Do Son
The long-running cybercrime group RevengeHotels—also tracked as TA558—has resurfaced with a new campaign targeting hotels and the...
cybersecurity
The malicious supply chain campaign dubbed “Shai-Hulud” has struck again, this time compromising multiple npm packages published...
A newly disclosed vulnerability in the Linux kernel’s KSMBD subsystem has been assigned CVE-2025-38501, allowing remote attackers...
The Russian-linked threat actor APT28, also known as Sofacy, Fancy Bear, Forest Blizzard, and TAG-110, has unveiled...
First emerging in 2011, SmokeLoader (also known as Smoke or Dofoil) has remained one of the most...
A recent forensic investigation by Check Point Research (CPR) has shed light on the Pure malware family,...
The AISURU botnet, first disclosed by XLab in 2024, has rapidly become one of the most dangerous...
The Socket Research Team has uncovered a large-scale supply chain attack on the npm ecosystem, with more...
CyberProof’s MDR analysts and Threat Hunters observed a sharp increase in DarkCloud Stealer infections, with campaigns primarily...
Hackers are exploiting a critical authentication bypass vulnerability in the Case Theme User plugin, a WordPress plugin...
Cybercriminals are increasingly relying on malware loaders to gain initial access, evade defenses, and deliver sophisticated payloads....
Squid, the widely deployed caching proxy supporting HTTP, HTTPS, FTP, and more, has patched a critical security...
The Federal Bureau of Investigation (FBI), in coordination with DHS/CISA, has released a new FLASH Alert (FLASH-20250912-001)...
The Taiwan Computer Emergency Response Team (TWCERT/CC) has issued a vulnerability note warning of two critical security...
Expel researchers have lifted the veil on a long-running malware operation abusing the global trust model of...
The rise of large language model (LLM) applications has made frameworks like LangChain and its ports foundational...
The U.S. energy industry has become a prime target for large-scale phishing operations in 2025, according to...
IBM X-Force has published new findings on Hive0154, a China-aligned threat actor also tracked under names such...
Security researchers at ETH Zurich have published a study revealing how attackers can break through virtualization boundaries...
Trend Micro researchers have uncovered a sophisticated malware campaign dubbed EvilAI, which disguises itself as productivity and...