News

Warlock Ransomware Hits US Firms Exploiting SharePoint Zero-Day, Linked to China’s CamoFei APT

• Malware
• Vulnerability Report

Warlock Ransomware Hits US Firms Exploiting SharePoint Zero-Day, Linked to China’s CamoFei APT

Do Son October 24, 2025 0

Researchers from Symantec and Carbon Black have published a detailed analysis of Warlock ransomware, a newly emerging...

Read More Read more about Warlock Ransomware Hits US Firms Exploiting SharePoint Zero-Day, Linked to China’s CamoFei APT

PhantomCaptcha Spyware Targets Ukraine NGOs with Fake Cloudflare Lure to Deploy WebSocket RAT

• Cyber Security
• Malware

PhantomCaptcha Spyware Targets Ukraine NGOs with Fake Cloudflare Lure to Deploy WebSocket RAT

Do Son October 24, 2025 0

Researchers from SentinelLABS, in collaboration with the Digital Security Lab of Ukraine, have exposed a coordinated spearphishing...

Read More Read more about PhantomCaptcha Spyware Targets Ukraine NGOs with Fake Cloudflare Lure to Deploy WebSocket RAT

Pakistan-Linked TransparentTribe APT Deploys AI-Assisted DeskRAT Malware Against India’s BOSS Linux Systems

• Cyber Security
• Malware

Pakistan-Linked TransparentTribe APT Deploys AI-Assisted DeskRAT Malware Against India’s BOSS Linux Systems

Do Son October 24, 2025 0

The Sekoia Threat Detection & Research (TDR) Team has identified a new wave of cyber espionage activity...

Read More Read more about Pakistan-Linked TransparentTribe APT Deploys AI-Assisted DeskRAT Malware Against India’s BOSS Linux Systems

GM Bets on AI: Gemini to Replace CarPlay/Android Auto in All Cars by 2026

• Technology

GM Bets on AI: Gemini to Replace CarPlay/Android Auto in All Cars by 2026

Do Son October 24, 2025 0

At its recent “GM Forward” media event, General Motors (GM) announced a major strategic shift in its...

Read More Read more about GM Bets on AI: Gemini to Replace CarPlay/Android Auto in All Cars by 2026

Curbing the Scroll: YouTube Shorts Adds Timer to Fight Digital Addiction

• Technology

Curbing the Scroll: YouTube Shorts Adds Timer to Fight Digital Addiction

Do Son October 24, 2025 0

As concerns over social media addiction continue to mount, YouTube has officially introduced a timer feature for...

Read More Read more about Curbing the Scroll: YouTube Shorts Adds Timer to Fight Digital Addiction

Reddit Sues Perplexity and Data Brokers for ‘Industrial-Scale’ Scraping

• Technology

Reddit Sues Perplexity and Data Brokers for ‘Industrial-Scale’ Scraping

Do Son October 23, 2025 0

The well-known online forum Reddit has announced legal action against Perplexity, SerApi, OxyLabs, and AWMProxy, accusing these...

Read More Read more about Reddit Sues Perplexity and Data Brokers for ‘Industrial-Scale’ Scraping

iPhone Air Flops: Apple to Slash Production by Over 80% After Weak Sales

• Technology

iPhone Air Flops: Apple to Slash Production by Over 80% After Weak Sales

Do Son October 23, 2025 0

Renowned analyst Ming-Chi Kuo recently released a supply chain report revealing that sales of Apple’s newly launched...

Read More Read more about iPhone Air Flops: Apple to Slash Production by Over 80% After Weak Sales

Security First: Windows 11 Disables File Previews for Web Downloads

• Windows

Security First: Windows 11 Disables File Previews for Web Downloads

Do Son October 23, 2025 0

Earlier this month, Microsoft released a Windows 11 cumulative update addressing several known feature issues and security...

Read More Read more about Security First: Windows 11 Disables File Previews for Web Downloads

Full-Scale War: Apple Challenges EU’s Digital Markets Act in Court

• Technology

Full-Scale War: Apple Challenges EU’s Digital Markets Act in Court

Do Son October 23, 2025 0

The fierce standoff between Apple and the European Union over the Digital Markets Act (DMA) has officially...

Read More Read more about Full-Scale War: Apple Challenges EU’s Digital Markets Act in Court

Deepfake Defense: YouTube Rolls Out AI Tool to Protect Creator Likeness

• Technology

Deepfake Defense: YouTube Rolls Out AI Tool to Protect Creator Likeness

Do Son October 23, 2025 0

With the rapid advancement and widespread adoption of cutting-edge AI generation tools such as OpenAI’s Sora 2,...

Read More Read more about Deepfake Defense: YouTube Rolls Out AI Tool to Protect Creator Likeness

ISC Patches Multiple High-Severity BIND Vulnerabilities Enabling Cache Poisoning and Denial of Service Attacks

• Vulnerability Report

ISC Patches Multiple High-Severity BIND Vulnerabilities Enabling Cache Poisoning and Denial of Service Attacks

Do Son October 23, 2025 0

The Internet Systems Consortium (ISC) has issued patches for three high-severity vulnerabilities impacting the BIND 9 DNS...

Read More Read more about ISC Patches Multiple High-Severity BIND Vulnerabilities Enabling Cache Poisoning and Denial of Service Attacks

Jira Path Traversal Flaw (CVE-2025-22167) Allows Arbitrary File Write on Server/Data Center

• Vulnerability Report

Jira Path Traversal Flaw (CVE-2025-22167) Allows Arbitrary File Write on Server/Data Center

Do Son October 23, 2025 0

Atlassian has released patches addressing a high-severity Path Traversal vulnerability (CVE-2025-22167) affecting Jira Software Data Center and...

Read More Read more about Jira Path Traversal Flaw (CVE-2025-22167) Allows Arbitrary File Write on Server/Data Center

Symantec Exposes Chinese APT Overlap: Zingdoor, ShadowPad, and KrustyLoader Used in Global Espionage

• Cyber Security
• Malware

Symantec Exposes Chinese APT Overlap: Zingdoor, ShadowPad, and KrustyLoader Used in Global Espionage

Do Son October 23, 2025 0

Symantec’s investigation uncovered a complex web of interconnected Chinese espionage operations, with infrastructure and tooling overlapping multiple...

Read More Read more about Symantec Exposes Chinese APT Overlap: Zingdoor, ShadowPad, and KrustyLoader Used in Global Espionage

Socket Uncovers Malicious NuGet Typosquat “Netherеum.All” Exfiltrating Wallet Keys via Solana-Themed C2

• Malware

Socket Uncovers Malicious NuGet Typosquat “Netherеum.All” Exfiltrating Wallet Keys via Solana-Themed C2

Do Son October 23, 2025 0

Researchers from Socket’s Threat Research Team have uncovered an active homoglyph typosquat on NuGet impersonating the widely...

Read More Read more about Socket Uncovers Malicious NuGet Typosquat “Netherеum.All” Exfiltrating Wallet Keys via Solana-Themed C2

Critical WSUS Flaw (CVE-2025-59287, CVSS 9.8) Allows Unauthenticated RCE via Unsafe Cookie Deserialization, PoC Available

• Vulnerability Report

Critical WSUS Flaw (CVE-2025-59287, CVSS 9.8) Allows Unauthenticated RCE via Unsafe Cookie Deserialization, PoC Available

Do Son October 23, 2025 0

Security researcher Batuhan Er from HawkTrace has detailed a critical remote code execution (RCE) vulnerability in Microsoft...

Read More Read more about Critical WSUS Flaw (CVE-2025-59287, CVSS 9.8) Allows Unauthenticated RCE via Unsafe Cookie Deserialization, PoC Available

Chinese Hackers Exploit Exposed ASP.NET Keys to Deploy TOLLBOOTH IIS Backdoor and Kernel Rootkit

• Malware

Chinese Hackers Exploit Exposed ASP.NET Keys to Deploy TOLLBOOTH IIS Backdoor and Kernel Rootkit

Do Son October 23, 2025 0

Researchers from Elastic Security Labs, in collaboration with Texas A&M University System (TAMUS) Cybersecurity, have uncovered a...

Read More Read more about Chinese Hackers Exploit Exposed ASP.NET Keys to Deploy TOLLBOOTH IIS Backdoor and Kernel Rootkit

Iran-Linked MuddyWater Deploys Phoenix v4 Backdoor via Compromised Emails and NordVPN Exit Node

• Cyber Security
• Malware

Iran-Linked MuddyWater Deploys Phoenix v4 Backdoor via Compromised Emails and NordVPN Exit Node

Do Son October 23, 2025 0

Researchers at Group-IB Threat Intelligence have uncovered a new global phishing and espionage campaign conducted by the...

Read More Read more about Iran-Linked MuddyWater Deploys Phoenix v4 Backdoor via Compromised Emails and NordVPN Exit Node

Critical NeuVector RCE Flaw (CVE-2025-54469, CVSS 10.0) Allows Command Injection via Unsanitized Environment Variables

• Vulnerability Report

Critical NeuVector RCE Flaw (CVE-2025-54469, CVSS 10.0) Allows Command Injection via Unsanitized Environment Variables

Do Son October 23, 2025 0

The SUSE Rancher Security team has issued a critical advisory addressing a command injection and buffer overflow...

Read More Read more about Critical NeuVector RCE Flaw (CVE-2025-54469, CVSS 10.0) Allows Command Injection via Unsanitized Environment Variables

Major Threat: Vidar Stealer v2.0 Bypasses Chrome AppBound Encryption with Multithreaded Memory Injection

• Malware

Major Threat: Vidar Stealer v2.0 Bypasses Chrome AppBound Encryption with Multithreaded Memory Injection

Do Son October 23, 2025 0

Researchers at Trend Micro have released an in-depth analysis of Vidar Stealer v2.0, a major overhaul of...

Read More Read more about Major Threat: Vidar Stealer v2.0 Bypasses Chrome AppBound Encryption with Multithreaded Memory Injection

CISA Warns: Critical Raisecom Router Flaw (CVE-2025-11534, CVSS 9.8) Allows Unauthenticated Root SSH Access

• Vulnerability Report

CISA Warns: Critical Raisecom Router Flaw (CVE-2025-11534, CVSS 9.8) Allows Unauthenticated Root SSH Access

Do Son October 23, 2025 0

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert regarding a critical authentication bypass vulnerability...

Read More Read more about CISA Warns: Critical Raisecom Router Flaw (CVE-2025-11534, CVSS 9.8) Allows Unauthenticated Root SSH Access