A previously undocumented threat actor known as Silent Lynx has been linked to cyber attacks targeting various entities in Kyrgyzstan and Turkmenistan. “This threat group has previously targeted entities around… Read More »Silent Lynx Using PowerShell, Golang, and C++ Loaders in Multi-Stage Cyberattacks
Cybercriminals are increasingly leveraging legitimate HTTP client tools to facilitate account takeover (ATO) attacks on Microsoft 365 environments. Enterprise security company Proofpoint said it observed campaigns using HTTP clients Axios… Read More »Cybercriminals Use Go Resty and Node Fetch in 13 Million Password Spraying Attempts
Veeam has released patches to address a critical security flaw impacting its Backup software that could allow an attacker to execute arbitrary code on susceptible systems. The vulnerability, tracked as… Read More »New Veeam Flaw Allows Arbitrary Code Execution via Man-in-the-Middle Attack
As the cybersecurity landscape continues to evolve, proactive vulnerability management has become a critical priority for managed service providers (MSPs) and IT teams. Recent trends indicate that organizations increasingly prioritize… Read More »Navigating the Future: Key IT Vulnerability Management Trends
A malware campaign has been observed delivering a remote access trojan (RAT) named AsyncRAT by making use of Python payloads and TryCloudflare tunnels. “AsyncRAT is a remote access trojan (RAT)… Read More »AsyncRAT Campaign Uses Python Payloads and TryCloudflare Tunnels for Stealth Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The… Read More »CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog, Urges Fixes by Feb 25
Cybersecurity researchers have called attention to a software supply chain attack targeting the Go ecosystem that involves a malicious package capable of granting the adversary remote access to infected systems.… Read More »Malicious Go Package Exploits Module Mirror Caching for Persistent Remote Access
The North Korean threat actors behind the Contagious Interview campaign have been observed delivering a collection of Apple macOS malware strains dubbed FERRET as part of a supposed job interview… Read More »North Korean Hackers Deploy FERRET Malware via Fake Job Interviews on macOS
A recently patched security vulnerability in the 7-Zip archiver tool was exploited in the wild to deliver the SmokeLoader malware. The flaw, CVE-2025-0411 (CVSS score: 7.0), allows remote attackers to… Read More »Russian Cybercrime Groups Exploiting 7-Zip Flaw to Bypass Windows MotW Protections
As cloud security evolves in 2025 and beyond, organizations must adapt to both new and evolving realities, including the increasing reliance on cloud infrastructure for AI-driven workflows and the vast… Read More »Watch Out For These 8 Cloud Security Shifts in 2025