Your blog category
An Android information stealing malware named FireScam has been found masquerading as a premium version of the Telegram messaging app to steal data and maintain persistent remote control over compromised… Read More »FireScam Android Malware Poses as Telegram Premium to Steal Data and Control Devices
In 2024, cyber threats targeting SaaS surged, with 7,000 password attacks blocked per second (just in Entra ID)—a 75% increase from last year—and phishing attempts up by 58%, causing $3.5… Read More »From $22M in Ransom to +100M Stolen Records: 2025’s All-Star SaaS Threat Actors to Watch
Every tap, click, and swipe we make online shapes our digital lives, but it also opens doors—some we never meant to unlock. Extensions we trust, assistants we rely on, and… Read More »⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [6 Jan]
Cybersecurity researchers have revealed several malicious packages on the npm registry that have been found impersonating the Nomic Foundation’s Hardhat tool in order to steal sensitive data from developer systems.… Read More »Russian-Speaking Attackers Target Ethereum Devs with Fake Hardhat npm Packages
A high-severity security flaw has been disclosed in ProjectDiscovery’s Nuclei, a widely-used open-source vulnerability scanner that, if successfully exploited, could allow attackers to bypass signature checks and potentially execute malicious… Read More »Researchers Uncover Nuclei Vulnerability Enabling Signature Bypass and Code Execution
Cybersecurity researchers have flagged a new malware called PLAYFULGHOST that comes with a wide range of information-gathering features like keylogging, screen capture, audio capture, remote shell, and file transfer/execution. The… Read More »PLAYFULGHOST Delivered via Phishing and SEO Poisoning in Trojanized VPN Apps
The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) on Friday issued sanctions against a Beijing-based cybersecurity company known as Integrity Technology Group, Incorporated for orchestrating several cyber attacks… Read More »U.S. Treasury Sanctions Beijing Cybersecurity Firm for State-Backed Hacking Campaigns
Cybersecurity researchers have shed light on a new jailbreak technique that could be used to get past a large language model’s (LLM) safety guardrails and produce potentially harmful or malicious… Read More »New AI Jailbreak Method ‘Bad Likert Judge’ Boosts Attack Success Rates by Over 60%
A proof-of-concept (PoC) exploit has been released for a now-patched security flaw impacting Windows Lightweight Directory Access Protocol (LDAP) that could trigger a denial-of-service (DoS) condition. The out-of-bounds reads vulnerability… Read More »LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers
Microsoft has announced that it’s making an “unexpected change” to the way .NET installers and archives are distributed, requiring developers to update their production and DevOps infrastructure. “We expect that… Read More »Critical Deadline: Update Old .NET Domains Before January 7, 2025 to Avoid Service Disruption