Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE Malware

April 04, 2025 at 11:37AM Ivanti has disclosed details of a now-patched critical security vulnerability impacting its Connect S…

Critical Flaw in Apache Parquet Allows Remote Attackers to Execute Arbitrary Code

April 04, 2025 at 09:08AM A maximum severity security vulnerability has been disclosed in Apache Parquet's Java Library tha…

Microsoft Warns of Tax-Themed Email Attacks Using PDFs and QR Codes to Deliver Malware

April 03, 2025 at 11:09PM Microsoft is warning of several phishing campaigns that are leveraging tax-related themes to deploy m…

Triada Malware Preloaded on Counterfeit Android Phones Infects 2,600+ Devices

April 03, 2025 at 01:04PM Counterfeit versions of popular smartphone models that are sold at reduced prices have been found to …

Europol Dismantles Kidflix With 72,000 CSAM Videos Seized in Major Operation

April 03, 2025 at 09:28AM In one of the largest coordinated law enforcement operations, authorities have dismantled Kidflix, a …

Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux Servers

April 02, 2025 at 04:13PM Cybersecurity researchers have shed light on an "auto-propagating" cryptocurrency mining bo…

How SSL Misconfigurations Impact Your Attack Surface

April 02, 2025 at 03:30PM When assessing an organization’s external attack surface, encryption-related issues (especially SSL m…

FIN7 Deploys Anubis Backdoor to Hijack Windows Systems via Compromised SharePoint Sites

April 02, 2025 at 12:22PM The financially motivated threat actor known as FIN7 has been linked to a Python-based backdoor calle…

New Malware Loaders Use Call Stack Spoofing, GitHub C2, and .NET Reactor for Stealth

April 02, 2025 at 11:25AM Cybersecurity researchers have discovered an updated version of a malware loader called Hijack Loader…

New Case Study: Global Retailer Overshares CSRF Tokens with Facebook

April 01, 2025 at 04:33PM Are your security tokens truly secure? Explore how Reflectiz helped a giant retailer to expose a Face…

Apple Fined €150 Million by French Regulator Over Discriminatory ATT Consent Practices

April 01, 2025 at 11:17AM Apple has been hit with a fine of €150 million ($162 million) by France's competition watchdog ov…

Hackers Exploit WordPress mu-Plugins to Inject Spam and Hijack Site Images

March 31, 2025 at 05:34PM Threat actors are using the "mu-plugins" directory in WordPress sites to conceal malicious …