Microsoft Credits EncryptHub, Hacker Behind 618+ Breaches, for Disclosing Windows Flaws

April 05, 2025 at 09:20PM A likely lone wolf actor behind the EncryptHub persona was acknowledged by Microsoft for discovering …

North Korean Hackers Deploy BeaverTail Malware via 11 Malicious npm Packages

April 05, 2025 at 07:53PM The North Korean threat actors behind the ongoing Contagious Interview campaign are spreading their t…

Malicious Python Packages on PyPI Downloaded 39,000+ Times, Steal Sensitive Data

April 05, 2025 at 02:08PM Cybersecurity researchers have uncovered malicious libraries in the Python Package Index (PyPI) repos…

Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE Malware

April 04, 2025 at 11:37AM Ivanti has disclosed details of a now-patched critical security vulnerability impacting its Connect S…

Critical Flaw in Apache Parquet Allows Remote Attackers to Execute Arbitrary Code

April 04, 2025 at 09:08AM A maximum severity security vulnerability has been disclosed in Apache Parquet's Java Library tha…

Microsoft Warns of Tax-Themed Email Attacks Using PDFs and QR Codes to Deliver Malware

April 03, 2025 at 11:09PM Microsoft is warning of several phishing campaigns that are leveraging tax-related themes to deploy m…

Triada Malware Preloaded on Counterfeit Android Phones Infects 2,600+ Devices

April 03, 2025 at 01:04PM Counterfeit versions of popular smartphone models that are sold at reduced prices have been found to …

Europol Dismantles Kidflix With 72,000 CSAM Videos Seized in Major Operation

April 03, 2025 at 09:28AM In one of the largest coordinated law enforcement operations, authorities have dismantled Kidflix, a …

Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux Servers

April 02, 2025 at 04:13PM Cybersecurity researchers have shed light on an "auto-propagating" cryptocurrency mining bo…

How SSL Misconfigurations Impact Your Attack Surface

April 02, 2025 at 03:30PM When assessing an organization’s external attack surface, encryption-related issues (especially SSL m…

FIN7 Deploys Anubis Backdoor to Hijack Windows Systems via Compromised SharePoint Sites

April 02, 2025 at 12:22PM The financially motivated threat actor known as FIN7 has been linked to a Python-based backdoor calle…

New Malware Loaders Use Call Stack Spoofing, GitHub C2, and .NET Reactor for Stealth

April 02, 2025 at 11:25AM Cybersecurity researchers have discovered an updated version of a malware loader called Hijack Loader…