November 7, 2025

Vulnerability

Dell CloudLink Privilege Escalation, Command Injection

Critical Dell CloudLink Flaws Allow User to Escape Shell and Gain Full System Control

Ddos November 6, 2025
Win32K Type Confusion, DirectComposition LPE

Researcher Releases PoC Exploit for Windows Elevation of Privilege Vulnerability

Ddos November 4, 2025
CVE-2025-62291 strongSwan Heap Overflow

Critical strongSwan Heap Overflow in EAP-MSCHAPv2 Plugin Allows Remote Code Execution

Ddos October 29, 2025
UniFi Access Bypass, CVE-2025-52665

Ubiquiti Patches Critical CVSS 10 Flaw in UniFi Access That Exposed Management API Without Authentication

Ddos October 27, 2025

Cyber Security

US Treasury Sanctions 8 North Koreans and 2 Banks for Laundering Crypto to Fund WMD Programs DPRK Sanctions, Crypto Money Laundering

US Treasury Sanctions 8 North Koreans and 2 Banks for Laundering Crypto to Fund WMD Programs

November 7, 2025
Booking.com Phishing Campaign Hijacks Hotel Accounts to Deliver PureRAT via ClickFix Lure PureRAT ClickFix, Booking.com Phishing

Booking.com Phishing Campaign Hijacks Hotel Accounts to Deliver PureRAT via ClickFix Lure

November 7, 2025
New Cephalus Ransomware Uses Fake AES Keys and GoLang to Thwart Analysis Cephalus Go Ransomware, Fake AES Key

New Cephalus Ransomware Uses Fake AES Keys and GoLang to Thwart Analysis

November 7, 2025
Coordinated Cryptojacking Blitz: Hackers Exploit ThinkPHP and PHP RCE Flaws to Maximize Mining Profit PHP Cryptojacking, Coordinated Exploitation

Coordinated Cryptojacking Blitz: Hackers Exploit ThinkPHP and PHP RCE Flaws to Maximize Mining Profit

November 5, 2025

Malware Alert

DragonForce Ransomware Strikes Manufacturing Sector with Brute-Force, Exfiltrating Data Over SSH to Russian Host DragonForce RaaS, Manufacturing Ransomware

DragonForce Ransomware Strikes Manufacturing Sector with Brute-Force, Exfiltrating Data Over SSH to Russian Host

November 7, 2025
Next-Gen Threat: Google Exposes AI-Enabled Malware That Rewrites Its Own Code with Gemini LLM Stonefly group -HiatusRAT Actors

Next-Gen Threat: Google Exposes AI-Enabled Malware That Rewrites Its Own Code with Gemini LLM

November 6, 2025
Curly COMrades APT Bypasses EDR by Hiding Linux Backdoor Inside Covert Hyper-V VM hyper-V

Curly COMrades APT Bypasses EDR by Hiding Linux Backdoor Inside Covert Hyper-V VM

November 6, 2025
APT-C-60 Targets Japan: New SpyGlace Malware Uses VHDX LNK and GitHub Tasking for Persistent Espionage res

APT-C-60 Targets Japan: New SpyGlace Malware Uses VHDX LNK and GitHub Tasking for Persistent Espionage

November 6, 2025

Data Leak

The Vanishing Act: Apple Forces GitHub to Delete 8,270 Repositories of Leaked App Store Code Apple DMCA, App Store Source Code

The Vanishing Act: Apple Forces GitHub to Delete 8,270 Repositories of Leaked App Store Code

November 6, 2025
Dev Oversight: Apple Accidentally Leaked Entire App Store Web Source Code via SourceMap App Store Source Code, SourceMap Leak

Dev Oversight: Apple Accidentally Leaked Entire App Store Web Source Code via SourceMap

November 5, 2025
Privacy Win: Firefox Mandates Clear Data Collection Disclosure for All Extensions Firefox VPN Feature, Browser-Only VPN Firefox Add-ons Rollback Firefox Encryption Firefox MKV support Firefox ESR, Windows 7

Privacy Win: Firefox Mandates Clear Data Collection Disclosure for All Extensions

October 28, 2025
Google Debunks False Gmail Breach Rumors as Credentials Leak Again Google Play payments, external billing Gmail HIBP leak Privacy Sandbox Termination, Third-Party Cookies Google Strategic Market Status, CMA Antitrust ICEBlock Removal, DOJ Pressure Google Logo, AI Branding

Google Debunks False Gmail Breach Rumors as Credentials Leak Again

October 28, 2025