Do Son Subdomain takeovers are evolving into a serious supply chain threat, allowing attackers to inject malicious content.
cybersecurity
The NCSC reveals DAMASCENED PEACOCK, a sophisticated malware targeting the UK MOD, using spear-phishing, code signing, and COM Hijacking.
Fortinet warns of a novel persistence exploit using symbolic links in FortiGate SSL-VPNs. Upgrade to patched FortiOS versions to mitigate the threat.
SSL certificate validity to drop to 47 days after Apple's proposal, impacting web security and increasing renewal frequency for enterprises.
A critical vulnerability (CVE-2025-27840) in ESP32 microcontrollers threatens billions of IoT devices and the security of Bitcoin wallets. Exploits range from private key theft to forged transactions.
A widespread smishing campaign targeting toll road users across multiple U.S. states is stealing payment credentials. Learn how scammers are impersonating E-ZPass and other toll systems to trick victims
FortiGuard Labs discovers malicious NPM packages targeting PayPal users. Attackers use deceptive tactics to steal usernames, paths, and hostnames
ClearSky's analysis reveals a persistent Houthi influence campaign using fake websites and Facebook personas to spread disinformation in Israel and Gulf states. The operation employs deceptive tactics like cloned news articles and fake profiles to manipulate public discourse.
Week of April 7-13 saw critical Ivanti, WordPress, & Windows vulnerabilities exploited, plus major data breaches impacting millions.
Learn about Precision-Validated Phishing, a sophisticated technique where attackers use real-time email validation to target specific users, making credential theft more effective and harder to detect.
Learn about AkiraBot, an AI-powered spam bot that uses OpenAI to generate personalized messages and flood website contact forms and chat widgets, as detailed in a SentinelLABS report.
IBM's X-Force Red discovers RemoteMonologue, a novel DCOM attack that bypasses LSASS protection and steals NTLM credentials without payloads. Learn how it works and how to mitigate it.
Joomla has released security patches for critical SQL injection (CVE-2025-25226) and MFA bypass (CVE-2025-25227) vulnerabilities. Learn how to protect your Joomla site with urgent updates.
Microsoft integrates AMSI with Exchange and SharePoint Server to enhance security against attacks like SSRF and web shell deployment, protecting against sophisticated threats.
BI.ZONE Threat Intelligence reports Sapphire Werewolf using updated Amethyst stealer malware to target energy companies, employing advanced evasion techniques.Sources and related content
The SideCopy APT group is evolving its tactics, using new methods like MSI packages and custom malware to target critical Indian sectors, including railways and oil & gas
CISA has added Linux kernel vulnerabilities CVE-2024-53197 and CVE-2024-53150 to its KEV catalog, warning of active exploitation. Learn how these flaws are used in Android device exploits and what steps to take.
Research reveals Cisco CVE-2018-0171, a 7-year-old Smart Install RCE vulnerability, remains active, exposing over 1,200 devices. Learn how attackers exploit it and how to protect your network.
A Silent Push report details the evolving tactics of the Scattered Spider hacker collective, including new phishing kits, the Spectre RAT, and targeting of major brands in 2025.
A critical SSRF vulnerability (CVE-2025-32013) has been patched in LNbits, the Lightning Network wallet server. Learn how attackers could exploit LNURL authentication to access internal services and how to protect your systems.
A high-severity XXE vulnerability (CVE-2025-32406) has been discovered in NAKIVO Backup & Replication, allowing potential unauthorized access to sensitive data. Users are urged to upgrade to the latest version.
A new "Pick Your Poison" phishing campaign tricks users into choosing between having their credentials stolen or infecting their systems with malware. Cofense analysis reveals how this double-edged attack uses files.fm to deliver malicious payloads.