Multiple India-based CCTV Cameras
A critical vulnerability, CVE-2025-13607, has been identified in multiple India-based CCTV camera models from vendors D-Link, Sparsh Securitech, and Securus CCTV. Rated with a CVSS v4 score of 9.3 ...
ictsec.pl
Hackers say Volkswagen dealership’s client list is now for sale
A prominent cybercrime forum has become the platform for a threat actor claiming to have successfully breached Volkswagen Mandi, an official car dealership located in Himachal Pradesh, India. This ...
Scammers harvesting Facebook photos to stage fake kidnappings, warns FBI
The FBI has issued a significant warning regarding a novel and disturbing virtual kidnapping scam. Threat actors are actively harvesting public Facebook photos to fabricate “proof-of-life” images i...
Poland arrests Ukrainians utilizing 'advanced' hacking equipment
Polish authorities have apprehended three Ukrainian nationals on suspicion of attempting to compromise critical IT systems and acquire sensitive national defense data within the country. The men, a...
New JS#SMUGGLER Campaign Drops NetSupport RAT Through Infected Sites
Securonix Threat Research has uncovered a sophisticated new malware campaign, dubbed JS#SMUGGLER, which is actively deploying the NetSupport Remote Access Trojan (RAT) through a multi-stage infecti...
Exploitation of React2Shell Surges
The vulnerability, dubbed React2Shell and officially tracked as CVE-2025-55182, can be exploited using specially crafted HTTP requests for unauthenticated remote code execution. The flaw impacts sy...
ChrimeraWire Trojan Fakes Chrome Activity to Manipulate Search Rankings
A new trojan identified as ChrimeraWire is actively manipulating search engine rankings for both Google and Bing by simulating legitimate user activity through a hidden instance of the Google Chrom...
Android Malware FvncBot, SeedSnatcher, and ClayRat Gain Stronger Data Theft Features
Cybersecurity researchers detailed two new Android malware families, FvncBot and SeedSnatcher, alongside an upgraded ClayRat version. Findings from Intel 471, CYFIRMA, and Zimperium highlight growi...
US military contractor breach expose employee data
MAG Aerospace, military contractor for the US military in intelligence, surveillance and reconnaissance, suffered a breach exposing its employee data. According to MAG Aerospace, the company was al...
Portugal updates cybercrime law to exempt security researchers
Portugal has significantly updated its cybercrime law, introducing a crucial legal safe harbor for security researchers operating in good faith. This modification aims to exempt specific actions fr...
LockBit 5.0 Infrastructure Exposed in New Server, IP, and Domain Leak
LockBit 5.0 key infrastructure exposed, revealing the IP address 205.185.116.233, and the domain karma0.xyz is hosting the ransomware group’s latest leak site. According to researcher Rakesh Krish...
Barts Health NHS Confirms Cl0p Ransomware Behind Data Breach
Barts Health NHS Trust has confirmed that the Russian-speaking Cl0p ransomware group stole files from one of its invoice databases after exploiting a vulnerability in Oracle E-Business Suite. The b...
Attackers launch dual campaign on GlobalProtect portals and SonicWall APIs
A campaign began on December 2 targeting Palo Alto GlobalProtect portals with login attempts and scanning SonicWall SonicOS API endpoints. The activity came from over 7,000 IPs tied to German hosti...
Unveiling WARP PANDA A New Sophisticated China-Nexus Adversary
Using tradecraft focused on stealth and OPSEC, WARP PANDA leverages TTPs that include log clearing and file timestomping, as well as creating malicious VMs — unregistered in the vCenter server — an...
To Catch a Predator Leak exposes the internal operations of Intellexa’s mercenary spyware
The “Intellexa Leaks”, a new investigation published jointly by Inside Story, Haaretz and WAV Research Collective, presents troubling revelations about the surveillance company Intellexa and its si...
Smile, You’re on Camera A Live Stream from Inside Lazarus Group’s IT Workers Scheme
In this article, we’ll uncover an entire North Korean infiltration operation aimed at deploying remote IT workers across different companies in the American financial and crypto/Web3 sectors, with ...
LummaC2 Infects North Korean Hacker Device Linked to Bybit Heist
A North Korean state-sponsored threat actor got infected by the same kind of malware typically used against others, exposing rare insights into their operations and direct ties to one of the larges...
Despite Microsoft’s secret patch, LNK loophole remains viable for hackers to deliver malware
State-sponsored hackers and other Windows attackers have long been delivering malware using bloated link (LNK) files, disguised as legitimate files, but containing malicious shell scripts or entire...
Penn and Phoenix Universities Disclose Data Breach After Oracle Hack
The University of Pennsylvania and the University of Phoenix confirmed on Tuesday that they are among the many victims of the recent cybercrime campaign targeting customers of Oracle’s E-Business S...
King Addons flaw lets anyone become WordPress admin
Hackers are exploiting a critical vulnerability, tracked as CVE-2025-8489 (CVSS score of 9.8), in the WordPress plugin King Addons for Elementor that allows unauthenticated users to create admin ac...