LATEST

ZerOwl — Find Vulnerabilities Before Hackers Do
Remus Infostealer Removes Syscall Hooks to Evade EDR and Steal Sensitive Credentials

Remus Infostealer Removes Syscall Hooks to Evade EDR and Steal Sensitive Credentials

CYBER ATTACKZerowl

Remus is a Windows information stealer that has garnered attention for its ability to conceal itself before stealing data. The malware surfaced on.

PAYLOAD Ransomware Hijacks Active Directory Group Policy for Encryptionless Extortion

PAYLOAD Ransomware Hijacks Active Directory Group Policy for Encryptionless Extortion

CYBER ATTACKZerowl

A ransomware operation, identified as PAYLOAD, showcases how attackers can leverage Microsoft Active Directory Group Policy Objects (GPOs) to disrupt an.

OpenAI Codex Sandbox Flaws Let Malicious Repositories Execute Commands on Host Systems

OpenAI Codex Sandbox Flaws Let Malicious Repositories Execute Commands on Host Systems

CYBER ATTACKZerowl

OpenAI Codex recently revealed two significant security vulnerabilities, Overpatch and Heapjack, which could potentially execute commands on a developer's.

New Cache Key Injection Attack Lets Hackers Bypass Access Controls and Poison Nginx Caches

New Cache Key Injection Attack Lets Hackers Bypass Access Controls and Poison Nginx Caches

CYBER ATTACKZerowl

A newly discovered cache key injection technique, dubbed Cache Key Injection, allows attackers to circumvent access controls, expose cached sensitive.

New Android Malware Uses AI to Steal Bank Logins and Reconstruct Your PIN

New Android Malware Uses AI to Steal Bank Logins and Reconstruct Your PIN

CYBER ATTACKZerowl

A newly discovered Android banking Trojan dubbed RatHat leverages phone capabilities for account theft. The malware can navigate an infected device, steal.

Microsoft Confirms September 2026 Windows Updates Break File History Backups

Microsoft Confirms September 2026 Windows Updates Break File History Backups

CYBER ATTACKZerowl

Microsoft has acknowledged that its September 2026 Windows security updates may prevent File History from creating or updating backups on certain systems.

Leaky TLS Certificate Exposes North Korea’s Hangro VPN Infrastructure Across Two Countries

Leaky TLS Certificate Exposes North Korea’s Hangro VPN Infrastructure Across Two Countries

CYBER ATTACKZerowl

North Korea's Hangro platform offers a remarkably detailed glimpse into the infrastructure used to connect officials and trade representatives abroad to.

Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors

Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors

The Jade Sleet North Korean threat actor has once again targeted a smaller Indian IT service company, underscoring the persistent threat against.

Hackers Use Microsoft-Signed Driver to Disable 145 Security Tools and Steal Passwords

Hackers Use Microsoft-Signed Driver to Disable 145 Security Tools and Steal Passwords

CYBER ATTACKZerowl

Researchers identified a malware campaign that utilized a Microsoft-verified Windows kernel driver to disable 145 antivirus and endpoint security.

Hackers Hide Malware Servers on Blockchain to Steal Bank Logins and 2FA Codes

Hackers Hide Malware Servers on Blockchain to Steal Bank Logins and 2FA Codes

CYBER ATTACKZerowl

A new malware operation is leveraging blockchain technology to maintain control servers hidden from sight. Here are the indicators of compromise (IoCs).

Top 5 this week

Page 36 of 316