A new analysis has uncovered connections between affiliates of RansomHub and other ransomware groups like Medusa, BianLian, and Play. The connection stems from the use of a custom tool that’s… Read More »Hackers Repurpose RansomHub’s EDRKillShifter in Medusa, BianLian, and Play Attacks
An advanced persistent threat (APT) group with ties to Pakistan has been attributed to the creation of a fake website masquerading as India’s public sector postal system as part of… Read More »APT36 Spoofs India Post Website to Infect Windows and Android Users with Malware
Whether it’s CRMs, project management tools, payment processors, or lead management tools – your workforce is using SaaS applications by the pound. Organizations often rely on traditional CASB solutions for… Read More »New Report Explains Why CASB Solutions Fail to Address Shadow SaaS and How to Fix It
Hackers have long used Word and Excel documents as delivery vehicles for malware, and in 2025, these tricks are far from outdated. From phishing schemes to zero-click exploits, malicious Office… Read More »Top 3 MS Office Exploits Hackers Use in 2025 – Stay Alert!
An ongoing campaign that infiltrates legitimate websites with malicious JavaScript injects to promote Chinese-language gambling platforms has ballooned to compromise approximately 150,000 sites to date. “The threat actor has slightly… Read More »150,000 Sites Compromised by JavaScript Injection Promoting Chinese Gambling Platforms
A critical security flaw has been disclosed in NetApp SnapCenter that, if successfully exploited, could allow privilege escalation. SnapCenter is an enterprise-focused software that’s used to manage data protection across… Read More »NetApp SnapCenter Flaw Could Let Users Gain Remote Admin Access on Plug-In Systems
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two six-year-old security flaws impacting Sitecore CMS and Experience Platform (XP) to its Known Exploited Vulnerabilities (KEV) catalog, based on… Read More »CISA Warns of Sitecore RCE Flaws; Active Exploits Hit Next.js and DrayTek Devices
The Chinese threat actor known as FamousSparrow has been linked to a cyber attack targeting a trade group in the United States and a research institute in Mexico to deliver… Read More »New SparrowDoor Backdoor Variants Found in Attacks on U.S. and Mexican Organizations
The Russian-speaking hacking group called RedCurl has been linked to a ransomware campaign for the first time, marking a departure in the threat actor’s tradecraft. The activity, observed by Romanian… Read More »RedCurl Shifts from Espionage to Ransomware with First-Ever QWCrypt Deployment
The threat actor known as EncryptHub exploited a recently-patched security vulnerability in Microsoft Windows as a zero-day to deliver a wide range of malware families, including backdoors and information stealers… Read More »EncryptHub Exploits Windows Zero-Day to Deploy Rhadamanthys and StealC Malware