Your blog category
Cybersecurity researchers have disclosed details of a new campaign dubbed SHADOW#REACTOR that employs an evasive multi-stage attack chain to deliver a commercially available remote administration tool called Remcos RAT and… Read More »New Malware Campaign Delivers Remcos RAT Through Multi-Stage Windows Attack
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned of active exploitation of a high-severity security flaw impacting Gogs by adding it to its Known Exploited Vulnerabilities (KEV) catalog.… Read More »CISA Warns of Active Exploitation of Gogs Vulnerability Enabling Code Execution
Threat actors have been observed uploading a set of eight packages on the npm registry that masqueraded as integrations targeting the n8n workflow automation platform to steal developers’ OAuth credentials.… Read More »n8n Supply Chain Attack Abuses Community Nodes to Steal OAuth Tokens
This week made one thing clear: small oversights can spiral fast. Tools meant to save time and reduce friction turned into easy entry points once basic safeguards were ignored. Attackers… Read More »⚡ Weekly Recap: AI Automation Exploits, Telecom Espionage, Prompt Poaching & More
A new wave of GoBruteforcer attacks has targeted databases of cryptocurrency and blockchain projects to co-opt them into a botnet that’s capable of brute-forcing user passwords for services such as… Read More »GoBruteforcer Botnet Targets Crypto Project Databases by Exploiting Weak Credentials
Anthropic has become the latest Artificial intelligence (AI) company to announce a new suite of features that allows users of its Claude platform to better understand their health information. Under… Read More »Anthropic Launches Claude AI for Healthcare with Secure Health Record Access
Cybersecurity researchers have shed light on two service providers that supply online criminal networks with the necessary tools and infrastructure to fuel the pig butchering-as-a-service (PBaaS) economy. At least since… Read More »Researchers Uncover Service Providers Fueling Industrial-Scale Pig Butchering Fraud
The Iranian threat actor known as MuddyWater has been attributed to a spear-phishing campaign targeting diplomatic, maritime, financial, and telecom entities in the Middle East with a Rust-based implant codenamed… Read More »MuddyWater Launches RustyWater RAT via Spear-Phishing Across Middle East Sectors
Europol on Friday announced the arrest of 34 individuals in Spain who are alleged to be part of an international criminal organization called Black Axe. As part of an operation… Read More »Europol Arrests 34 Black Axe Members in Spain Over €5.9M Fraud and Organized Crime
Chinese-speaking threat actors are suspected to have leveraged a compromised SonicWall VPN appliance as an initial access vector to deploy a VMware ESXi exploit that may have been developed as… Read More »China-Linked Hackers Exploit VMware ESXi Zero-Days to Escape Virtual Machines