In a new campaign detected in March 2025, senior members of the World Uyghur Congress (WUC) living in exile have been targeted by a Windows-based malware that’s capable of conducting… Read More »Malware Attack Targets World Uyghur Congress Leaders via Trojanized UyghurEdit++ Tool
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added two high-severity security flaws impacting Broadcom Brocade Fabric OS and Commvault Web Server to its Known Exploited Vulnerabilities (KEV)… Read More »CISA Adds Actively Exploited Broadcom and Commvault Flaws to KEV Database
What happens when cybercriminals no longer need deep skills to breach your defenses? Today’s attackers are armed with powerful tools that do the heavy lifting — from AI-powered phishing kits… Read More »⚡ Weekly Recap: Critical SAP Exploit, AI-Powered Phishing, Major Breaches, New CVEs & More
Not every security vulnerability is high risk on its own – but in the hands of an advanced attacker, even small weaknesses can escalate into major breaches. These five real… Read More »How Breaches Start: Breaking Down 5 Real Vulns
Government and telecommunications sectors in Southeast Asia have become the target of a “sophisticated” campaign undertaken by a new advanced persistent threat (APT) group called Earth Kurma since June 2024.… Read More »Earth Kurma Targets Southeast Asia With Rootkits and Cloud-Based Data Theft Tools
Cybersecurity researchers are warning about a large-scale phishing campaign targeting WooCommerce users with a fake security alert urging them to download a “critical patch” but deploy a backdoor instead. WordPress… Read More »WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site Backdoors
Threat actors have been observed exploiting two newly disclosed critical security flaws in Craft CMS in zero-day attacks to breach servers and gain unauthorized access. The attacks, first observed by… Read More »Hackers Exploit Critical Craft CMS Flaws; Hundreds of Servers Likely Compromised
Microsoft has revealed that a threat actor it tracks as Storm-1977 has conducted password spraying attacks against cloud tenants in the education sector over the past year. “The attack involves… Read More »Storm-1977 Hits Education Clouds with AzureChecker, Deploys 200+ Crypto Mining Containers
Cybersecurity researchers have detailed the activities of an initial access broker (IAB) dubbed ToyMaker that has been observed handing over access to double extortion ransomware gangs like CACTUS. The IAB… Read More »ToyMaker Uses LAGTOY to Sell Access to CACTUS Ransomware Gangs for Double Extortion
North Korea-linked threat actors behind the Contagious Interview have set up front companies as a way to distribute malware during the fake hiring process. “In this new campaign, the threat… Read More »North Korean Hackers Spread Malware via Fake Crypto Firms and Job Interview Lures