Attackers are using fake invoice emails to spread XWorm, a remote-access trojan that quietly steals login credentials, passwords, and sensitive files from infected computers. The script immediately...
The U.S. Department of Justice (DoJ) on Friday announced that five individuals have pleaded guilty to assisting North Korea’s illicit revenue generation schemes by enabling information technology (...
Threat actors are abusing the decades-old “finger” command to execute malicious commands on Windows devices, reviving a previously known LOLBIN technique. The Finger protocol, once commonly used fo...
During the third quarter of 2025, we monitored more than 85 active data leak sites (DLS) that collectively listed 1,592 new victims. Compared to the 1,607 victims reported in Q2 2025, the publicati...
Siemens COMOS, a software used in critical manufacturing, is affected by two vulnerabilities that could allow attackers to execute arbitrary code or infiltrate data. Siemens has released updates to...
A sophisticated phishing campaign, potentially originating from Russian-speaking threat actors, has been identified targeting customers in the hospitality industry. Since the beginning of the year,...
At its core, the GFW’s domestic function is ideological containment: a technical means to preempt the circulation of narratives, symbols, or software deemed threatening to Party legitimacy. The fil...
The Washington Post has confirmed a data breach affecting nearly 10,000 employees and contractors, stemming from the Clop ransomware gang’s exploitation of an Oracle E-Business Suite (EBS) vulnerab...
SIEM modernization requires clearly defined goals to minimize residual risk, optimize capabilities, and safeguard the solution against attacks. The overarching aim should be to ensure the Security ...
An advanced hacking group is actively exploiting zero-day vulnerabilities in Cisco Identity Services Engine (ISE) and Citrix systems. These attacks, spotted in real-world operations, allow hackers ...
Google has filed a civil lawsuit in the U.S. District Court for the Southern District of New York (SDNY) against China-based hackers who are behind a massive Phishing-as-a-Service (PhaaS) platform ...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2025-3146 PHPGurukul - Bus Pass M...
Zscaler ThreatLabz reported a 67% surge in Android malware, with 40% of IoT attacks now targeting critical industries and hybrid work environments. Critical infrastructure in the energy sector expe...
A critical vulnerability, CVE-2025-21042, affecting Samsung mobile devices is actively being exploited in the wild, prompting the US Cybersecurity and Infrastructure Security Agency (CISA) to add i...
North Korean threat actors are exploiting Google’s “Find Hub” service to remotely wipe data from Android devices, effectively turning a security feature into a weapon for espionage. This marks the ...
Microsoft’s November 2025 Patch Tuesday addresses 63 vulnerabilities across its product line, with five designated as critical. One vulnerability, CVE-2025-62215, is already being exploited in the ...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2025-10966 curl - curl curl...
A large-scale phishing campaign targeted over 5,000 businesses that actively advertise on Facebook. The attack involved tens of thousands of emails designed to steal credentials and data, impacting...
Mandiant Threat Defense has uncovered exploitation of an unauthenticated access vulnerability within Gladinet’s Triofox file-sharing and remote access platform. This now-patched n-day vulnerability...
Nine NuGet packages have been discovered containing time-delayed payloads designed to disrupt databases and industrial control systems. The packages, published by an actor named “shanhai666,” were ...