Do Son Urgent warning! Malicious npm packages disguised as Cursor AI tools are stealing credentials and installing backdoors on macOS. Protect your code!
Two flaws in Mitel SIP phones—CVE-2025-47188 and CVE-2025-47187—enable remote command execution and file uploads, putting enterprise networks at risk.
CVE-2025-31324 in SAP NetWeaver lets attackers upload web shells, enabling full remote code execution and system compromise—no login required.
Starting Nov 1, 2025, new Android 15 apps on Google Play must support 16KB memory pages, improving performance but increasing memory use.
Users report widespread Chrome crashes on startup and during browsing on Windows, Android, and macOS. iOS is unaffected. Consider alternative browsers.
The DOJ unsealed charges against four foreign nationals and the FBI seized domains for the Anyproxy and 5socks botnets, used to hijack routers globally.
German authorities shut down the crypto-swapping platform eXch, a hub for laundering illicit funds, and seized €34 million in cryptocurrencies after tracing stolen Bybit funds.
Arista patches CVE-2025-0505, a CVSS 10 flaw in CloudVision ZTP that allows admin privilege escalation—on-premise users urged to upgrade.
Silent Push uncovers crypto scam using Twitter ad loophole to spoof CNN and Apple, luring users into buying fake iTokens via misleading redirects.
Atomic Stealer malware is targeting macOS users, disguised as a cracked Evernote download, stealing passwords and data.
Bluetooth SIG announces version 6.1, focusing on enhanced privacy through randomized device addresses and improved energy efficiency.
Critical CVE-2024-11186 in Arista CloudVision Portal allows authenticated users broader network actions. Patch or mitigate now.
Microsoft patched critical Azure & Power Apps security flaws before exploitation. No user action needed. Stay informed on cloud security.
Chrome 137 introduces on-device Gemini Nano AI to detect tech support scams in real time, enhancing protection through Safe Browsing.
Cisco warns of SD-WAN flaws (CVE-2025-20147, CVE-2025-20221) with available proof-of-concept exploit code, posing risks of XSS and traffic bypass.
FBI warns cybercriminals are exploiting outdated routers with TheMoon malware to build anonymous proxy networks for illicit activities.
RedisRaider malware exploits misconfigured Redis servers to deploy cryptominers via cron jobs, evading detection with obfuscation and anti-forensics.
Radware Cloud WAF has vulnerabilities (CVE-2024-56523, CVE-2024-56524) allowing attackers to bypass filtering via crafted HTTP requests and special characters.
A sophisticated campaign deployed malicious IIS modules on South Korean web servers, enabling traffic control and backdoor access. Suspected Chinese actor.
Cofense Intelligence reports a new phishing tactic using blob URIs to bypass Secure Email Gateways. Attackers use these local URIs to hide phishing pages.
Netskope Labs details a complex infection chain used by the DOGE Big Balls Ransomware, involving PowerShell scripts, exploits, and lateral movement tactics.
A sophisticated phishing campaign, Oriental Gudgeon, has been targeting Japanese companies since October 2024. It uses advanced cloaking to steal user data.