

DoNot Hacking Group Targeting Government and Military Entities in South Asia          *

Indonesia's Central Bank Discloses Ransomware Attack, Conti Leaks Data          *

Cisco Flaws Provide Remote Attackers Root Privileges via Debug Mode          *

Red Cross Cyberattack Leaks Data of 515,000 Individuals          *

SolarWinds Patches Serv-U Vulnerability Exploited for Log4j Attacks          *

Russian Attackers Employing Subscription-based Malware Service to Deploy Malware          *

Scammers Impersonating United States Department of Labor in Phishing Campaign          *

A New Stealthy Malware Targeting Users' Cryptocurrency Wallets and Passwords          *

Researchers Discloses a Critical Flaw in SAP NetWeaver AS ABAP and ABAP Platforms          *

Critical Flaw in IDEMIA Biometric Identification Devices Enable Unauthorized Access          *

Large-scale Phishing Campaign Targeting Renewable Energy Firms          *

Researchers Link New White Rabbit Ransomware to FIN8 Hacking Group          *

Earth Lusca Hackers Targeting High-Value Targets in Government and Private Sectors          *

Microsoft Issues Emergency Patches for Windows Server, VPN Bugs          *

Fashion Giant Moncler Discloses Data Breach Post Ransomware Attack          *

Microsoft Warns of Fake Ransomware Targeting Ukraine in Data-wiping Attacks          *

High-Severity CSRF Flaw in 3 WordPress Plugins Affected 84,000 Websites          *

Nintendo Warns of Phony Sites Pushing Fake Switch Discounts          *

eNom Data Center Migration Process Knocks Sites Offline          *

Zoho Patches a Critical Security Flaw in Desktop Central          *

An Undisclosed npm Dependency Flaw Affected Facebook's Create React App          *

Vulnerable Apple Safari Browser Allows Hackers to Track User Activity          *

Cybercriminals Abusing Public Cloud Infrastructure to Distribute Several RAT's          *

Goodwill's E-commerce Platform 'ShopGoodwill' Suffers Data Breach          *

Cisco Patches a Critical Bug Affecting Unified CCMP and Unified CCDM          *

Qlocker Ransomware Returns to Target QNAP NAS Devices Globally          *

Defense Contractor Hensoldt Discloses a Ransomware Attack          *

Massive Cyber Attack Knocks Down Several Ukrainian Government Websites          *

North Korean Hackers Stealing Millions from Cryptocurrency Startups Globally          *

Financially Motivated Hacking Group Targeting Cryptocurrency Startups          *

Threat Actors Compromised FIFA 22 Accounts Using Social Engineering Techniques          *

AWS Patched Security Vulnerabilities that Exposed AWS Customers' Information          *

Sentinel LABS Released an Unofficial Patch for Privilege Escalation Vulnerability, affecting all Windows Devices          *

OceanLotus Threat Group is using Web Archive Files to Install Backdoors          *

Magniber Ransomware Gang now Utilizing Signed APPX Files in Attacks          *

Microsoft Patched Critical Flaw in Windows HTTP Protocol Stack          *

Apple Fixed a Persistent Denial of Service (DoS) Flaw Dubbed 'doorLock'          *

Ransomware Operators Leveraging Log4Shell Exploit to Infect VMware Horizon Systems          *

Microsoft Patch Tuesday Security Advisory - January 2022          *

New SysJoker Backdoor Actively Targeting Windows, macOS, and Linux Users          *

Threat Actors Deploying New RedLine Malware Via Fake Omicron Stat Counter App          *

KCodes NetUSB Kernel Module Bug Affects Millions of Routers Globally          *

CISA Warns Federal Agencies of Ancient Flaws Still Being Exploited          *

Threat Actor Group 'Patchwork' Infecting Users with Ragnatela Malware          *

Researchers Link 'Abcbot' Botnet Operation to Xanthe Cryptomining Botnet Operators          *

Threat Actors Targeting Cybersecurity Researchers and Developers in Malware Campaign          *

State Hackers Employ New PowerShell Backdoor in Log4j Attacks          *

Vulnerable Open-Source NPM Libraries 'colors' and 'faker' Breaks Thousands of Apps          *

Linux Version of AvosLocker Ransomware Encrypting VMware ESXi Servers          *

Researchers Discovered Security Flaw like Log4Shell in H2 Database Console          *

A New 'Night Sky' Ransomware Targeting Corporate Companies          *

Microsoft Warns of Persistent Attacks Leveraging Apache Log4j Flaws          *

Y2K22 Bug Hits SonicWall's Email Security, Firewall Products          *

Hackers Employ BadUSB to Target Defense Firms with Ransomware          *

NHS Warns of Unknown Hacker Group Exploiting Log4Shell in VMware Horizon          *

FluBot Malware Operators Targeting Europe Posing as Flash Player App          *

FinalSite Hit by a Ransomware Attack that Disrupted Thousands of Schools          *

QNAP Warns of Attacks Targeted at Internet-exposed NAS Devices          *

North Korean Hacker Group "Konni" Attacks Russian Foreign Ministry          *

Credential Stuffing Attacks Impact 1.1 Million Users at 17 Companies          *

US Online Pharmacy "Ravkoo" Suffers Data Breach Post AWS Portal Hack          *

Hackers Abusing Google Docs Commenting Feature to Drop Malware          *

FBI Warns of an Ongoing Google Voice Authentication Scams          *

Microsoft Releases an Emergency Update to Address Windows Remote Desktop Issues          *

Threat Actors Injecting Web Skimmer Code to Steal Sensitive Information          *

U.S. Cellular Disclose Data Breach Post Billing System Hack          *

Hospitality Chain McMenamins Suffers Data Breach Post Ransowmare Attack          *

Apple iOS Vulnerable to Denial of Service Flaw "doorLock"          *

Broward Health Company Discloses a Data Breach, 1.3 Million Individuals Affected          *

Threat Actors Deploying Purple Fox Malware via Malicious Telegram Installers          *

Microsoft Release a Temporary Fix to Address Exchange Server Flaw          *

Kyoto University Loses 77TB of Research Data due to Backup Error          *

Netgear Leaves Six High Severity Vulnerabilities Unpatched in Nighthawk Router          *

PulseTV Discloses Data Breach of 200,000 Credit Cards          *

Researcher Discloses a Security Flaw in Uber's Email System          *

New iLOBleed Rootkit Wiping Data from Compromised HP Enterprise Servers          *

AvosLocker Ransomware Group Releases Decryptor Post Breaching US Police          *

Firmware Attack May Drop Persistent Malware in Hidden SSD Area          *

Chinese APT Hackers Employ Log4Shell Flaw to Attack an Academic Institution          *

Prominent Crypto Trading Platform, ONUS Suffers Ransomware Attack via Log4j Hack          *

Storage Devices of Several Vendors Impacted by Encryption Software Bugs          *

Norwegian Media Giant Amedia Suffers Disruption Due to Cyberattack          *

Researchers Disclose New Autom Cryptomining Malware Attacks Using Upgraded Evasion Tactics          *

Apache Releases Log4j 2.17.1 to Address a Remote Code Execution Bug          *

RedLine Malware Stealing Passwords Saved in Chromium-based Web Browsers          *

BlackTech Cyber-espionage APT Targeting Japanese Companies Using Flagpro Malware          *

Threat Actors Attempted to Compromise LastPass Users Master Passwords          *

Researchers Identify Infiltration of Riskware Apps on Samsung's Galaxy Store          *

Threat Actors Actively Abusing MSBuild for Cobalt Strike Beacon Execution          *

Photo Services Giant Shutterfly Hit by Conti Ransomware Attack          *

ech0raix Ransomware Group Actively Scanning for Vulnerable QNAP NAS Devices          *

Pirated 'Spiderman: No Way Home' Movie Torrent Delivers Crypto-Mining Malware          *

Several Vulnerabilities in Garrett Metal Detectors Let Hackers to Alter Configurations          *

Global IT Services Provider Inetum Suffers Ransomware Attack          *

Android Banking Trojan Spreads via Bogus Google Play Store Page          *

Blackmagic Patches Critical DaVinci Resolve Code Execution Flaws          *

Dridex Operators Targeting Covid-19 Victims via Omicron Phishing Taunts          *

Monongalia Health System Suffers Email Breach, Affecting 400,000 Individuals          *

NVIDIA and HPE Patches Apache Log4j Library Vulnerabilities in its Products          *

Researchers Disclose a New Variant of Babuk Ransomware          *

New Dell BIOS Updates Results in Laptops and Desktops Boot Issues          *

Apple Patches macOS Security Flaw Behind Gatekeeper Bypass          *

Researchers Uncover New Phishing Campaign Aimed at CoinSpot Crypto Exchange          *

Threat Actors Deploying Stealthy BLISTER Malware on Windows Devices          *

Pro Wrestling Tees Discloses Data Breach, 31,000 Customers Info Compromised          *

Apache Patches Two Severe Security Vulnerabilities in its HTTP Server          *

Microsoft Azure App Service Bug Exposes Customers Source Code Repository          *

CISA, FBI and NSA Releases Joint Advisory and Scanner for Log4j Vulnerabilities          *

Chinese-speaking Espionage Group Targeting Government and Transportation Sectors          *

Researchers Identify Stealthy Backdoors in Auerswald's COMpact 5500R PBX's Firmware          *

All Mobile Phone Generations Since 2G Vulnerable to Newly Identified Mobile Network Vulnerabilities          *

FBI: Threat Actors Actively Exploiting New Zoho Zero-Day Since October 2021          *

Over 820,000 Vulnerable WordPress sites are Exposed to Attacks          *

PYSA Ransomware Group was Behind Major Attacks in November 2021          *

Scammers Impersonate Pharmaceutical company 'Pfizer' in Phishing Attacks          *

Sony Life Insurance Employee Arrested for Stealing $154 Million Dollars          *

Hackers Taking Over Vulnerable Windows Domains via Elevation of Privilege Vulnerabilities          *

Researchers Suspect 'Cytrox' for Distributing 'Predator' Spyware on iPhones          *

Cyber Criminals Infected U.S. Federal Agency's Network with Backdoor          *

Malicious Android App Distributes New Joker Malware, Infected Over 500,000 Android Users          *

Hackers Distributing New Stealthy DarkWatchman Malware through Phishing Emails          *

Threat Actors Revived TellYouThePass Ransomware in Linux, and Windows Log4j Attacks          *

Threat Actors Exploiting Log4j Vulnerability to Deploy Dridex Banking Malware          *

Western Digital Urges Users to Upgrade their My Cloud Devices          *

Logistics Firm "Hellmann" Warns Users of BEC Emails Post Ransomware Attack          *

Threat Actors Infected Over 35,000 Computers in 2021 Using a New PseudoManuscrypt Malware          *

Threat Actors Targeting Spider-Man Franchise Fans with Credit-Card Harvesting          *

VMware Patches a Critical Flaw in Workspace ONE UEM          *

Phorpiex Botnet Surfaces Again with a more Sophisticated Variant          *

Khonsari Ransomware Group Targeting Self-Hosted Minecraft Servers          *

Apache Issues a New Patch to Fix 3rd Log4j Vulnerability          *

Researchers Suspect New Attack Vector Identified in Log4j Exploits may Expand the Attack Surface          *

Iranian State-Sponsored Hacker Abused Slack API to Steal Asian Airline Data          *

US Prominent Brewery and Hotel chain "McMenamins" Hit by a Conti Ransomware Attack          *

Log4j Hackers Switch to Injecting Monero Miners via RMI          *

Credit Card Skimmers Targeting Ecommerce Sector via Magecart Attacks          *

DDoS Mitigation Service Provider "Cloudflare" Suffers Widespread Latency and Timeouts          *

A New Espionage Campaign Targeting Telecom Organizations in Middle East and Asia          *

Hackers Steal Microsoft Exchange Credentials Using Backdoor "Owowa "          *

Threat Actors Begin Exploiting Second Log4j Vulnerability as a Third Flaw Emerges          *

Apple Releases an iOS Update for Remote Jailbreak Exploit          *

PyPi Removes 3 Python Packages Suspected of Dropping a Trojan on Victim Systems          *

Virginia Information Technology Agency Suffers Ransomware Attack          *

Workforce Management Solutions Provider, Kronos Suffers Ransomware Attack          *

Over 300,000 MikroTik Devices Still Vulnerable to Remote Hacking Flaws          *

AWS Suffers Second Outage in this Month, Impacts Twitch, Zoom, PSN, Hulu, others          *

Vulnerabilities in Wi-Fi and Bluetooth Chips Enable Hackers to Steal Passwords          *

Researchers Identify "ALPHV" as the Most Sophisticated Ransomware in 2021          *

Threat Actors Actively Exploiting Log4Shell Vulnerability to Deliver Malware on Vulnerable Machines          *

Partially Fixed Dell Computer Drivers Still Vulnerable to Windows Kernel-level Attacks          *

Threat Actors Targeting German E-Banking Users via New Phishing Campaigns          *

Volvo Cars Suffers Ransomware Attack, R&D Information Exposed          *

Researchers Link 'XE Group' to Eight Years of Credit Card Theft          *

Apache Foundation Releases a Security Patch for Second Log4j Vulnerability          *

Microsoft Patch Tuesday Security Advisory - December 2021          *

Mojang Studios Publishes an Emergency Minecraft Update Amid Critical Log4j Vulnerability Exploits          *

Threat Actors Dropping Agent Tesla Malware Using PowerPoint Macros in On-going Phishing Campaigns          *

Hackers Employ Known Info-stealing Malware "TinyNuke" Targeting French Users          *

Researchers Disclose Building Blocks of Widely Active Qakbot Banking Trojan          *

AWS Discloses the Cause Behind the Recent Massive Outage          *

Researches Disclose an Active Campaign Exploiting Over Vulnerable 1.6 Million WordPress Sites          *

17 Malicious NPM Packages Let Attackers to Steal Discord Tokens          *

Google Pushes Emergency Chrome Update to Fix Zero-day in its Chrome Browser          *

South Australian Government Data Breach Expose Over 80,000 Employees Info          *

Threat Actors Targeting Enterprises Using New Zero-day Exploit for Log4j Java Library          *

StrongPity Hacking Group Pushing Malware Using Malicious Notepad++ Installers          *

Dark Mirai Botnet Actively Targeting Unpatched TP-Link Routers          *

Hackers Targeting US Universities via Office 365 Phishing Campaigns          *

Vulnerable Hikvision's IoT Devices Targeted by Moobot Botnet          *

Emotet Malware is Now Installing Cobalt Strike Directly on Infected Devices          *

Fujitsu Cites the Breach on Japanese Ministries' on Stolen ProjectWEB Credentials          *

Cox Communications Disclose Data Breach Post Hacker Impersonates Support Agent          *

SanDisk SecureAccess Flaw Enables Brute Force Attacks Against Vault Passwords          *

Google Fixes High Severity Use-After-Free Vulnerabilities in its Chrome Browser          *

SolarWinds Hackers Targeting Government and Business Organizations Worldwide          *

Phony KMSPico Software Stealing Victims' Cryptocurrency Wallets          *

Hackers Employ Fake 'Spam Notification' Phishing Emails to Steal Microsoft Credentials          *

SonicWall Patches Several Security Flaws in its SMA 100 Series Appliances          *

Grafana Patches a Zero-day Flaw Post Exploits Spread Over Twitter          *

Popular Cloud Service Providers Affected by Multiple Vulnerabilities in Eltima SDK          *

AWS Suffers Outage, Impacts Ring, Netflix, and Amazon Deliveries          *

QNAP Warns Users to Secure NAS Devices Against Bitcoin Miner          *

Conti Ransomware Strikes Scandinavian Hotel Group "Nordic Choice"          *

Hundreds of SPAR Stores Suffer Massive Outage in Northern England          *

BitMart Cryptocurrency Exchnage Loses $200 Million Worth of Cryptocurrency Tokens Post Hack          *

Microsoft Seizes Domains Used by APT15 Chinese State Hacker Group          *

Researches Disclose 17 Malicious Frameworks Used to Attack Air-Gapped Networks          *

Pakistani Threat Actor "SideCopy" Targeting Indian and Afghan Governments          *

Malvertising Campaigns Distributing Backdoors and Malicious Chrome Extensions          *

Threat Actors Distributing Android Banking Malware "BRATA" via SMS Phishing Campaign          *

Researchers Disclose 14 New XS-Leaks Attacks on Well-known Web Browsers          *

Finland's National Cyber Security Centre Warns of New Android Banking Malware Campaigns          *

Threat Actors Employing RTF Template Injection Method in Phishing Campaigns          *

Phishing Actors Actively Exploiting Users Via Omicron Themed Phishing Campaign          *

Zoho Patches a Critical ManageEngine Bug Exploited in Wild          *

Pegasus Spyware Reportedly Hacked iPhones of U.S. State Department and Diplomats          *

Scammer Sentenced for Stealing Millions of Dollars of Cryptocurrencies via SIM Hijacking          *

Threat Actors Promoting a Malicious Android App to Steal Malaysian Bank Credentials, and MFA Codes          *

BlackByte Ransomware Group Exploiting Proxy-shell Flaws to Deploy Web-shells on Vulnerable Microsoft Exchange Servers          *

New Malware "NginRAT" Actively Targeting E-commerce Servers          *

Planned Parenthood LA Discloses Data Breach Post Ransomware Attack          *

Threat Actors Spreading Emotet via Fake Adobe Windows App Installer Packages          *

Four Android Banking Trojans Infected Over 300,000 Android Devices in 2021          *

Mozilla Patches a Critical Flaw in its Cross-platform Cryptography Library          *

TrickBot Malware Authors Employing New Ways to Evade Detection          *

Russian Threat Actors Employing Babadeda Crypter to Evade Detection          *

Hardware Giant "HP" Patches 8-year-old Critical Flaws in its Multi-functional Printers          *

Ohio-based DNA Testing Firm "DNA Diagnostics Center" Discloses Data Breach, Impacting 2.1 Million People          *

'Sabbath' Ransomware Operators Target Critical Infrastructure in US and Canada          *

North Korean Defectors and Journalists Targeted by a New Chinotto Malware          *

Threat Actors Utilizing Compromised Google Cloud Instances to Mine Cryptocurrency          *

Marine Services Provider "Swire Pacific Offshore" Suffers Ransomware Attack          *

Threat Actors Hide New Linux Malware Payload in Cron Jobs to Steal Credit Card Data          *

Stealthy Hacker Group "WIRTE" Targeting Governments in the Middle East          *

Researchers Warn of Attacks Targeting Recently Patched Apache HTTP Server Vulnerability Exploited in Wild          *

Japanese Multinational Conglomerate "Panasonic" Discloses Data Breach Post Network Hack          *

Furniture Retail Giant IKEA Email Systems Hit by Ongoing Cyberattack          *

Researchers Disclose New Zero-day Vulnerability in Windows 10 Mobile Device Management Service          *

APT C-23 Hackers Targeting Target Middle East Users Using New Android Spyware Variant          *

Researchers Uncover a New Stealthy JavaScript Malware Dropping Several Windows based RATs          *

Iranian Threat Actors Exploiting Microsoft MSHTML RCE Flaw to Steal Google, Instagram Credentials          *

Advanced Hacking Group Targeting Biomanufacturing Industries Via New Malware Variant          *

Researchers Linked North Korean Attackers to Several Credential Theft Campaigns          *

Malicious Python Libraries Steal Discord Tokens and Install Reverse Shells          *

PHP Deserialize Bug in CloudLinux Imunity360 May Lead to Remote Code Execution          *

"RedCurl," A Corporate Cyber Espionage Threat Group Strikes With New Hacking Tools          *

Cisco Patches a High Severity Bug in its Cisco ASA and FTD Firewalls          *

MediaTek Chips Bugs Affect 37% of All Smartphones and IoT Globally          *

VMware Patches Multiple Vulnerabilities in its vCenter Server and Cloud Foundation          *

Over 6 Million Sky Routers Vulnerable to Takeover Attacks for 17 months          *

New Android Banking Malware ‘SharkBot’ Hitting Targets in U.S., UK and Italy          *

North American Wind Turbine Giant "Vestas" Suffers a Data Breach          *

Iran Airlines "Mahan Air" Hit By Cyber Attack          *

Threat Actors Actively Exploiting New Windows Installer Zero-day Flaw          *

US SEC Alerts Investors About Ongoing Impersonation Attacks          *

Utah Medical Center Suffers Data Breach; 582k Patients Info Stolen          *

Threat Actors Hacking Vulnerable Microsoft Exchange Servers to Hijack Internal Email Chains          *

GoDaddy Suffers Data Breach Affecting 1.2 million Customers          *

Android Malware BrazKing Back with New Stealthy Techniques          *

Threat Actors Abusing Glitch Cloud Service to Host Short-lived Phishing Websites          *

APT Group Exploiting FatPipe VPN Zero-Day Bug Since May 2021          *

Vulnerable eCommerce Sites Allow Hackers to Deploy a New Linux Backdoor          *

Attackers Employing Domain Fronting Technique to Evade Malicious Traffic          *

Attackers Distributing Emotet Malware in New Spam Campaigns          *

Netgear Fixes Pre-Authentication Buffer Overflow Bug which Affects various Products          *

New TikTok Phishing Attack Targeting Influencers’ Accounts          *

Emotet Botnet Returns Using TrickBot Malware          *

Microsoft Released Emergency Updates to Fix Windows Server Authentication Issues          *

NPM Patched Private Package Names Leak and Serious Authorization Flaw          *

New Release Google Chrome 96 Shatters Twitter and Discord Web Apps          *

WordPress Sites are Targeted to Display Fake Ransomware Notes          *

High Severity Flaws Discovered in BIOS Firmware Affects Various Intel Processors          *

Hackers Actively Targeting Alibaba ECS Instances to Deploy Cryptojacking Malware          *

Lazarus Attackers Targeting Security Researchers with Trojanized IDA Pro Application          *

Attackers Hacked FBI Email Servers to Distribute Spam Campaign          *

American Retail Giant 'Costco' Reveals Data Breach After Identifying Credit Card Skimmer          *

A Zero-Day Flaw in the Windows User Profile Service Gets Free Unofficial Patch          *

BotenaGo Malware Targeting Millions of Routers and IoT Devices with 33 Exploits          *

TrickBot Hackers Abused Microsoft's App Installer in Spam Campaigns          *

WP Reset PRO Plugin Enables Attackers to Hijack Websites          *

Netflix, Instagram, and Twitter Users are Targeted by New Android Malware          *

TeamTNT Cybercrime Group Actively Targeting Vulnerable Docker Servers          *

German Medical Software Company Medatixx Hit by Ransomware Attack          *

Palo Alto Addresses Multiple Vulnerabilities in PAN-OS          *

Clop Ransomware Gang is now Exploiting SolarWinds Serv-U flaw in Attacks          *

Zombie-themed Phishing Emails Infecting Users with MirCop Ransomware          *

A New Variant of Mekotio Banking Trojan Spotted in the Wild          *

Microsoft Patch Tuesday Security Advisory - November 2021          *

Microsoft Warned Admins to Patch Exchange Server Vulnerability          *

Cisco Patches Hard Coded Credentials and Default SSH Key Issues in its Catalyst PON Switches          *

Researchers Disclose a Critical RCE Vulnerability in Linux Kernel's TIPC Module          *

Scammers Harvesting Microsoft O365, Google Logins Via Fake Proofpoint Emails          *

Researchers Disclose Two Critical SQL Injection Flaws in Philips Healthcare Informatics Solution          *

Prominent Stock Trading Platform "Robinhood" Suffers a Data Breach          *

Electronics Giant "MediaMarkt" Hit by Hive Ransomware Attack          *

Threat Actors Actively Targeting Patched Sitecore XP RCE Flaw          *

Central Depository Services (India) Limited Discloses a Data Breach          *

Babuk Ransomware Deployed via Microsoft Exchange ProxyShell Vulnerabilities          *

New Android Rooting Malware "AbstractEmu" Takes Over Mobile Phones Via Root Access          *

CISA Discloses a Catalog of Known Exploited Vulnerabilities for Multiple Products          *

UK Labour Party Discloses a Data Breach Post Ransomware Attack          *

Critical Flaw in Cisco Policy Suite's Hardcoded SSH Key Lets Remote Hackers Gain Root Access          *

US Defense Contractor Electronic Warfare Associates (EWA) Suffers Data Breach          *

Google Patches Actively Exploited Kernel Bugs in its Android November Patch          *

Microsoft Suffers Outage, Blocks Access to Onedrive and Sharepoint Files          *

Over 30,000 Unpatched GitLab Servers Vulnerable to Already Patched Critical RCE Flaw          *

Over 1.6 Million Devices in China Infected by Pink Botnet          *

Researchers Uncovered Multiple Critical Flaws in Pentaho Business Analytics Software          *

Threat Actors Used Kaspersky's Stolen Amazon SES Token in Office 365 Phishing Campaigns          *

Threat Actors Distributing Chaos Ransomware via Fake Minecraft 'alt list' Text Files          *

Threat Actors Deploying Snake Infostealer Malware Via Phishing Emails          *

Iranian Hackers Breach Israeli Web Hosting Provider"Cyberserve"          *

Canadian Province Health Care System Hit by Cyberattack          *

Researchers Disclose New Spook Ransomware Built on Prometheus Code Exposing All Victims          *

Pirated Sports Streamer Hacked Major American Sports Leagues and Tried to Extort MLB for $150,000          *

Hive Ransomware Group Launches New Variants Capable of Encrypting Linux and FreeBSD Devices          *

Israeli Internet Firm Hit By Ransomware Attack Led By Iranian Hackers          *

UMass Memorial Health Care Center Suffers Data Breach          *

Google Fixes the Flaw Causing Chromebooks Failing to Enroll Devices          *

Google Patches Two Zero-Day Bugs in Chrome Browser          *

macOS Flaw Allow Hackers to Deploy Rootkits          *

WordPress's OptinMonster Plugin Flaw Allow to Hijack Sites          *

Threat Actors Targeting YouTubers’ in Phishing Campaigns          *

Cybercriminals Delivering Ransomware via Malicious NPM Packages          *

Apple Fixed 22 Security Flaws in iOS and iPadOS Devices          *

Iranian Gas Station Hit by a Cyberattack          *

Hackers Employing a New Squirrelwaffle Malware In Spam Email Campaigns          *

Attackers Used a New Yanluowang Ransomware in Targeted Attacks          *

Russian Attackers Delivering Malicious Documents in Phishing Campaign          *

WordPress Plugin Flaw can Lead to Complete Takeover of Vulnerable Sites          *

South Korea's Telecommunications Firm 'KT Corporation' Suffers Nationwide Outage          *

CISA Advised to Fix Critical Flaw in Discourse Software          *

Attacker Hijacked NPM Library to Compromise Windows and Linux Devices          *

macOS Malware Utilizes New Evasion Techniques          *

New PurpleFox Backdoor Uses WebSockets for C2 Communication          *

SCUF Gaming International Suffers Data Breach: 32,000 Customers Affected          *

Attackers Distributing Malware Through Korean Webhard and Torrent Websites          *

New Threat Group Targeting South Asian Organizations Using Custom Malware          *

Chinese Attackers Exploited Windows Zero-Day Vulnerability in Cyberattacks          *

FBI Alerts on Fake Govt Sites Used to Steal Sensitive Information          *

Telecommunications Company 'Sinclair Broadcast Group' Hit by Ransomware Attack          *

The University of Sunderland Hit by Cyberattack          *

Olympus US Systems Hit by Cyberattack          *

Ecuador's Largest Bank 'Banco Pichincha' Hit by Cyberattack          *

Microsoft Fixed Compatibility Issues in Windows 11 KB5006674 Cumulative Update          *

Attackers Using Math Symbols in Phishing Campaigns          *

Microsoft Azure's Customer Hit by Largest DDoS Attack          *

Microsoft Patch Tuesday Security Advisory - October 2021          *

Apple Fixes a Zero-day Flaw in an Emergency iOS 15.0.2 Update          *

Google Fixes Four High-Severity Flaws in its Chrome Browser          *

American Pacific City Bank Hit by AvosLocker Ransomware Attack          *

Threat Actors Targeting Linux Devices Using New FontOnLake Rootkit          *

Ransomware Group FIN12 Aggressively Attacking Healthcare Sectors          *

Cox Media Group Discloses a Data Breach Post Ransomware Attack          *

Threat Actors Impersonating "QuickBooks" in Ongoing Phishing Campaigns          *

Global Brewery Firm BrewDog Exposes 200,000 Customers Sensitive Information          *

Researchers Disclose New Android Malware Infecting Android Mobiles          *

Telecommunication Firm 'Syniverse' Discloses a Database Breach          *

Microsoft Patched Flaw Prevent Security Updates for Azure Virtual Desktops          *

Apache Emergency Update Patched Incomplete Fix for Actively Exploited Bug          *

Researchers Disclose UEFI Bootkit Exploiting Windows Systems Since 2012          *

Live Streaming Platform 'Twitch' Suffers Massive Data Leak          *

APT Group "ChamelGang" Targeting Fuel, Energy, and Aviation Industries          *

Researchers Disclose Multiple Critical Flaws in Honeywell Experion PKS and ACE Controllers          *

Apache Patches a Zero-Day Vulnerability in its Web Server          *

The Telegraph Suffers Massive Data Breach;10 TB Database Leaked          *

Researchers Link Disparate Malware Attacks to Chinese Cyber-espionage Group          *

Unknown Ransomware Gang Encrypting VMware ESXi Servers Using Python Script          *

Industry Publication Giant Sandhills Global Hit by a Ransomware Attack          *

Misconfigured Apache Airflow Servers Leak Credentials          *

New Atom Silo Ransomware Group Targeting Unpatched Confluence Servers          *

An Unpatched Flaw Enables Contactless Payments From Locked iPhones          *

Threat Actors Targeting Commerzbank Customers Via New Malware Campaign          *

Hackers Steal Cryptocurrency from Coinbase Customers Using MFA Flaw          *

Threat Actor Group "GhostEmperor" Backdooring Windows 10 Systems Using a Rootkit          *

WhatsApp, Instagram and Facebook Suffers Massive Outage Due to a Configuration Error          *

Google Fixes Two Zero-Day Flaws in its Chrome Browser          *

Hackers Spreading Flubot Android malware Via Fake Security Updates          *

QNAP Patches 3 High-severity Stored Cross-site Scripting (XSS) Flaws Affecting NAS Devices          *

MoneyLion Discloses a Data Breach Post Credential Stuffing Attacks          *

Neiman Marcus Discloses a Massive Data Breach; 4.3 million Users Affected          *

Fake Amnesty International Pegasus Antivirus Affects Windows Systems          *

JVCKenwood Hit by CONTI Ransomware Attack          *

Threat Actors Hijack Windows Boot Manager With UEFI Bootkit          *

Microsoft Warns of Cyber Attacks Targeting Active Directory FS Servers          *

Hackers Draining Brazil's PIX Payment System Users' Bank Accounts          *

Researchers Linked New Tomiris Backdoor to Hackers Behind SolarWinds Cyberattack          *

Giant Trucking Company "Forward Air" Suffers Data Breach          *

Microsoft Suffers MFA Outage; Access to Microsoft 365 Services Blocked          *

Threat Actors Distributing a New Jupyter Malware Version Via MSI Installers          *

Threat Actors Stealing Financial Data from 378 Banking and Wallet Apps Via "ERMAC" Malware          *

Multiple Cyberattack Campaigns Abusing Atlassian Confluence RCE Flaw          *

Colossus Ransomware Hits Prominent Automobile Company in the USA          *

Twitter Web Client Suffers Worldwide Outage          *

Threat Actor Targets Indian Government With Commercial RATs Via Operation Armor Piercer Campaign          *

QNAP Patches Two Critical Flaws in its QVR Software          *

Prominent Communications Provider "Bandwidth.com" Hit By a DDoS Attack          *

New Malware 'BloodyStealer' Targeting Popular Gaming Platforms          *

Google Fixes High-Severity Zero-Day Flaw in its Chrome Browser          *

Researcher Discloses Exploit Codes for 4 iOS Zero-Day Flaws on GitHub          *

Microsoft Warns Organizations About a Wide-Scale Phishing-as-a-Service Operation          *

Colombian Real Estate Firm "Coninsa Ramon" Suffers Data Breach          *

Scammers Targeting US, Canada Users Via New Android Malware          *

SonicWall Patches a Critical Vulnerability in its SMA 100 Series Products          *

Threat Actors Deploying Web Shells Via Nagios RCE Vulnerabilities          *

Researchers Disclose a Remote Code Execution Flaw in AWS WorkSpaces          *

Netgear Patches a Remote Code Execution Vulnerability in its Routers          *

Threat Actors Employing BitRAT to Target South American Organizations via Spam Campaigns          *

Cisco Patches Three Critical Flaws in its IOS XR Software          *

Apple Patches a Zero-day Flaw Used to Hack iPhones and Macs          *

Threat actor Group "FamousSparrow" Breaching Hotels Worldwide Via ProxyLogon Exploits          *

Cyber Criminals Deploying Rootkit Via a New Bug in Microsoft Windows          *

Threat Actors Targeting Organizations in Latin America Via a New Banking Trojan          *

Threat Actors Employing New Malware Campaigns to Mine Cryptocurrency          *

Cring Ransomware Group Actively Exploiting Decade-Old Patched ColdFusion Vulnerabilities          *

Microsoft Exchange's Autodiscover Flaw Leaks 100K Windows Credentials          *

Russian Threat Actors Deploying TinyTurla Malware as Secondary Stage Backdoor          *

VMware Fixed Critical Arbitrary File Upload Vulnerability in its vCenter Server          *

Researchers Disclosed a New Zero-Day Vulnerability in macOS Finder          *

Republican Governors Association's Server Breached Via Microsoft Exchange Cyberattack          *

US Farmer Cooperative Suffered a BlackMatter Ransomware Attack          *

Over 1.4 Million COVID-19 Test Results From Multiple Hospitals Exposed in Paris          *

Scammers Sending Spam Emails to Promote Elon Musk-themed Cryptocurrency Scam          *

VoIP.ms Hit By a DDoS Attack; Multiple Services Impacted          *

AMD Patches An Information Disclosure Flaw in its Chipset Driver          *

Prominent Integration Service Provider, Travis CI Patches a Critical Security Flaw          *

Researchers Uncovered Phishing Campaign "Operation Layover" Targeting Aviation Industry          *

Threat Actors Deploying New Malware to Compromise Windows Subsystem for Linux Environment          *

Tamil Nadu Public Department Hit by Ransomware Attack          *

Netgear Patches Third Critical Bug in its Smart Switches          *

Microsoft Patches a Critical Flaw in Open Management Infrastructure Affecting Azure Cloud Services          *

Adobe Patches 36 Critical Vulnerabilities in its Products          *

Threat Actors Impersonate US Department of Transportation to Steal Microsoft Credentials          *

South Africa's Justice Ministry Suffers Ransomware Attack          *

Microsoft Warns of Information Leakage Vulnerability in Azure Container Instances          *

Cyber Criminals Deploying New Linux Cobalt Strike Beacons in Ongoing Cyber Attacks          *

Nitro Software Patches a Remote Code Execution Flaw in its Nitro Pro PDF          *

Threat Actors Spreading New ZLoader Malware Through Fake TeamViewer Installer          *

Millions of Computers Affected by HP Omen's Privilege Escalation Bug          *

Microsoft Patch Tuesday Security Advisory - September 2021          *

Telecommunications Provider "MyRepublic" Suffers Data Breach          *

New Android Banking Trojan Dubbed "S.O.V.A" Emerges With Growing Capabilities          *

TeamTNT Hacking Group Stealing Credentials Using New Open-Source Tools          *

Apple Patches Zero-click iPhone Exploit Deploying Pegasus Spyware          *

Google Patches 2 Zero-day Flaws in its Chrome Browser          *

“FudCo” Spam Empire Linked to Pakistan-based Software Firm          *

Howard University Suffers Ransomware Attack Leading to Network Shutdown          *

Threat Actors Targeting Kurdish Ethnic Group Via Mobile Spyware Attacks          *

New Windows 0-Day Attack Targeting Users Via Weaponized Office Documents          *

Meris Botnet Launches a 22 Million RPS DDoS Attack          *

Cisco Patches Multiple High-Severity Flaws in its IOS XR Software          *

Threat Actors Leaked 500,000 Fortinet VPN Credentials On Hacking Forum          *

Zoho Patches Critical Vulnerability in its ManageEngine ADSelfService Plus Solution          *

Critical Flaw in HAProxy Result in HTTP Request Smuggling Attack          *

FIN7 Group Deploying Backdoor Via Windows 11 Alpha-themed Word Documents          *

Ribbonsoft’s dxflib Library Flaw Allow Attackers to Remotely Execute Commands          *

New Malware Family Leverages CLFS Log Files to Evade Detection          *

Threat Actors Hacked Jenkins Project's Confluence Server to Install Monero Miners          *

NPM, Package Manager Patches a Critical Bug in the Package Pac-Resolver          *

Microsoft Links SolarWinds Serv-U SSH Zero-Day Attack to Chinese Hackers          *

Netgear Patches High Severity Bugs in its Smart Switches          *

Threat Actors Exploiting Confluence Bug to Install Cryptocurrency Miners          *

Billions of Bluetooth Devices From Multiple Vendors Remain Highly Vulnerable to BrakTooth Flaws          *

Dallas Public School Suffers Data Breach          *

Canada Immigration Accepts Additional 7,300 Applications in TR to PR Program Due to a Technical Bug          *

Cisco Patches Critical Authentication Bypass Flaw in NFV Infrastructure Software (NFVIS)          *

Over 60,000 Parked Domains Were Vulnerable to Domain Hijacking Attacks          *

Autodesk Targeted By SolarWinds Hackers Via Sunburst Backdoor          *

LockFile Ransomware Bypassing Protection Via Intermittent File Encryption          *

Microsoft Exchange ProxyToken Flaw Allow Attackers to Access User Email Messages          *

Multiple Vulnerabilities Identified in Fortress S03 Wi-Fi Home Security Systems          *

Threat Actors Selling a GPU Based Malware Via Hacker Forums          *

Annke Patches a Stack-based Buffer Overflow Flaw in its Video Surveillance Product          *

Synology Discloses Open SSL Vulnerabilities Impacting its NAS Devices          *

Attackers Abusing Proxyware Applications to Monetize Malware Campaigns          *

QNAP Discloses OpenSSL Flaws Impacting its NAS Devices          *

New York Credit Union Discloses An Insider Threat; 21GB of Sensitive Data Destroyed          *

Google App Bug Restrict Users To Make & Receive Calls          *

Attackers Distributing Phishing Mails Using Open Redirect Links          *

Researchers Warn Users About Four Emerging Ransomware Groups          *

FIN8 Threat Group Targeting Financial Institutions Using Sardonic Backdoor          *

U.S. Based Computer Retail Company Targeted by New SideWalk Backdoor          *

Critical F5 BIG-IP Vulnerability Affects Customers in Sensitive Sectors          *

VMware Fixes Four High Severity Flaws in vRealize Operations Manager API          *

Microsoft Power App Leaks 38 Million Sensitive Data Records Via Misconfigured Tables          *

Threat Actors Actively Exploiting 15 Vulnerabilities to Hack Linux Systems          *

Microsoft Warns Customers of Azure Critical Cosmos DB Vulnerability          *

Cisco Patched a Critical Flaw in its APIC Software          *

Boston Public Library Suffers System Wide Outage          *

Cyber Criminals Deploying BazaLoader Malware via Fake DDoS Notifications          *

Emsisoft Releases Free Decryptor for SynAck Ransomware Victims          *

Compromised WhatsApp Mod Distributing Malicious Payloads Via Supply Chain Attack          *

Threat Actors Discreetly Marketing ShadowPad Malware Among Chinese Espionage Groups          *

NSO Group Deploying Pegasus Spyware Via New Zero-click iPhone Exploit          *

OpenSSL Vulnerabilities May Be Exploited For Multiple Cyber Attacks          *

ACROS Security Releases a Micro Patch to Address PetitPotam Flaw          *

Mozi, an IoT Botnet Targets Network Gateways and IoT Devices          *

Threat Actors Actively Exploiting Newly Disclosed Realtek SDK Vulnerabilities in the Wild          *

AT&T Denies Data Breach Post Attacker Auctions 70 Million User Database          *

Google Discloses Information of Unpatched Windows AppContainer Vulnerability          *

Cloudflare Thwarts the Largest DDOS Attack Ever Recorded          *

Microsoft Exchange Servers Under Attack By New LockFile Ransomware          *

SAC Wireless, A Nokia Subsidiary Discloses Data Breach Post Conti Ransomware Attack          *

Phishing Campaign Used a XSS Flaw in UPS Website to Distribute Malware          *

Vulnerable Microsoft Exchange Servers Under Attack Via ProxyShell Vulnerabilities          *

Attackers Hacked US Census Bureau Servers Using Citrix Vulnerability          *

Critical Vulnerability Discovered in the Universal Plug-and-Play (UPnP) Service of Multiple Cisco Routers          *

BadAlloc Flaw Affects BlackBerry's QNX Real-Time Operating System (RTOS)          *

Chase Bank Suffers Data Leak Via Technical Glitch          *

Data Exfiltration Attacks Can Bypass Cisco Safety Products          *

Ransomware Attacks Hit Maine's Rural Sewage Treatment Plants          *

Memorial Health System, Florida Suffers Ransomware Attack          *

Attackers Targeting Multiple Users in Mexico via Neurevt Trojan          *

Adobe Patches Critical Photoshop Security Flaws          *

Critical Flaw in ThroughTek's Point-to-Point (P2P) SDKs Impacting Million IoT Devices          *

Fortinet Delays Patching a Zero-day Bug in its Web Application Firewall (WAF)          *

Multiple Realtek Related Flaws Affecting its Wi-Fi SDKs; Impacting Nearly a Million IoT Devices          *

Tokio Marine's Singapore Branch Suffers Ransomware Attack          *

Threat Actors Selling Ficker Info Stealer Malware as a Malware-as-a-Service (MaaS)          *

Iranian Government-linked Hacker Groups Conducting Cyber Espionage Activities in Israel          *

Attackers Use 'CAPTCHA' Images to Trick Users into Bypassing Browser Warnings          *

Brazilian National Treasury Suffers Ransomware Attack          *

Threat Actors may use Middleboxes Related Flaws for TCP Reflected Amplification          *

Threat Actors Distributing WarzoneRAT via Compromised WordPress Sites          *

TA505 Threat Group Installing ServHelper RAT Using New Techniques          *

Multiple STARTTLS Related Bugs Found in Popular Email Clients          *

Trend Micro Addresses Wild Zero-Day Vulnerabilities          *

T-Mobile Suffers Massive Data Breach; 100 Million Customers Data Stolen          *

The Infamous AlphaBay Darknet Market Has Reopened for Business          *

Microsoft Spotted Hackers Using Morse Code in Phishing Campaigns to Evade Detection          *

Threat Actors Employing CAPTCHA Protected Phishing Campaigns          *

Scammers Impersonating FINRA in an Ongoing Phishing Campaign          *

Multiple Flaws in Wodify Fitness Platform Allow Hackers to Take Control          *

New AdLoad Malware Variant Escapes through Apple's XProtect Defence          *

Ford Flaw Exposed Sensitive Information from Internal Systems          *

Attackers Can Now Spy On DNS Traffic via Bugs in Managed DNS Services          *

Intel Releases Patches for High-Severity Flaws in NUC 9 Extreme Laptops, Ethernet Linux Drivers          *

Cinobi Banking Trojan Targets Cryptocurrency Exchange Users via Malvertising          *

One Million Stolen Credit Cards Data Leaked on Carding Marketplace          *

Gigabyte Suffers RansomEXX Ransomware Attack          *

Microsoft Confirms another Zero-Day Bug in Windows Print Spooler          *

Accenture Hit by LockBit Ransomware Attack          *

Attackers Stole Cryptocurrency worth of $600 Million          *

Researchers Revealed eCh0raix Ransomware Targeting Both NAP and Synology NAS Devices          *

Microsoft Patch Tuesday Security Advisory - August 2021          *

Adobe Patched Several Critical Vulnerabilities in its Products          *

Russian Federal Executive Authorities Targeted by Chinese Threat Actors          *

Chinese Threat Actors Targeting Prominent Southeast Asian Telecom Firms          *

Joplin City Suffers from Ransomware Attack          *

FatalRAT Trojan Exploiting Telegram          *

New FlyTrap Malware Compromises Thousands of Facebook Accounts          *

New Chinese Spyware Used in Widespread of Cyber Espionage Attacks          *

VMware Patches Security Vulnerabilities in Workspace ONE Access and Identity Manager          *

INFRA:HALT Flaws Affect Embedded TCP/IP Stack Widely Used in OT Devices          *

Cisco: Firewall Manager RCE Flaw is a Zero-day, Patch Incoming          *

Go & Rust Languages Affected by Critical IP Address Validation Flaw in "net" Library          *

New York City Public School's Info Leaked; Officials Confirm          *

Threat Actors are Actively Exploiting Vulnerable Home Routers          *

Solarmarker Malware Targeting Healthcare and Education Sectors          *

Attacker Scanning Microsoft Exchange Servers for ProxyShell Vulnerability          *

New APT Threat Group Targeting Microsoft IIS Servers          *

Google Fixed Several High-Severity Security Flaws in Android OS          *

Linux Variant of BlackMatter Ransomware Encrypting VMware ESXi Machines          *

New Android Malware Vultur Abuses Accessibility Services          *

Energy Group ERG Reports Minor Interruptions Post Ransomware Attack          *

Google Patches Several Chrome Vulnerabilities          *

New Cobalt Strike DoS Vulnerability Allows Takedown of Attackers’ Servers          *

Advanced Technology Ventures Discloses a Data Breach Attack          *

Cisco Patches Pre-Auth Security Flaws in its VPN Routers          *

Romania Cryptojacking Attackers Targeting Linux Devices          *

Multiple TransLogic Firmware Vulnerabilities Discovered; Major Impact on North America Hospitals          *

Italy's Lazio Region Suffers Ransomware Attack          *

New Meteor Malware Used in Iranian Railway Attack          *

Multiple Vulnerabilities Patched in WordPress Download Manager          *

Node.js Patched Severe HTTP Vulnerability          *

Russians Attackers Compromised Federal Prosecutors Email Accounts          *

New Vulnerabilities could let Attackers to Compromise Zimbra Server via Email          *

Researchers Discovered New Haron Ransomware Gang          *

A New .Stolen Ransomware Deleting Disc Shadow Copies Post Encrypting Disc Drives          *

LockBit 2.0 Ransomware Uses Group Policies to Encrypt Windows Domains          *

Attackers Compromised Chipotle’s Marketing Account to Deliver Phishing Emails          *

Multiple Flaws Discovered in 3 Open-Source Software          *

DarkSide Ransomware Gang Returns as New BlackMatter Ransomware          *

Attackers Installing PlugX Malware Variant on Compromised MS Exchange Servers          *

Northern Ireland Suspends COVID Certificate Service Post Data Breach          *

Attackers Posed as Aerobics Instructors to Target Employees          *

APT Attackers Distributed Android Trojan via Syrian E-Government Portal          *

UC San Diego Health Suffers Data Breach Post Phishing Attack          *

Oracle Fixes Critical Flaws in its Products          *

LemonDuck Malware Targeting Windows and Linux Systems          *

Signal Patches a Critical Flaw in its Android Versions          *

Apple Patches a Zero-day Flaw Exploited in the Wild          *

XCSSET MacOS Malware Targets Telegram Accounts and Google Chrome Data          *

Researchers Disclose 3 Zero-day Flaws in Kaseya Unitrends Backup Solution          *

Kaseya Gets Universal Decryptor Tool to Help Victims          *

Critical Security Flaws Reported in Etherpad          *

Law Firm Campbell Conroy & O'Neil Suffered Ransomware Attack          *

Malicious NPM Package Steals Chrome Passwords on Windows via Recovery Tool          *

Federal Agencies Say China Breached Dozens of Pipeline Companies between 2011 and 2013          *

Akamai Suffers DNS Outage; Prominent Websites and Online Services Across the Globe Impacted          *

Dell Patches 3 Critical Vulnerabilities in OpenManage Enterprise Service          *

Atlassian Patches Critical Vulnerability in its Jira Data Center and Jira Service Management Data Center Products          *

Ecuador's State-run CNT Telco Suffers Ransomware Attack          *

Juniper Fixed Multiple Flaws in its Products          *

Attackers Distributing Remcos RAT via Visual Basic          *

Microsoft Seizes Homoglyph Domains used in BEC Campaign          *

Saudi Aramco Suffers Data Breach; 1 TB Stolen Data for Sale          *

16-Year-Old Bug Impacts Millions of HP, Samsung, Xerox Printers          *

Bug discovered in Fortinet lets Attackers to run Code as Root          *

WIFIDemon Leading to Remote Code Execution Attacks on iOS Devices          *

Magecart Attackers Using Unique Techniques to Avoid Detection          *

Cisco Patches High Severity Flaw in its ASA & FTD Software Versions          *

Pegasus Spyware Infecting Prominent Personnel's Mobile Devices Across the Globe          *

WildPressure APT Targeting Windows and macOS Systems via New Malware Variant          *

Google Patches Zero-Day Vulnerability in its Chrome Browser          *

D-Link Fixes Multiple Security Bugs in its DIR-3040 Router Version v1.13B03          *

Scammers Target Comparis Group Users Post Ransomware Attack          *

Multiple Vulnerabilities in NuGet Packages Affect .NET Platform          *

Microsoft Patched Windows Hello Authentication Bypass Vulnerability          *

Recent ZLoader Malware Attacks Adopt New Macro-Related Delivery Method          *

Sage X3 Patched Multiple Security Flaws in its Enterprise Resource Planning (ERP) Product          *

Attackers Spreading BazarBackdoor Malware via Nested RAR and ZIP Archives          *

SonicWall Warns of Imminent Ransomware Attacks Targeting SMA 100 & SRA VPN Appliances          *

VMware Fixed Flaws In ESXi and ThinApp Applications          *

Chinese Hackers Utilizing SolarWinds Zero-Day to Target US Defense Companies          *

New BIOPASS RAT Live Stream Victim's Computer Screen          *

Kaspersky Password Manager Generated Passwords used in Brute Force Attacks          *

Adobe Patch Tuesday Security Advisory - July 2021          *

Microsoft Patch Tuesday Security Advisory - July 2021          *

Kaseya Fixed Multiple VSA Bugs Exploited in REvil Ransomware Attack          *

Flaws in Cisco BPA and WSA could lead to Privilege Escalation Attacks          *

Mitsubishi Electric Fixed Bugs in Air Conditioner Control Systems          *

Fashion Retailer Guess Suffers Data Breach Post Ransomware Attack          *

SolarWinds Patches a Zero-day Flaw Exploited in the Wild          *

Insurance Firm CNA Suffers Data Breach After Ransomware Attack          *

Mint Mobile Suffers Data Breach; Hackers Port Victims Phone Numbers          *

Morgan Stanley Reports Data Breach After Vendor Reports Accellion Hack          *

Nobelium Hacking Group Reportedly Accessed Microsoft's Customers Support Tools          *

Crypto Mining Scams Targeting Victims via Fraudulent Android Apps          *

Malspam Campaign Deploying Cobalt Strike Payloads Posing as Kaseya VSA Security Update          *

Microsoft Addresses Critical Edge Bug Leading to UXSS Attacks          *

CISA Discloses 15 Vulnerabilities Affecting Philips Vue Healthcare Products          *

Pro-Trump Social Media Site "GETTR" Suffers Data Breach          *

QNAP Patches Critical Flaw in NAS Backup and Disaster Recovery Solution          *

Insurance Giant AJG Reports Data Breach post a Ransomware Attack          *

Threat Actor Group Wizard Spider Linked to a New Ransomware 'Diavol'          *

NETGEAR Patches 3 Critical Bugs in DGN-2200v1 Series Routers          *

Microsoft Urges Azure Users to Update their PowerShell Tool          *

Threat Actors Hacked Mongolian Certificate Authority to Deploy Backdoors          *

Threat Actors Targeting Unpatched Cisco ASA Devices Aggressively Post the PoC Release          *

Kaseya Suffers Massive Ransomware Attack; Hundreds of Companies around the Globe Affected          *

Retail Giant Coop Shuts Down 500 Stores Post Kaseya Ransomware Attack          *

Microsoft Releases Emergency Patch for Windows Zero-day PrintNightmare Vulnerability          *

Attackers Target Microsoft's Halo Development Servers via Dependency Hijacking          *

Law Enforcement Officials Seize DoubleVPN Service's Servers          *

WD Storage Devices Vulnerable to Ongoing Cyber-Attacks          *

LinkedIn Suffers Data Breach, 700 Million Users Data Exposed          *

DarkRadiation Ransomware Gang Targeting Linux & Docker Instances          *

Threat Actors using WIM Files to Bypass Security Solutions via Phishing Emails          *

Microsoft Signs a Rootkit Malware Disguised as Windows Driver          *

Unpatched Flaws in PlingStore Apps may Lead to Supply-Chain Attacks          *

Scammers Impersonating FINRA Support in a New Phishing Campaign          *

Fortinet Patches 2 Vulnerabilities in its Web Application Firewall (WAF)          *

High Severity Flaws Found in Vulnerable NVIDIA Jetson Chipsets          *

Spam Campaign Hides "handwritten" Links in Tinder Profile Images          *

Pakistan Hackers are Targeting Indian Power Company with ReverseRat          *

Mercedes-Benz Suffers Data Breach          *

Multiple Bugs in Dell SupportAssist; Impacts 30 Million PCs          *

Researchers Discovered Security Vulnerability in 2G Mobile Data Encryption Standard          *

Conti Ransomware Gang Leaked Tulsa City's Police Citation Documents          *

Covid-19 tracking app ‘MassNotify’ Auto-installed on Massachusetts Android Phones          *

VMware Fixed Critical Vulnerability in Carbon Black App Control          *

A Partially Fixed Bug in SonicWall Affecting 800K Firewalls          *

Vulnerabilities in Open Design Alliance's SDK Impacting Multiple Vendors          *

Nuclear Research Agency of South Korea was Hacked Using VPN Flaw          *

Multiple Vulnerabilities Discovered in Schneider PowerLogic Devices          *

Zephyr RTOS Patched Multiple Bugs in its Bluetooth LE Stack          *

Healthcare Giant Grupo Fleury Suffers Ransomware Attack          *

Palo Alto Networks Fixed Critical Vulnerability in Cortex XSOAR          *

Microsoft Patched High-Pitched Noise Bug in Windows 10          *

Threat Actors are Sending Fake Extortion Emails by Impersonating DarkSide Gang          *

Supermarket Chain Wegmans Suffers Data Breach          *

Andariel Hacking Group Targeted South Korean Industries with New Malware Campaign          *

Poland Officials Targeted in Russian Cyber Attacks          *

Russian Consumer Watchdog Bans VyprVPN & Opera VPN Services          *

Gelsemium Hackers Target NoxPlayer with Supply Chain Attack          *

Reproductive Biology Associates Clinic Suffers Ransomware Attack          *

Critical Flaw in ThroughTek Allows Millions of Cameras to Spy          *

Newly Discovered iPhone Bug can Disable iPhone's Wi-Fi Functionality          *

Researchers Warn of SolarMarker Malware Deployed via SEO Poisoning          *

Attackers Bypass Office 365 MFA in BEC Attacks          *

Attackers can Access Victim Information via Vulnerability found in Microsoft Power Apps          *

Instagram Bug Allows Attacker to View Private Accounts Details of the User          *

Propane Service Provider AmeriGas Discloses Data Breach          *

Cake Box Suffers Data Breach; Credit Card Numbers of Customers Exposed          *

Clop Ransomware Gang Suspects are Arrested in Ukraine          *

Google Patched Zero-Day Bug in Chrome Web Browser          *

Scammers are Sending Fake Ledger Devices to Steal Cryptocurrency          *

Thousands of VMWare vCenter Servers are Still Vulnerable to Remote Code Execution Attacks          *

Apple has Fixed 2 Zero-Day Flaws in iOS Devices          *

Hackers can Spy on Samsung Mobile Users using Pre-installed Applications          *

Interpol Removed Multiple Fake Online Pharmaceutical Websites          *

Spain's Ministry of Labor and Social Economy Suffers Cyberattack          *

Avaddon Ransomware Group Shuts Down          *

Food Supply Giant Edward Don Shuts Down Temporarily Due to Ransomware Attack          *

7-Year-Old Privilege Escalation Polkit Flaw Affecting Linux Devices          *

McDonald's Discloses Data Breach; Customers and Employee Information Exposed          *

Audi and Volkswagen Suffers Data Breach; 3.3 Million Customers Affected          *

Food Giant JBS Pays $11 million to REvil Ransomware Group          *

Famous Video Game Company Electronic Arts Suffers Data Breach          *

WAGO Controller Flaws Could Lead to Industrial Process Disruptions          *

Stolen Login Credential Marketplace Slilpp is Seized by Law Enforcement          *

Fastly CDN Outage Impacted Multiple Websites          *

Latest Necro Python Malware has New Exploits and Crypto Mining Capabilities          *

Phishing Campaign Targets U.S. Financial Industry Regulatory Authority (FINRA)          *

Memory & Storage Manufacturing Giant ADATA Suffers Ransomware Attack          *

Microsoft Patched Vulnerability In MSGraph Component          *

PuzzleMaker Threat Actors Targeting Windows 10 Systems using Chrome Zero-days          *

STUN Servers Abused for DDoS Attacks          *

New Siloscape Malware Targets Windows Containers to Access Vulnerable Kubernetes Clusters          *

Attackers are Actively Targeting Vulnerable VMware vCenter Servers          *

Google Fixed Multiple Critical Bugs In Latest Android Security Updates          *

Adobe Patches 41 Vulnerabilities in 10 Products          *

Intel Fixes 73 Security Vulnerabilities          *

Microsoft Patch Tuesday Security Advisory - June 2021          *

EvilCorp Cybercrime Gang Mimics PayloadBIN to Evade US Sanctions          *

US Truck Manufacturer Navistar Discloses Data Breach          *

Cisco Patches High-Risk Security Flaws in its Multiple Products          *

Open Source Application "Have I Been Pwned" Used to Expose Stolen Credentials          *

Nantucket Steamship Authority Suffers Ransomware Attack          *

Researchers Disclosed Critical Bug In Realtek Wi-Fi Module          *

Threat Actors Deploying SkinnyBoy Malware using Malicious MS Word Documents          *

Threat Actors Bypassing Ransomware Defense in Antivirus Solutions via Whitelisted Applications          *

Huawei Fixed Privilege Escalation Bug in its USB LTE Dongle          *

FUJIFILM Suffers Ransomware Attack          *

North Korean Hacking Operation Targeting South Korea Government Units          *

Multiple Products from Cisco, Akamai & Linux affected by Vulnerability in Lasso Library          *

Multiple Vulnerabilities Reported in Industrial Switches from Several Vendors          *

Swedish Health Agency Shuts Down SmiNet's Database after Multiple Intrusion Attempts          *

Attackers Exploiting Critical Zero-day Flaw in WordPress Plugin          *

Researchers Disclosed Two New Attack Techniques which Modifies Certified PDF Document Content          *

New Phishing Campaign Targeting Walmart Users Discovered          *

Two Domains Used In Nobelium Phishing Campaign Seized          *

Food Giant JBS Shuts down Temporarily due to Cyberattack          *

BazaLoader Campaign Spreading Phishing Emails to Compromise Users Windows System          *

FBI Reports Attackers are Exploiting Unpatched Fortinet Devices          *

Researchers Warn of Facefish Backdoor Infecting Linux Devices          *

New VSCode Extensions Bugs may Lead To Supply Chain Attacks          *

Siemens Patches a High-severity Memory Protection Bypass in its PLCs          *

Canada Post Reports Data Breach Post Supplier Ransomware Attack          *

Threat Actors Distributing Trojanized AnyDesk Installer via Malvertising Campaign          *

SolarWinds Hackers Deploying New 'NativeZone' Backdoor via a New Supply Chain Attack          *

Klarna Mobile Application's Technical Bug Leaking Users Data          *

New Epsilon Red Ransomware Abusing Unpatched Microsoft Exchange Servers          *

Threat Actors Actively Exploiting a Command Injection Flaw in SonicWall's NSM On-Premises Products          *

TPG Shutdown the Legacy TrustedCloud Service Post Data Breach          *

Threat Actors Deploying Data Wiper Malware Disguised as Ransomware          *

Checkbox Survey Patches Arbitrary Code Execution Flaw Being Exploited in the Wild          *

Attackers Impersonating Devices via Newly Disclosed Bluetooth Bugs          *

HPE Patches Critical Zero-day Flaw in Systems Insight Manager (SIM)          *

Office 365 Bug Sending Exchange Online, Outlook Emails to Junk Folder          *

Malware Attack Knocks out Siegfried Group’s Network          *

Multiple Japanese Agencies Suffer Data Breaches in a Supply Chain Attack          *

Hackers Sent Racist Registration Emails Pretending to be from Walmart          *

Zeppelin Ransomware Back in Operation with an Updated Malware          *

Apple Patches a Zero-day Flaw in TCC Framework          *

Japan’s Omiai Dating App Data Breach; Over 2 Million Users Data Exposed          *

VMware Patches Critical Remote Code Execution Flaw in vCenter          *

CryptoCore Campaign Hacking Cryptocurrency Exchanges Globally          *

Scheme Flooding Vulnerability Enables Hackers in Identifying Users          *

Florida Water Treatment Plant Suffered a Cyber Incident Prior to the Poisoning Attack          *

Ivanti Addresses a High-Severity Vulnerability in Pulse Connect Secure VPN          *

Electronic Giant Bose Reports Data Breach Post Ransomware Attack          *

Trend Micro Patches 3 Vulnerabilities in Home Network Security Devices          *

Threat Actor Behind Infamous UPMC Breach Gets Verdict; Faces 7 Years in Prison          *

Apple Patches 3 Zero-days Affecting macOS & tvOS Devices          *

Microsoft Releases a Simulated Tool for Attack Scenarios          *

23 Misconfigured Android Applications Leaking Users Personal Data          *

Google Fixes Chrome Browser Crash on Windows 10 and Linux Platforms          *

Google Patches Heap-based Buffer Overflow Vulnerability in Chrome          *

CNA Financial Paid $40 Million Ransom to Evil Corporation          *

FBI Warns Organizations about Conti Ransomware          *

E-commerce Giant Mercari Suffers Massive Data Breach in Codecov Incident          *

QNAP Warns Organizations about Qlocker Ransomware Impacting Vulnerable HBS Devices          *

Stolen Dominos India Data Up for Sale on Dark Web          *

Air India Hacked; 4.5 Million Passengers Information Leaked          *

Android Releases Patches for 4 New Zero-day Vulnerabilities          *

New Malware Campaign Delivers Fake Ransomware          *

Slack Messaging Application Suffers Massive Outage          *

Over 600,000 WordPress Sites Impacted by a Vulnerability in WP Statistics Plugin          *

Magecart Hackers Deploying PHP-based Backdoor via Website Favicons          *

New Banking Trojan Bizzaro Targeting European and South American Banks          *

Experts Warn About Ongoing AutoHotkey-Based Malware Attacks          *

FBI Warns of a Spear Phishing Campaign Delivering Advanced Malware          *

Student Insurance Provider Guard[.]me Suffers a Data Breach          *

Insurance Giant AXA Hit by Ransomware Attack          *

Threat Actors Deploying Lizar Malware under the Disguise of Ethical Hacking Tool          *

APT36 Group Mimicking Legitimate Indian Military and Defense Organizations          *

Monday[.]com Source Code Accessed by Codecov Hackers          *

Toshiba's Subsidiary Unit Struck by DarkSide Ransomware Group          *

Cisco Patches a Zero-day Bug in Cisco AnyConnect Client          *

Rapid7 Source Code Accessed in Codecov Supply-chain Attack          *

AMD Patches Two Flaws Bypassing AMD's SEV Protection System          *

Snip3 Crypter Service Deploying Multiple RAT Variants          *

Hackers Delivering Malware via Microsoft Build Engine Files          *

Citrix Patches Vulnerability in Workspace Application for Windows          *

New Cryptocurrency Phishing Scam Stealing Recovery Phrases via Twitter          *

Colonial’s Pipeline Hack; $5 Million Ransom Paid          *

QNAP warns of Zero-day Bug in Roon Servers          *

Herff Jones Suffers Data Breach          *

New Lorenz Ransomware Affecting Multiple Organizations Globally          *

Brenntag Hack; $4.4 Million Ransom Paid          *

DarkSide Ransomware Servers Seized Post-Colonial Pipeline Attack          *

Lemon Duck Cryptominer Strikes Again          *

Ireland’s Health Services Reports Ransomware Attack; $20 million Ransom Demanded          *

Threat Actor Leaks Stolen Data Post D.C. Police Columbia Hack          *

FBI and ACSC Warns of Avaddon Ransomware Attacks          *

VideoLan Patches Auto-updater Bug in VLC Media Player          *

Ransomware Attack on the City of Tulsa, USA          *

All Wi-Fi Devices are Vulnerable to FragAttacks          *

A New Qualcomm Vulnerability Impacting Android-based Mobile Devices          *

Over 25% of Tor Exit Relays Spied on Users Dark Web Activities          *

Google Patches 19 Bugs in Chrome 90.0.4430.212          *

Twitter's New Feature Tip Jar Exposing Sensitive Information          *

Cuba Ransomware Partners With Hancitor for Spam-Fueled Attacks          *

Law Firm Jones Day Hit by Data Breach          *

Attackers are Exploiting Authoritative DNS Servers via TsuNAME DNS Bug          *

NatWest Bank Scheduled Payments Bug May Cost Customers Money          *

Russian Hackers Are Allegedly Exploiting 12 Vulnerabilities in the Wild          *

New Stealthy Rootkit Targeting High-Profile Organizations          *

Twilio & HashiCorp Reports Cyber Attacks Post Codecov Supply Chain Hack          *

UNC2529 Threat Group Delivers Three New Malware Strains via Phishing Emails          *

Six Unpatched Critical Flaws Detected in Remote Mouse Application          *

Foxit Patches Remote Code Execution (RCE) Vulnerability in Foxit Reader          *

Colonial Pipeline Suffers from Alleged Ransomware Attack          *

Microsoft Edge Crashes while Playing YouTube          *

Scammers Impersonate "SNL in Elon Musk" Show in a Cryptocurrency Scam          *

VMware Patches Critical Flaw in vRealize Business for Cloud Virtual Appliance          *

HP Enterprise Fixes Critical Bug In Edge Platform Tool          *

New Windows Malware 'Pingback' Using ICMP for C2 Operations          *

N3TW0RM Ransomware Targeting Israel-based Companies          *

Alaska Court System Went Offline Amid Cyber Attack          *

Critical 21Nails Exim bugs Affecting Vulnerable Linux Servers          *

Network Solution and Register.com Reports DNS Outage          *

Tesla Car Hacked Remotely using Drones          *

Dell Fixes a 12-year-old Bug in DBUtil BIOS Driver          *

Insight Global's Insider Threat Leaks COVID-19 Information          *

Complexcodes is Selling Subscription based Commodity Malware "WeSteal"          *

Chinese Attackers Hacked Russia's Largest Nuclear Submarine Designer          *

A New Malspam Campaign Distributing Rust-based Buer Malware Variant          *

Intel and AMD Chips are Vulnerable to Spectre Side-Channel Attacks          *

Pulse Secure Addresses VPN Zero-Day Vulnerability          *

LuckyMouse Targets Multiple Organizations via Sys-update Toolkit          *

Critical IP Address Validation Vulnerability found in Python          *

Mount Locker Ransomware Uses New Tricks to Evade Detection          *

ISC Patches Several BIND Vulnerabilities in DNS Servers          *

Researchers Expose a New Iranian State-Sponsored Ransomware Campaign          *

SolarMarket RAT Uses Google SEO Tactics to Lure Victims          *

First Horizon Bank Hacked; $1 Million Stolen          *

2 iOS Zero-day Vulnerabilities fixed by Apple          *

Chinese Hackers Attacking Military Organizations in South-East Asia          *

Stealthy Backdoor Infecting Linux Systems          *

FBI Shares 4 Million Emotet Botnet Stolen Email Addresses          *

PHP Composer Bug Ends Up in a Widespread Supply-Chain Attacks          *

Hotbit Cryptocurrency Exchange Down Post Cyberattack          *

ParkMobile Stolen Customers Data Exposed Online          *

Whistler Resort Municipality Suffers Ransomware Attack          *

Microsoft Uncovered Critical Code Execution Bugs In IoT, OT Devices          *

DigitalOcean Data Breach Exposes Customer Billing Information          *

Brazil's Rio Grande Do Sul Court System Suffers Ransomware Attack          *

Attackers are exploiting SonicWall Zero-day for Ransomware Attacks          *

F5 Discloses KDC Spoofing Vulnerability in BIG-IP Consoles          *

UnitingCare, Queensland Systems Taken Down          *

UK Rail Network Merseyrail Hit by Lockbit Ransomware          *

Google Patches Critical RCE Vulnerability in Chrome          *

MangaDex Stolen Database Leaked Online          *

NTLM Relay Attack Abuses Windows RPC Protocol Vulnerability          *

Guilderland Central Schools Hit With Malware Attack          *

Apple iCloud Mail Server Outage          *

Fake Microsoft DirectX 12 Deploying Crypto-Stealing Malware          *

D.C. Police Columbia Hacked; Ransom Demanded          *

Oilfield Services Giant Gyrodata Discloses Data Breach          *

Microsoft Teams Suffers Outage          *

Attackers Spreading FluBot Malware via Android Devices          *

Prometei Botnet Operators Exploiting Obscure Microsoft Exchange Servers          *

New Cryptomining Malware Turning Vulnerable Windows, Linux Devices into Bots          *

Hacker Leaks 20 million BigBasket's Data for Free          *

Critical RCE Bug Reported in Homebrew Package Manager          *

Hackers Exploiting PulseSecure to Deploy SUPERNOVA Malware          *

Qlocker Malware Encrypting QNAP Devices Using 7zip          *

Twitter Mistakenly Sends Spam Emails          *

ToxicEye Trojan Abusing Telegram to Steal Data          *

PasswordState is Latest Victim of Supply Chain Attack          *

WhatsApp Pink Malware Auto Replies to Skype, Signal and other Messengers          *

Exchange Online Down; Microsoft 365 Outage Affects Email Delivery          *

Pareto Android Botnet Attacks Smart TV Ads          *

1.3 Million Windows RDP Servers Login Credentials found in Hacker Forum          *

Multiple Vulnerabilities in Google Chrome Patched          *

Microsoft Partially Fixes Windows 7 and Server 2008 R2 Vulnerability          *

Attackers Infecting Google Play Store via Fake Applications          *

Eversource Energy Reported Data Breach          *

Attackers Actively Exploiting 4 Pulse Secure Vulnerabilities          *

Attackers Target Multiple Networks in a Supply Chain Attack Post Codecov's Data Breach          *

Revil Gang Attempted to Extort Apple via Alleged Quanta Hack          *

Zero-day Vulnerabilities Patched in SonicWall Email Security          *

Remote Code Execution Vulnerabilities Discovered in Cosori Smart Air Fryer          *

Malvertising Campaign "Tag Barnakle" Compromised 120 Ad Servers          *

Attackers Hacking Android Devices Remotely via WhatsApp Flaws          *

Lazarus APT Using BMP Images to Distribute Trojan          *

Geico Suffers Data Breach; Policyholders' Driver's License Numbers Stolen          *

Researchers Found Campaign Mimicking Microsoft Store, Spotify Sites, and Chess Application          *

WordPress Patches XXE Flaw in PHP 8          *

Domino's India Database Hacked; 10 Lakh Credit Card Details Leaked          *

Critical Remote Code Execution Vulnerability in Juniper Devices Discovered          *

Attackers Exploiting Critical Flaw in Facebook's Live Videos Feature          *

Multiple Vulnerabilities Reported in EtherNet/IP Stack for Industrial Systems          *

Malware Spreading via Xcode Projects; Infecting Apple's M1-based Macs          *

Attackers Stealing Credentials via Operation "Overtrap"          *

Fortinet Discloses a New FormBook Variant          *

Hackers Gained Access via Vulnerable VPN Device in Capcom Ransomware Attack          *

Critical Zero-day Vulnerability Found in Desktop Window Manager (DWM)          *

Swinburne University, Australia Suffers Data Breach          *

Twitter Suffering Worldwide Outage          *

Google Released Chrome 90          *

Cyberattack on The University of Hertfordshire, UK          *

Tata Communications Data Breached via Route Mobile          *

Over 100 Million Devices Vulnerable to DNS Vulnerabilities          *

Attackers Tampering Popular App Stores to Distribute Malicious Apps          *

Researchers Disclosing Second Chrome Zero-day Exploit          *

SAP Fixes Critical Flaws in SAP Commerce, NetWeaver & Business Client          *

Spying Android RAT "BRATA" Strikes Back          *

New Phishing Campaign Delivering Fake Antivirus Billing Notices          *

Malware hidden in Fake Browserify NPM package          *

Adobe Fixes 10 Vulnerabilities in Multiple Products          *

QBot Operators Using QBot & IcedID Malware as Final Payload          *

Malicious Facebook Ads Dropping Malware on Systems          *

Bakker Logistiek Suffers Ransomware Attack          *

Microsoft Office 365 Phishing Campaign Evades Detection with Malicious Javascript Code          *

10 Malicious Applications in App Gallery Infected with Joker Malware          *

Microsoft Patch Tuesday Security Advisory - April 2021          *

New Malware "Saint Bot" Snatching User Passwords          *

IcedID Malware Delivered via Contact Forms          *

Swarmshop Hacked; Over 600,000 Stolen Records Exposed          *

Pharmaceutical Giant "Pierre Fabre" Suffers REvil Ransomware Attack          *

Multiple Gigaset Android Smartphones are Infected with Malware          *

New Android Malware Auto-spreads to Devices using WhatsApp Auto-replies          *

Lazarus Hacking Group Strikes Back with Vyveva Backdoor          *

Rockwell Automation Addresses 9 Critical Vulnerabilities in FactoryTalk AssetCentre          *

VISA Warns of Increasing Web Skimming Attacks          *

LinkedIn Data Breach; 500 Million Users Data Posted On Dark Web          *

Unpatched Fortinet VPN devices are exploited by Cring Ransomware          *

Cisco Patches Cisco SD-WAN vManage Software Vulnerabilities          *

Chinese Hackers Attacks Government & Military of Vietnam          *

A New Spear-Phishing Campaign Deploying Malware Using Voice Changing Software          *

Attackers Targeting Firms Using new Banking Trojan "Janeleiro"          *

Hackers Deploying 'more_eggs' Malware via Fake LinkedIn Job Offers          *

European Commission and EU Organizations Suffer Cyber Attack          *

Booking.com Fined $560,000 by DPA          *

VMware Fixes Critical RCE Flaw in Carbon Black Cloud Workload          *

Data of Over 279 "Only Fans" Accounts Posted Online          *

TU Dublin and National College of Ireland Suffers from Ransomware Attack          *

Attackers Actively Exploiting Unpatched SAP Applications          *

Hackers Exploiting Windows OS "BITS" Component          *

$38M Worth of Gift Cards Sold by Cybercriminal on Russian Hacking Forum          *

Outlook "Cannot send this item" Error Patched by Microsoft          *

Clop Ransomware Gang Leaks Multiple Universities Sensitive Data Online          *

Attackers are targeting Japan Industries with Multiple Backdoors          *

Fake jQuery Plugin Deploying Malware on Systems          *

Electronics Manufacturer "Asteelflash" Suffers REvil Ransomware Attack          *

Brown University Suffers Cyberattack          *

US DOJ Warns of Fake Covid-19 Vaccine Survey Phishing Campaign          *

FBI and CISA Warns of Exploits Against Unpatched Fortinet FortiOS Servers          *

Threat Actors Attempt to Extort Ubiquiti Post Data Breach          *

Researchers Report Spike in Ransom DDoS Attacks          *

Bogus Pen-Test Company "SecuriElite" Targeting Security Professionals          *

Facebook Data Breach; 533 Million Users Data Exposed          *

Citrix Addresses Multiple Vulnerabilities in Hypervisor          *

SolarWinds Patches Four Vulnerabilities in Orion Platform          *

Attackers Hacked PHP's Git Server to add Backdoors          *

Malicious “System Update” Android Malware is Compromising Devices          *

German Parliament Members Targeted by Spear-Phishing Attack          *

BazarCall Malware Infecting Systems via Malicious Phone Calls          *

New 5G Security Flaw allows Denial-of Service Attacks & Data Access          *

Campaigns Spotted Targeting Gamers via Malware hidden in Game Cheats and Mods          *

Fat Face Discloses Data Breach; Pays $2 Million Ransom          *

VMware Fixes Two Critical Flaws in vRealize Operations Manager          *

Harris Federation Hit by Ransomware Attack          *

Slack Disables New Feature Amid Security Related Concerns          *

npm Fixes a Critical Networking Vulnerability in "netmask" Library          *

OpenSSL fixes Two High Severity Vulnerabilities          *

Microsoft Patches Windows 10 Secure Boot Vulnerability          *

Weintek Patches Remote Code Execution Flaws in its Product Range          *

Evil Corporation Employs Hades Ransomware to Evade Detection          *

Two Critical Vulnerabilities Patched in a WordPress Plugin          *

FBI Warns of Mamba Ransomware          *

Mobikwik Data Breach; Over 5 Million Users Data Exposed          *

Threat Actors Exploiting Critical Flaws in GE's Universal Relay Products          *

Apple Patches Webkit Browser Engine's Zero-day Vulnerability          *

Backblaze Reports Data Breach; 9,245 Users' Metadata Exposed          *

New Cloudflare's Page Shield Feature notifies Malicious JavaScript Dependencies          *

Purple Fox Operators are Targeting Vulnerable Windows Systems          *

Two Dozen Malicious Chrome Extensions are distributing Malware Globally          *

Microsoft Patches Privilege Elevation Flaw in PSExec          *

Multiple Security Vulnerabilities discovered in Cisco Jabber          *

Adobe Fixes Critical Vulnerability in ColdFusion          *

CISA and FBI warn about Phishing Attack spreading TrickBot Malware          *

Colorado & Miami Universities Suffers Data Breach due to Vulnerable Accellion FTA Servers          *

High Availability Server Manufacturer Stratus Suffers Ransomware Attack          *

Shell Suffers Data Breach due to usage of Vulnerable Accellion FTA Servers          *

Attackers Exploiting Vulnerable Qualcomm Graphic Components on Android Devices          *

CNA Insurance Firm Suffers Ransomware Attack; New Malware Family Used          *

IoT maker "Sierra Wireless" Reports Ransomware Attack; Site Taken Offline          *

Attackers are taking Control of Vulnerable Apache OFBiz ERP via RCE Vulnerability          *

Phishing Campaigns Bypassing Secure Email Gateways          *

Phishing Mails containing fake COVID-19 Relief Checks downloads Dridex Trojan          *

Threat Actors Hacked Windows, iOS, Android Users via Zero-day Attacks          *

Mirai Botnet Exploiting Critical Flaws in Network Security Devices          *

MangaDex Taken Offline Post Cyberattack          *

Black Kingdom Ransomware Exploits Zero-day Flaws in Microsoft Exchange Servers          *

Road Ministry warns Multiple Indian Government Organizations post Cyber-Attack Threats          *

Fake Telegram Desktop Application downloads AZORult Malware          *

CISA releases CHIRP Tool for SolarWinds Malicious Activity Detection          *

CopperStealer Malware is Hijacking Social Media Accounts          *

DDoS-as-a-Service exploits Citrix Devices          *

New Malware XcodeSpy Targets iOS & macOS Developers          *

Acer Suffers Ransomware Attack; $50 million Ransom Demanded          *

Zoom Screen-sharing Bug is exposing Sensitive Data to Unauthorized Users          *

Post Microsoft Outage files are missing from SharePoint          *

Phishing Campaign Targets US Taxpayers          *

Pysa Ransomware is Targeting US & UK Educational Institutions          *

Twitter Image can be abused to hide Malicious Files          *

Hackers Exfiltrating Stolen Data via JPG Files          *

Mimecast Says SolarWinds Hackers Accessed Some Source Code          *

Ransomware Attack on Pune District Smart City Costs Project Operators 50 Million Dollars          *

RTM & Quoter Ransomware are Targeting Russian Finance and Transport Organizations          *

A Time Zone Bug Crashing iOS Clock Application          *

Microsoft Releases Mitigation Tool for Exchange Servers Affected in ProxyLogon Hack          *

WeLeakInfo Hacker Site Hacked          *

Phishing Domains can now Detect Virtual Machines using JavaScript          *

Blender Software Developer Reports Cyber Attack          *

Researchers Discovered Nim based Malware Exploiting Devices          *

Microsoft Suffers Outage; Multiple Services Affected          *

Metamorfo Banking Trojan abuses AutoHotKey to steal User Information          *

Threat Actors Exploiting Avira Antivirus to Deliver Banking Trojans via DLL Side Loading Attack          *

New ZHtrap Botnet Malware is turning Infected Targets to Honeypots          *

Three Privilege Escalation Vulnerabilities fixed in Linux Kernel          *

Threat Actors Exploiting Linux based Systems with new RedXOR Malware          *

A New Zero-day WordPress Vulnerability enables Site Takeover          *

Google Patches Zero-day Vulnerability in Chrome          *

Mozilla Addresses Linux Crashes, Apple Silicon Hangs in Firefox 86.0.1          *

Molson Coors Reports an Outage          *

Windows 10 Emergency Updates fixes Printing Crashes          *

Researchers Disclose New and Powerful Version of BADHATCH PoS Malware          *

Spanish Government Labor Agency Suffers Ransomware Attack          *

New DEARCRY Ransomware Exploiting Vulnerable Microsoft Exchange Servers          *

OVH Data Center Reported Massive Outage          *

Second Cyber Attack on Norway's Parliament          *

Maryland Attorney Seizes 5th Domain Used in COVID-19 Vaccine Phishing Attacks          *

Hackers Accessed Verkada's Live Surveillance Cameras          *

iPhone Call Recorder App Exposes People's Conversations          *

F5 BIG-IP issued patches for Critical Remote Code Execution Vulnerabilities          *

Microsoft Discloses 3 New Malware Strains in SolarWinds Hack          *

Microsoft Patch Tuesday Security Advisory - March 2021          *

GitHub Users were forcibly Signed out to patch a Security Bug          *

9 Android Application on Google Play Store found to be distributing Malware Dropper          *

Researchers Disclose Side-Channel Attacks on Vulnerable Intel CPUs          *

Global Aviation Industry Tech Supplier "SITA" Suffers Massive Data Breach          *

Apple Addresses Remote Code Execution Vulnerability in WebKit          *

Adobe Patches Flaws in Creative Cloud, Connect & Frame-maker          *

Researchers Disclose New Tor based Malware "gafgyt"          *

New Sarbloh Ransomware Encrypting Victim Files through Political Agenda          *

Flagster Bank Suffers Data Breach due to usage of Vulnerable Accellion FTA Servers          *

Google Chrome Blocks Port 554 as a Counter to NAT Slipstreaming Attacks          *

European Banking Authorities Exchange Servers Hacked          *

Microsoft Themed Phishing Attack Stealing User Credentials          *

Over 15 Schools in UK Suffered Cyberattack          *

Multiple Cisco Products Exposed to DoS Attack due to Snort Vulnerability          *

Microsoft Releases a Tool for ProxyLogon Security Verification on Exchange Servers          *

Microsoft Outlook Breached; Over 20,000 Organisations Affected Globally          *

Supermicro, Pulse Secure Patches Vulnerabilities in BIOS & UEFI Products          *

Attackers Hiding ObliqueRAT Trojan in Image Files via Steganography          *

GRUB2 Patches Multiple High Severity Vulnerabilities in Boot Loader          *

Over 6,700 VMware Servers Exposed post Exploit Code Release          *

Hackers Deploying Malware on Compromised Websites via SEO Techniques          *

Over 100 Italian Banks Targeted via Ursnif Trojan          *

VMware Patches Remote Code Execution Vulnerability in View Planner          *

Attackers Targeting Investors via BEC Campaigns          *

CompuCom Suffers Malware Attack Leading to Service Outage          *

Botnet Campaigns Abusing Bitcoin Blockchains & Deploying Skidmap Malware          *

AOL Phishing Campaign Reported Stealing User Credentials          *

Researchers Disocvered DoS Vulnerability in Eclipse Jetty          *

Qualys Suffered Data Breach due to Zero-day Vulnerability in Accellion FTA Server          *

PrismHR Suffers Massive Outage          *

Malaysia Airlines Discloses a Data Breach          *

Chinese Cybercriminals Exploiting 4 Zero-day Vulnerabilities in Microsoft Exchange          *

Universal Health Services lost $67 Million by Ryuk Ransomware Attack          *

Google Patches Zero-day Vulnerability in Chrome          *

Dependency Confusion Vulnerability Exploited to steal Linux/Unix Password Files          *

Ransomware Attack on Aviation Giant Bombardier          *

Dutch e-Ticketing Platform Ticketcounter Suffers Data Breach          *

Chinese Hackers Targeting Indian Power Grids & Seaports          *

World's Leading Dairy Products Group Lactalis Hit by Cyber Attack          *

Drive Corruption Vulnerability in Windows 10          *

LazyScripter Actors Target Airlines with Remote Access Trojans          *

New Variant of Ryuk Ransomware Observed Self-propagating in Local Network          *

Cisco Patches Critical Severity Authentication Bypass Vulnerability in Cisco ACI MSO          *

Sequoia Capital Suffers Data Breach post a Failed BEC Attack          *

FriarFox Browser Extension Targeting Tibetan Organizations          *

Windows 10 BSOD Issues Resolved via Intel Wireless Driver Updates          *

Online Dating Application Gaper Vulnerable to Multiple Critical Zero-day Flaws          *

US Federal Reserve Suffers Massive Outage Nationwide          *

Researchers Discloses Potential Code Injection Flaw in NodeJS Library "systeminformation"          *

TD Bank Recovering from Systemwide Banking Outage          *

XBOX Live Suffers Global Outage          *

Accellion Vulnerability Exposes Pharmacy & Employee Data in Kroger Data Breach          *

Keybase Patches a Bug that Exposes Deleted Sensitive Media to Attackers          *

Threat Actors Deploying New Variants of MINEBRIDGE RAT via Word Documents          *

Powerhouse Management Suffers from Large Scale DDoS Attacks          *

WACUP Patches Several Bugs in Winamp Media Player          *

Over 8 Million COVID-19 Test Results Leaked          *

TietoEVRY IT Services Suffers Ransomware Attack          *

Microsoft Begins Windows 10 21H1 Beta Testing          *

VMware Patches Critical RCE Bug in vCenter          *

Python Software Foundation Addresses Two Vulnerabilities          *

US Shares Information on AppleJeus Malware          *

LinkedIn Suffers Global Outage for Two Hours          *

Fake Adobe Flashplayer Update Installs Adware Bundle          *

Brave Browser's "Tor Mode" Leaks Onion Queries in DNS Traffic          *

Certification Giant Underwriters Laboratories (UL) Suffers from Ransomware Attack          *

Magecart Hackers Stealing Credit Card Information via Google Apps Script          *

Attackers Targeting Apple's M1 Chip via Malicious Adware Extension          *

Cuba Ransomware Triggers Data Breaches In US Cities & Agencies          *

Dutch Research Council (NWO) Suffered Cyberattack          *

RIPE NCC Suffers Credential Stuffing Attack          *

OpenSSL Project Releases A New Patch For Three New Vulnerabilities          *

VMware Patches Vulnerability in vSphere Replication Software          *

Windows 10 Secure Boot Patch Exposes BitLocker Recovery Key          *

Kia Motors USA Suffers Massive IT Outage          *

EMSISOFT Exposes Internal Log Data Generated by their Test Products          *

EXMO Cryptocurrency Exchange Suffers DDoS Attack          *

Researchers Discloses Unpatched Vulnerabilities in SHAREit for Android OS          *

Yandex Insider Threat Compromises 4887 Customer Accounts          *

Telegram's "Super-Secret" Feature Exposes Self-Destructing Media Files to Attackers          *

Siemens Patches Multiple Vulnerabilities in Virtualization Software          *

PayPal Patches XSS Vulnerability in Currency Converter Feature          *

Over 30 Mobile Health Apps Exposing Records of Millions of Users          *

Fortinet Patches Multiple Vulnerabilities In SSL, VPN & Web Firewall Products          *

Critical XSS Vulnerabilities Fixed In WordPress Plugin "NextGen Gallery"          *

Windows Kernel Escalation of Privilege Zero Day Bug is Fixed in Microsoft Patch Tuesday          *

CISA Warns of High-Severity Vulnerabilities in Fuji Electric Products          *

Researchers Discloses Multiple Vulnerabilities in YouPHPTube and AVideo          *

Dairy Farm Suffers REvil Ransomware Attack          *

C-Level Executives Targeted via Phishing Attack          *

Over 3 Million Cook County Court's Sensitive Data Records Exposed          *

Mozilla Enhances Firefox Security Against Super Cookies & Disables Adobe Flash Support          *

Microsoft Azure Function Vulnerable to Privileges Escalation & Docker Escape          *

Apple Patched iOS, iPadOS & tvOS Multiple Vulnerabilities          *

Law Enforcement Agencies around the Globe takes Down Emotet Ransomware Gang          *

Oscorp - Credential Stealing Android Malware          *

Lebanese Cedar APT Targeted Telecoms, Hosting, ISPs Worldwide          *

North Korean Hackers Attacking Security Researchers          *

Cisco Discloses Multiple Vulnerabilities in Small Business Routers          *

Researchers Discloses Critical Vulnerabilities in F5 BIG-IP Products          *

Well-known Religious Services "The Temple" Suffers a DoS Attack          *

Linux Systems Under Attack via FreakOut Malware          *

QNAP Warns Users of Dovecat Crypto Miner Malware          *

Microsoft Discloses Methods used by SolarWinds Hacker Group to Avoid Detection          *

1.9 Million Pixlr Users Stolen Data Available on Free Forums          *

Adult Social Media Platform Fleek Leaking Users Explicit Data          *

4.1 Million AnyVan Users Data Compromised via Data Breach          *

VLC Media Player Patches Several Remote Code Execution Vulnerabilities          *

Cisco Fixes PreAuth Remote Code Execution Vulnerabilities          *

Crypto Exchange LiveCoin Shutting Down Post Cyber Attack          *

Microsoft Enabling Full Automation Support for Microsoft Defender AV          *

Cisco Fixes Windows DLL Injection Vulnerability in Cisco AnyConnect Secure Mobility Client          *

Raindrop Malware Observed in SolarWinds Hack          *

FireEye Releases Tool to Detect SolarWinds Hack Techniques          *

SolarWinds Malware "Raindrop" Hiding in Modified 7Zip Source Code          *

Oracle Releases Quarterly Critical Patches          *

Multiple Twitter Accounts Hacked in "Elon Musk" Crypto Scam          *

Malwarebytes Breached by SolarWinds Threat Actors          *

Apple Removes Vulnerable MacOS Features in MacOS 11.2 Beta 2          *

Cybercriminals Blunder Exposes Stolen Credentials in Plain Sight          *

Threat Actors Bypassing Two-Factor Authentication for Several Cloud Services Accounts          *

Microsoft Patches Zero Day Vulnerability in Defender Antivirus          *

Google Bans 164 Offending Android Applications from Play Store          *

Mozilla Releases Security Updates for Thunderbird          *

Scammers Blackmailing Coinmama Users via Porn Backlinks          *

Windows 10 Bug Corrupts Hard Drive via Single Line Command          *

NSA Urges Organizations Not to Use Third Party DNS Resolvers          *

Bitdefender Releasing Free Decryptor for DarkSide Ransomware Victims          *

Scottish Environment Protection Agency (SEPA) Suffering Conti Ransomware Attack          *

Microsoft Announces Windows Zerologon Flaw ‘Enforcement Mode’          *

Threat Actors Compromising Mimecast's SSL Certificates          *

Researchers Exposes United Nations Data Breach          *

Linux Mint OS Patches ScreenSaver Bypass Vulnerability          *

UK's Nohow International Cloud Data Breached          *

Threat Actors Exploiting Windows "Finger Command" via Phishing Campaign          *

Large Scale Data Breaches Targeting Russian Federation in Year 2020          *

Over 390,000 Users Data Compromised in Capcom Data Breach          *

DoS Vulnerability in RockWell Automation RSLinx Classic Software          *

Breached COVID-19 Vaccine Data Leaked Online via Hacker Forums          *

Fake Trump Scandal Video Distributing QNode Malware          *

SolarWinds Threat Actors Accessing Department of Justice's Email Servers          *

FBI Warns Organizations on Egregor Ransomware          *

Pysa Ransomware Hits Hackney Council & Leaked Data Up for Sale          *

FIN7 Hacking Group Leveraging JSSLoader Malware          *

Indian Government Websites Leaking COVID-19 Patient's Test Results          *

Earth Wendigo Campaign Exfiltrating Emails via JavaScript Backdoor          *

British Airways Plans £3bn Breach Settlement          *

North Korean Hacking Group Supply Chain Attack Targeting Stock Investors          *

Multiple Vulnerabilities in Fortinet FortiWeb WAF Leading to Arbitrary Code Execution          *

Phone and Email Scammers Impersonating as ACSC          *

Ransomware Attack Knocks Out Funke Media Group          *

ElectroRAT Malware Drains Funds from 6,500 Digital Wallets          *

Lake Regional Healthcare Suffers Ransomware Attack          *

NameSouth's Data Breached by NetWalker Ransomware Group          *

Sabre Corporation's 2017 Data Breach LawSuit Verdict          *

Microsoft’s Windows Core Polaris Leaked Online          *

10,000 American Express Credit Card Holder's Data Breached          *

Vodafone's ho. Mobile Suffers Data Breach Impacting 2.5m User Records          *

Hackers Launch Swatting Attacks by Exploiting Smart Home Devices          *

SolarWinds Supply Chain Attack Led Hackers Access to Microsoft Source Code          *

Secret Backdoor Account Detected in Several Zyxel Firewall & VPN Products          *

CISA Releases Sparrow.ps1 Tool for Azure/M365          *

Japanese Aerospace Firm Kawasaki Warns of Data Breach          *

Japanese Game Developer Koei Tecmo Suffers Data Breach          *

FreePBX Developer Sangoma Technologies Hit by Conti Ransomware          *

Authentication Bypass Vulnerability in SolarWinds Orion API          *

Whirlpool Hit by Nefilim Ransomware Attack          *

Adobe Flash Player Reaches End-Of-Life (EOL)          *

Phishing Campaign Using Chase Banking Security Notice Emails          *

Cisco IP Phone TCP Packet Flood Denial of Service Vulnerability          *

Smart Doorbell Devices Easily targeted by Hackers          *

Cybercriminal's Bulletproof VPN Service Shuts Down          *

Authentication Bypass Vulnerability in Bouncy Castle          *

Chinese APT Group Operation StealthyTrident          *

Critical Security Vulnerabilities Reported in Dell Wyse Thin Clients          *

Ransomware Threat Actors Using 'SystemBC' Malware as Backdoor          *

QNAP Fixes High Severity Vulnerabilities in NAS Devices          *

CrowdStrike Launches Reporting Tool to Audit Azure AD Permissions          *

Chinese Mobile Giant Xiaomi Recording Millions of Users Private Web & Phone Usage          *

Al Jazeera Journalists Targeted via Pegasus Spyware          *

VMware Vulnerability Exploited in SolarWinds Supply Chain Attack          *

Credential Stealer Malware Targeting Financial Institutions          *

Clop Ransomware Attack Detected on Symrise          *

Microsoft Defender Blocking Known Malicious SolarWinds Binaries          *

Mozilla Releases Security Fixes for Multiple Security Vulnerabilities          *

Sextortion Campaign Targeting iOS, Android Users via Goontact Spyware          *

New Windows Trojan Steals Browser Credentials, Outlook Files          *

5G Network Architecture Multiple Vulnerabilities Discovered          *

Contact Form 7 WordPress Plugin Emergency Patch Released          *

MoleRats APT Variant Stealing Sensitive Data          *

Unauthenticated Command Injection Flaw Exposes D-Link VPN Routers to Attacks          *

Iranian Rana Android Malware Snooping on Instant Messenging Platforms          *

Samsung Fixes Critical Android Bugs          *

Adobe Releases Security Updates          *

COVID-19 Vaccine Data Leaked          *

Ransomware Attack on Netgain Technologies          *

70 Lakh Indian Cardholders Data Leaked on Dark Web          *

FireEye's Red Team Security Testing and Assessment Tools Stolen by State-Sponsored Hackers          *

Microsoft Patch Tuesday Security Advisory - December 2020          *

Ransomware Attack on Television Production Company - Banijay Group SAS          *

Maze Ransomware Attack on Canon          *

DeathStalker APT Group Offers Hack For Hire Service          *

Security Researchers Accidentally Discovers Windows Zero-Day          *

Bandook Malware Targeting Multiple Sectors          *

Windows 10 20H2 Update Fixes Broken In-Place Upgrade Feature          *

Microsoft Office Products Non-Security Updates November 2020          *

Advanced Persistent Threat Attack Targeting U.S. Think Tank          *

Huntsville City Schools District Shut Down by Ransomware Attack          *

Ryuk Ransomware Attacks K12 Online School Platform          *

Malicious npm Packages Installing Remote Access Trojans          *

IoT Chip Maker Advantech Hit by Conti Ransomware          *

Gootkit Malware Returns with REvil Ransomware          *

New CursedGrabber Malware          *

Delaware County Hit by DoppelPaymer Ransomware Attack          *

Hackers Targeting COVID Vaccine Maker AstraZeneca          *

Data Breach Attack on Peatix Events Management Organization Inbox          *

LidarPhone Attack Converts Smart Vacuums into Microphones          *

Mercy Iowa City Hospital Data Breach          *

Over 300K Spotify Accounts Hacked          *

Industrial Control System Vendors Warn of Critical Bugs          *

Cisco Webex Ghost Flaw          *

Chinese Sponsored Cyber Criminal Group Attacking Japan-Linked Organizations          *

Cisco Webex Meetings API Cross-Site Scripting Vulnerability          *

Mozilla Released Firefox 83          *

Unprotected Database Exposed a Scam Targeting 100K+ Facebook Accounts          *

Mount Locker Ransomware Targeting TurboTax files          *

Chinese APT Group FunnyDream          *

Supply-Chain Attack Distributing Malware in South Korea          *

APT 'Hackers For Hire' Target Financial, Entertainment Firms          *

Multiple Vulnerabilities in Cisco Security Manager Software          *

New Phishing Campaign Delivering Jupyter Malware          *

Image Inversion Technique to Bypass Office 365          *

Critical Vulnerabilities Discovered in World's Largest Android TV Manufacturer          *

E-Shops Running Vulnerable Version of Magento          *

Source Code of Cobalt Strike Toolkit Shared Online          *

Critical Remote Code Execution Vulnerability in Oracle WebLogic Server          *

Animal Jam Kids Virtual Playground Suffered Data Breach          *

Security Vulnerabilities in Unity Orchestrator SD-WAN          *

High Severity Security Vulnerability in Cisco’s IOS XR Software          *

Chrome Zero-day Vulnerabilities          *

Australian Government Warns Healthcare Sector against Ransomware Attack          *

Mozilla Releases Security Updates          *

xHunt Hackers Attacking Exchange Servers          *

Ransomware Attack on Blackbaud Cloud Software Provider          *

Ransomware Hits E-Commerce Software Platform X-Cart          *

Ubuntu GNOME Display Manager Vulnerability allows Root Access          *

Ransomware Attack on Australian Media Monitoring Company          *

Scammers Impersonating IRS for Payment Fraud          *

Adobe Releases Security Updates          *

WordPress Sites Open to Code Injection Attacks via Welcart e-Commerce Bug          *

Microsoft Teams ‘Fake Updates’ Malware Campaign          *

Critical Security Updates for Multiple Intel Products          *

Ghimob Banking Trojan          *

Ransomware Attack on Italian Liquor Brand - Campari          *

Microsoft Patch Tuesday - November 2020          *

Pay2Key Ransomware          *

True Social Network App Exposed          *

Critical Security Flaws in SaltStack IT Infra Management Solution          *

Phishing Attacks on Russian Industrial Enterprises          *

Cisco AnyConnect Arbitrary Code Execution Vulnerability          *

Multiple Vulnerabilities in Google Android OS          *

Multiple Vulnerabilities in Adobe          *

Folksam Data Breach          *

Bigbasket Suffers Data Breach - Data of 2 Crore Users Now On Sale In Dark Web          *

Apple Fixes Three iOS Zero-Days          *

Capcom Hit by Ragnar Locker Ransomware          *

Dridex Botnet Stealing Banking Credentials          *

VMware Multiple Security Updates          *

Second Hand USB Drives Expose Sensitive Information of Previous Owners          *

New Google Drive Phishing Campaign          *

Cyberattack on Vermont Health Network          *

Alibaba's Online Store RedMart Suffers Data Breach          *

Bank Phone Numbers are being Spoofed to Rob Victims          *

Windows Zero-Day Exploit Publicly Disclosed          *

Nitro Software Massive Data Breach          *

Cryptocurrency Service 'Harvest Finance' Hacked - $24 Million Stolen          *

New Delivery Method of Emotet has been discovered          *

Cyberattacks Hit Schools & Colleges          *

Patients in Finland Blackmailed          *

KashmirBlack Botnet          *

Multiple Vulnerabilities in Fujitsu M12 Servers          *

IT Service Provider Sopra Steria Hit by Ryuk Ransomware          *

High Severity NVIDIA GeForce Experience Vulnerabilities Patched          *

SQL Injection Vulnerability in Rapid7 Nexpose          *

Information Disclosure Vulnerability in Linux Kernel          *

Multiple Security Vulnerabilities Identified in WAGO’s Cloud Connectivity Controllers          *

Browser Locker Scam Campaigns          *

VMware Multiple Security Updates          *

Zero-Click Vulnerabilities Identified in the Linux Bluetooth Software Stack          *

Browser Address Bar Spoofing Vulnerabilities in Multiple Mobile Browsers          *

Multiple Vulnerabilities in HP's Intelligent Management Center (IMC) Software          *

High Severity Router Vulnerability in Cisco IOS XR Software          *

Google Chrome Browser Multiple Security Updates          *

GravityRAT          *

Rise in QR Code Related Scams          *

Latest Release of Chrome and Edge Generating Random Log Files          *

Multiple Vulnerabilities in Magento CMS          *

Multiple Vulnerabilities in SonicWALL Sonic OS          *

Multiple Vulnerabilities in F2FS Toolset          *

Juniper Networks Releases Security Updates          *

Silent Librarian APT          *

Clips from Exposed Home Security Cameras Posted Online          *

Microsoft Disrupts TrickBot Malware Network          *

Double Extortion Ransomware Attack on Software AG          *

Denial-of-Service Vulnerabilities in Allen-Bradley Flex I/O System          *

Adobe Flash Player Application Critical Patch Update          *

Microsoft Patch Tuesday - October 2020          *

Microsoft Patches Critical Remote Code Execution Vulnerabilities          *

Information Disclosure Vulnerability in Apache Tomcat          *

Fitbit Spyware Watch Face          *

MontysThree Malware Used In Targeted Industrial Espionage Attacks          *

Critical Flaws Found In QNAP Helpdesk Leading To Device Takeover          *

New Cryptojacking Variant : Black-T          *

Vulnerability in Apple's T2 Mac Security Chips          *

Google Releases Patches for 50 Android System's Vulnerabilities          *

Trump's Health Email phishing Campaign Delivering BazarLoader Trojan          *

Cisco Patches Multiple Vulnerabilities          *

BAHAMUT : Hack For Hire Service          *

Flaws In Top Antivirus Softwares Leading to Privilege Escalation          *

Facebook Disables Chinese-Sponsored SilentFade Malware Campaign          *

HEH Botnet          *

APT Attack Injects Malware into Windows Error Reporting          *

COVID-19 Clinical Trial Hit by Ransomware          *

Multiple Vulnerabilities in Google Chrome Web Browser          *

Iranian hackers are exploiting the Zerologon vulnerability          *

Indian State Government Massive Data Breach          *

MosaicRegressor Malware Framework UEFI Firmware Bootkit          *

DDoS Attacks by Ransomware Attacker Groups          *

XDSpy APT Group          *

Backdoors in Microsoft 365 & Azure Active Directory using AADInternals PowerShell Module          *

Raccine Ransomware Vaccine          *

Microsoft Office 365 OAuth Access Token Phishing          *

Egregor Ransomware          *

InterPlanetary Storm Botnet Infects 13K Mac and Android Devices          *

Multiple Security Vulnerabilities in Wireshark Packet Analyzer          *

Palmerworm Espionage Campaign          *

Swatch Shuts Down IT Systems to Stop Cyberattack          *

Operation Sidecopy Launches Attack on Defense Forces in India          *

Microsoft Removed 18 Azure AD Applications          *

Microsoft Windows XP Source Code Leaked Online          *

Multiple Vulnerabilities in Apple Products          *

247K Microsoft Exchange Servers Vulnerable for RCE          *

A Bug in Windows Server 2016          *

Magento Credit Card Stealing Malware          *

Federal Agency Hit by Cyber Attack          *

Chalubo DDoS Botnet Targeting Unsecured SSH Servers          *

UHS hospitals Hit By Ransomware Attack          *

Phishing Campaign stating End of Support for Windows 7          *

Microsoft Office 365 Outage Reported in USA & Australia          *

Joker Trojan          *

Taurus Malicious Ad Campaign          *

Cisco Patches Multiple Security Bugs          *

APT-C-43 Steals Military Secrets          *

Microsoft Outlook Squatting Campaign          *

MoDi RAT          *

Heap Buffer Overflow Vulnerability in Instagram          *

Mozilla Firefox 81 Released          *

Automated MEOW Attack          *

RansomExx Ransomware Attack on Tyler Technologies          *

Phishing Campaign Targets AT&T Global Employees          *

TinyCryptor Ransomware          *

Multiple Security Vulnerabilities in Google Chrome Web Browser          *

Mozilla Bug - Hijacking Firefox Android Browsers          *

Maze Attackers adopt Ragnar Locker VM technique          *

Chinese Hackers Targeting U.S. Agencies          *

Multiple Vulnerabilities in Apple Safari          *

ZShlayer Malware          *

APT41 Chinese Hacking Group          *

Phishing Scam using Security Awareness Training Emails          *

MrbMiner Malware          *

MFA Bypass Vulnerability in Microsoft 365          *

Prometei Multi-Modular Botnet          *

Emotet Malware New Spamming Campaign          *

Lemon Duck Cryptominer          *

Qakbot malware          *

Trojan Glupteba

Researchers Disclose Critical RCE Flaw in vm2 Sandbox Library

Publish Date: 2023-04-09

Description

The vm2 JavaScript sandbox module maintainers have released a patch to address a severe bug that affects all versions, including and prior to 3.9.14, and could be exploited to breach security boundaries and execute arbitrary shellcode. vm2 is a popular Node.js tool for running untrusted programs in an isolated environment. It is utilized in 721 packages and generates approximately four million weekly downloads. The vulnerability, CVE-2023-29017, has a CVSS score of 9.8 and does not correctly handle errors that occur in asynchronous operations. The release of the fix comes nearly six months after vm2 patched a further significant vulnerability (CVE-2022-36067, CVSS score: 10) that could have been used to perform arbitrary activities on the underlying machine.

Share

• CVE-IDs
• CVE-2023-29017

• Affected Platform(s) / Version(s)
• vm2 version 3.9.14 and Prior

• Distribution Method
• NA

• Attack Type
• Remote Code Execution Attack

• Attack Source
• Vulnerable and Outdated vm2 Versions

• Region
• Global

• Affected Business(s)
• Software Sector

• Recommendations
• • Security administrators are recommended to apply the patched version 3.9.15 of vm2 on vulnerable devices at the earliest possible post testing.
  • Security administrators are recommended to make sure that all applications, databases, servers, and network devices are periodically hardened and adequately configured.
  • Organizations should conduct a periodic security assessment, hardening, and architecture review of critical assets exposed over the Internet.
  • Keep AV signatures, operating systems, and third-party applications up to date on all systems, mobile devices, and servers.

• References
• • https://github.com/advisories/GHSA-7jxr-cg7f-gpgv

  • https://thehackernews.com/2023/04/researchers-discover-critical-remote.html

Protect your Data and Brand Value from Data Breaches!

Infoshare-Varutra provide security services at an affordable price!

• Cloud Security Services
• Mobile Security Services
• Network Security Services
• Audit & Compliance Services

• Special Security Services
• SOC and Global Threat Management Services
• Information Security Maturity Assessment Services
• Security Awareness Program

Reach Us: contact@infosharesystems.com