CYBER ATTACK

A cybercriminal gang known as EclipseSupport is promoting a new Ransomware-as-a-Service (RaaS) operation called Eclipse Ransomware on forums This article.

A Special Report has identified approximately 296,000 internet-connected devices compromised by the Dysphoria botnet, marking an expansion of an IoT.

A new DCRat operation employs an old trick: it uses SVG files to hide malicious software within phishing emails. The scheme starts with fake notifications.

Cybercriminals are renting tools that help disguise their malicious software and evade detection This article explores cruciferra crypter service.

A working proof-of-concept exploit has been developed to demonstrate how a pre-authentication heap overflow in Citrix NetScaler ADC and Gateway can be.

The U.S This article explores windows vulnerability known. . Cybersecurity and Infrastructure Security Agency has added a Microsoft Windows vulnerability.

A "Bring Your Own EDR" attack leverages trusted SentinelOne components to transform endpoint protection into a potent malware shield This article explores.

Apple quietly introduced a new batch of high-confidence "Apple Threat Notification" alerts to select iPhone users across 110 countries. According to.

AI credentials are becoming targets for cybercriminals This article explores ai credentials targets. . A new tactic called AI token jacking allows.

Four recent disclosures highlight a concerning trend in cybersecurity risk as AI agents continue to evolve and adapt after repeated failures. OpenAI.

Zoom has released patches addressing four newly disclosed vulnerabilities that allow a malicious participant to remotely execute code on another.

Zoom has addressed four security vulnerabilities that could enable remote code execution, crash other attendees' clients, or access sensitive files This.

The Wireshark Foundation has officially released version 4.6.8 of Wireshark, a security update that addresses 28 distinct vulnerabilities capable of.

North Korea's Lazarus group has been identified as responsible for exploiting a Windows kernel zero-day vulnerability to deploy an updated version of its.

Modern application development increasingly necessitates containers for streamlined progress, but they can also present security risks This article.

President Donald Trump has issued a presidential directive that allows businesses to engage in government-led cybersecurity efforts against foreign.

Nightmare-Eclipse, also known as Chaotic Eclipse, has unveiled ShieldBreak, a new Windows zero-day exploit targeting the RoguePlanet privilege-escalation.

Discover how Sandworm Cyber Threats Target IT Professionals A group linked to Sandworm is using fake job interviews as a tactic to trick IT professionals.

A newly discovered vulnerability in Atlassian's Rovo enterprise AI assistant allows attackers to turn a single malicious link into a route for exposing.

Ransomware hackers are increasingly targeting managers and senior executives instead of just focusing on technical administrators This article explores.

Phantom Stealer, a .NET-based malware targeting Windows devices, has been detected in phishing emails, pirated software downloads, and malicious links on.

Phantom Stealer transforms familiar files into hidden locations. The credential-stealing malware conceals its next phase within PNG resources, gathering.

A newly disclosed "Pass-the-Passkey" family of attacks showcases how implementation flaws in WebAuthn can compromise passkey protections, even when.

A single lapse in multi-factor authentication allowed a basic credential spray to escalate into a nearly complete Akira ransomware breach in early August.

The prolific and controversial security researcher known as Nightmare-Eclipse (also tracked under Chaotic Eclipse) has released a ninth Windows zero-day.

A new malware family called WindRelay is being used with SpyNote Remote Access Trojan (RAT) to steal money through live NFC card-relay fraud This article.

A newly disclosed "Plug & Pwn" attack chain exploits Windows' Plug and Play (PnP) driver installation process to execute unauthorized code as SYSTEM This.

A new phishing attack is leveraging web certificates and chosen URLs to target high-value brand customers via WhatsApp This article explores new phishing.

A newly revealed "Ghostjacking" attack pattern exploits trusted operational data such as blocked web requests and monitoring alerts within enterprises.

Abyssos functions as a post-exploitation framework This article explores abyssos malware employs. . Once an attacker gains access to a device, they can.