A now-patched security flaw in Samsung Galaxy Android devices was exploited as a zero-day to deliver a “commercial-grade” Android spyware dubbed LANDFALL in targeted attacks in the Middle East. The… Read More »Samsung Zero-Click Flaw Exploited to Deploy LANDFALL Android Spyware via WhatsApp
A China-linked threat actor has been attributed to a cyber attack targeting an U.S. non-profit organization with an aim to establish long-term persistence, as part of broader activity aimed at… Read More »From Log4j to IIS, China’s Hackers Turn Legacy Bugs into Global Espionage Tools
A set of nine malicious NuGet packages has been identified as capable of dropping time-delayed payloads to sabotage database operations and corrupt industrial control systems. According to software supply chain… Read More »Hidden Logic Bombs in Malware-Laced NuGet Packages Set to Detonate Years After Installation
Imagine this: Sarah from accounting gets what looks like a routine password reset email from your organization’s cloud provider. She clicks the link, types in her credentials, and goes back… Read More »Enterprise Credentials at Risk – Same Old, Same Old?
Google on Thursday said it’s rolling out a dedicated form to allow businesses listed on Google Maps to report extortion attempts made by threat actors who post inauthentic bad reviews… Read More »Google Launches New Maps Feature to Help Businesses Report Review-Based Extortion Attempts
Cybersecurity researchers have flagged a malicious Visual Studio Code (VS Code) extension with basic ransomware capabilities that appears to be created with the help of artificial intelligence – in other… Read More »Vibe-Coded Malicious VS Code Extension Found with Built-In Ransomware Capabilities
Cisco on Wednesday disclosed that it became aware of a new attack variant that’s designed to target devices running Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure… Read More »Cisco Warns of New Firewall Attack Exploiting CVE-2025-20333 and CVE-2025-20362
A previously unknown threat activity cluster has been observed impersonating Slovak cybersecurity company ESET as part of phishing attacks targeting Ukrainian entities. The campaign, detected in May 2025, is tracked… Read More »Trojanized ESET Installers Drop Kalambur Backdoor in Phishing Attacks on Ukraine
Cybercrime has stopped being a problem of just the internet — it’s becoming a problem of the real world. Online scams now fund organized crime, hackers rent violence like a… Read More »ThreatsDay Bulletin: AI Tools in Malware, Botnets, GDI Flaws, Election Attacks & More
Introduction Financial institutions are facing a new reality: cyber-resilience has passed from being a best practice, to an operational necessity, to a prescriptive regulatory requirement. Crisis management or Tabletop exercises,… Read More »From Tabletop to Turnkey: Building Cyber Resilience in Financial Services