CYBER ATTACK

The US government has issued a warning about cyberattacks carried out by pro-Iranian organizations. As part of the Iran-Israel conflict that started on June 13, 2025, it launched airstrikes o

Remcos RAT is a fileless version of the well-known commercial malware Remcos. The attack persuades recipients to open a Microsoft Excel attachment by using lures with a purchase order theme.

Since at least July 2023, financial institutions throughout Africa have been the target of several cyberattacks, which cybersecurity researchers are drawing attention to. The activity is bein

A maximum-severity security vulnerability in the Wing FTP Server has been actively exploited in the wild. The vulnerability, identified as CVE-2025-47812 (CVSS score:

Kaspersky: VBCloud has been seen to be used by Cloud Atlas in its cyberattack campaigns that targeted "several dozen users" in

There are no signs that other federal agencies were affected by the cyberattack that targeted the Treasury Department. China has refuted claims that it violated the U.S. Treasury Department.

Evasive Panda, a threat actor with ties to China, targeted a government agency and a religious group in Taiwan. They were infected by the threat actor using a post-compromise toolset known as

As part of a "highly sophisticated espionage campaign" in mid-September 2025, Chinese state-sponsored threat actors employed artificial intelligence (AI) to plan automated cyberattacks. The G

A European Union diplomatic organization has been the target of a threat actor with ties to China, MirrorFace. The hacking team has never before targeted an organization in the area. It is de

Emergency Response for Computers A new malicious email campaign that targets government agencies, businesses, and military organizations has been described by Team of Ukraine. The campaign ha

It has been determined that the threat cluster is an extension of an ongoing campaign carried out by a threat actor with ties to Belarus. An obfuscated macro is executed when a malicious Exce

According to JPCERT/CC, APT-C-60 delivered the SpyGlace backdoor using a lure with a job application theme. The attack made use of trustworthy services like Bitbucket, Google Drive, and StatC

The Python-based cloud attack tool AndroxGh0st is well-known for specifically targeting Laravel applications. It has previously taken advantage of vulnerabilities in PHPUnit, the Laravel Fram

Numerous Google Chrome extensions have been found to steal private information. Apple consents to pay $95 million to resolve a protracted class action lawsuit in the United States. A proof-of

There have been many disturbing developments in the field of cybersecurity over the past week. Cybercriminals have been actively taking advantage of a serious flaw in Cleo's file transfer sof

Even the most intelligent of us are being duped by AI-powered scams, sneaky malware is hiding in well-known software, and hackers are breaking into the setups of other hackers. On the other h