An Android malware family previously observed targeting Indian military personnel has been linked to a new campaign likely aimed at users in Taiwan under the guise of chat apps. “PJobRAT… Read More »PJobRAT Malware Campaign Targeted Taiwanese Users via Fake Chat Apps
Mozilla has released updates to address a critical security flaw impacting its Firefox browser for Windows, merely days after Google patched a similar flaw in Chrome that came under active… Read More »Mozilla Patches Critical Firefox Bug Similar to Chrome’s Recent Zero-Day Vulnerability
Cybersecurity researchers have discovered several cryptocurrency packages on the npm registry that have been hijacked to siphon sensitive information such as environment variables from compromised systems. “Some of these packages… Read More »Nine-Year-Old npm Packages Hijacked to Exfiltrate API Keys via Obfuscated Scripts
Cybersecurity researchers have shed light on a new phishing-as-a-service (PhaaS) platform that leverages the Domain Name System (DNS) mail exchange (MX) records to serve fake login pages that impersonate about… Read More »New Morphing Meerkat Phishing Kit Mimics 114 Brands Using Victims’ DNS Email Records
A new analysis has uncovered connections between affiliates of RansomHub and other ransomware groups like Medusa, BianLian, and Play. The connection stems from the use of a custom tool that’s… Read More »Hackers Repurpose RansomHub’s EDRKillShifter in Medusa, BianLian, and Play Attacks
An advanced persistent threat (APT) group with ties to Pakistan has been attributed to the creation of a fake website masquerading as India’s public sector postal system as part of… Read More »APT36 Spoofs India Post Website to Infect Windows and Android Users with Malware
Whether it’s CRMs, project management tools, payment processors, or lead management tools – your workforce is using SaaS applications by the pound. Organizations often rely on traditional CASB solutions for… Read More »New Report Explains Why CASB Solutions Fail to Address Shadow SaaS and How to Fix It
Hackers have long used Word and Excel documents as delivery vehicles for malware, and in 2025, these tricks are far from outdated. From phishing schemes to zero-click exploits, malicious Office… Read More »Top 3 MS Office Exploits Hackers Use in 2025 – Stay Alert!
An ongoing campaign that infiltrates legitimate websites with malicious JavaScript injects to promote Chinese-language gambling platforms has ballooned to compromise approximately 150,000 sites to date. “The threat actor has slightly… Read More »150,000 Sites Compromised by JavaScript Injection Promoting Chinese Gambling Platforms
A critical security flaw has been disclosed in NetApp SnapCenter that, if successfully exploited, could allow privilege escalation. SnapCenter is an enterprise-focused software that’s used to manage data protection across… Read More »NetApp SnapCenter Flaw Could Let Users Gain Remote Admin Access on Plug-In Systems