CYBERSECURITY

Internet of Things (IoT) devices and web applications have been the target of a persistent nine-month campaign to enroll them in the RondoDox botnet. The activity has been seen using the rece

This week's summary demonstrates how subtle behavioral changes, such as code modifications and employment scams, are redefining what "cybercrime" actually entails. A Lithuanian national has b

Three people connected to the Intellexa Consortium were taken off the list of specifically designated nationals by Treasury. The following people were sanctioned by OFAC in March 2024: Merom

The Palo Alto Networks Cortex Cloud team will take you through three recent investigations in a technical deep dive next week. Because these threats appear to be typical activity, standard se

The number of applications and the rate of change within those applications are growing at an accelerated rate for businesses. Teams in charge of security and privacy are under a lot of press

A serious security vulnerability in Fireware OS has been fixed by WatchGuard. According to the company, the vulnerability has been used in actual attacks. The vulnerability has been character

A website used to support a bank account takeover scheme was taken over by the U.S. Justice Department. Illegally obtained bank login credentials were hosted and manipulated using the domain

A multi-million dollar ATM jackpotting scheme has resulted in the indictment of 54 individuals. Ploutus malware was used in the massive conspiracy to breach automated teller machines (ATMs) a

The extensions are marketed as a "multi-location network speed test plug-in" for foreign trade staff and developers. Believing they are buying a genuine VPN service, users pay subscriptions b

Users are being urged by Trust Wallet to update to the most recent version of its Google Chrome extension. The multi-chain, non-custodial cryptocurrency wallet service stated that version

For many years, traditional security frameworks have been beneficial to organizations. However, AI systems function very differently from the applications that these frameworks were intended

A criminal network running call centers in Dnipro, Ivano-Frankivsk, and Kyiv was targeted by authorities in the Czech Republic, Latvia, Lithuania, and Ukraine. Over 400 victims in Europe were

Attackers are blending in, taking control of reliable apps, common tools, and even AI assistants. Nezha is an open-source monitoring tool that malicious actors are using to access compromised

Artificial intelligence copilots and agents have subtly infiltrated the SaaS apps that companies use on a daily basis during the past year. AI assistants or agent-like features are now integr

A security vulnerability in Secure Mobile Access (SMA) 100 series appliances has been fixed by SonicWall. Tracked as CVE-2025-40602, the vulnerability relates to a local privilege escalation

A number of businesses have been charged by the SEC for allegedly participating in a complex cryptocurrency scam. According to the SEC, the scam was a multi-step fraud that used social media

A phishing campaign has been linked to a group thought to be affiliated with Russia. Proofpoint is monitoring the activity, which has been going on since September 2025, under the name UNK_Ac

In order to sneak in a cryptocurrency wallet thief, a malicious NuGet package poses as the author of the.NET tracing library. "Tracer.Fody.NLog," the malicious package, was present in the rep

Threat actors are taking advantage of a security flaw called React2Shell. The vulnerability is spreading malware families such as ZnDoor and KSwapDoor. According to NTT Security and Palo Alto

Passwd was created especially for businesses using Google Workspace. Because Passwd is built on a zero-knowledge architecture, only users—not Passwd—can access data that has been decrypted. A

At least $2.02 billion of the over $3.4 billion that was pilfered between January and early December was the responsibility of the DPRK. $1.5 billion was lost in the February hack of the cryp

Over 64,000 distinct URLs linked to the threat were reportedly blocked by ESET this year. Czechia, Japan, Slovakia, Spain, and Poland accounted for the majority of detections. Nomani is using

Three "high-profile internet fraud suspects" are detained by Nigerian authorities. They are accused of participating in phishing attacks directed at large corporations. Okitipi Samuel, aka Mo

Affected vendors include ASRock, ASUSTeK Computer, GIGABYTE, and MSI. A disparity in the DMA protection status is the cause of the vulnerability. If the vulnerability is successfully exploite

MongoDB has been found to have a high-severity security flaw that could let unauthorized users read uninitialized heap memory. The vulnerability affects MongoDB

A notarized, digitally signed Swift application is used to deliver a new version of MacSync. In order to get around Apple's Gatekeeper checks, it is posing as a messaging app installer. It ha

According to Kaspersky, the new activity was discovered in October

Sensitive information can be remotely leaked by an unauthorized attacker thanks to a MongoDB vulnerability. The zlib message decompression implementation is the source of the issue. The vulne

In 2022, LastPass experienced a significant hack that gave hackers access to its users' personal data. Bad actors have been able to exploit weak master passwords thanks to the encrypted vault

1.8 million Android-based TVs, set-top boxes, and tablets are compromised by the Kimwolf botnet.