The U.S. government funding for non-profit research giant MITRE to operate and maintain its Common Vulnerabilities and Exposures (CVE) program will expire Wednesday, an unprecedented development that could shake up… Read More »U.S. Govt. Funding for MITRE’s CVE Ends April 16, Cybersecurity Community on Alert
Cybersecurity researchers have disclosed a malicious package uploaded to the Python Package Index (PyPI) repository that’s designed to reroute trading orders placed on the MEXC cryptocurrency exchange to a malicious… Read More »Malicious PyPI Package Targets MEXC Trading API to Steal Credentials and Redirect Orders
A critical security vulnerability has been disclosed in the Apache Roller open-source, Java-based blogging server software that could allow malicious actors to retain unauthorized access even after a password change.… Read More »Critical Apache Roller Vulnerability (CVSS 10.0) Enables Unauthorized Session Persistence
The China-linked threat actor known as UNC5174 has been attributed to a new campaign that leverages a variant of a known malware dubbed SNOWLIGHT and a new open-source tool called… Read More »Chinese Hackers Target Linux Systems Using SNOWLIGHT Malware and VShell Tool
Everybody knows browser extensions are embedded into nearly every user’s daily workflow, from spell checkers to GenAI tools. What most IT and security people don’t know is that browser extensions’… Read More »Majority of Browser Extensions Can Access Sensitive Enterprise Data, New Report Finds
The North Korea-linked threat actor assessed to be behind the massive Bybit hack in February 2025 has been linked to a malicious campaign that targets developers to deliver new stealer… Read More »Crypto Developers Targeted by Python Malware Disguised as Coding Challenges
Meta has announced that it will begin to train its artificial intelligence (AI) models using public data shared by adults across its platforms in the European Union, nearly a year… Read More »Meta Resumes E.U. AI Training Using Public User Data After Regulator Approval
A recently disclosed security flaw in Gladinet CentreStack also impacts its Triofox remote access and collaboration solution, according to Huntress, with seven different organizations compromised to date. Tracked as CVE-2025-30406… Read More »Gladinet’s Triofox and CentreStack Under Active Exploitation via Critical RCE Vulnerability
Cybersecurity researchers have discovered a new, sophisticated remote access trojan called ResolverRAT that has been observed in attacks targeting healthcare and pharmaceutical sectors. “The threat actor leverages fear-based lures delivered… Read More »ResolverRAT Campaign Targets Healthcare, Pharma via Phishing and DLL Side-Loading
Cybersecurity researchers are calling attention to a new type of credential phishing scheme that ensures that the stolen information is associated with valid online accounts. The technique has been codenamed… Read More »Phishing Campaigns Use Real-Time Checks to Validate Victim Emails Before Credential Theft