North Korean APTs Target Node.js Ecosystem: BeaverTail-OtterCookie JavaScript Malware Exploits npm Supply Chain and Developer Tools
Active Exploitation Alert

North Korean APTs Target Node.js Ecosystem: BeaverTail-OtterCookie JavaScript Malware Exploits npm Supply Chain and Developer Tools

Oct 19, 2025 Read →
Microsoft Teams Targeted: Vanilla Tempest Abuses Azure Certificates in Ransomware Attack Disrupted by Microsoft
Active Exploitation Alert

Microsoft Teams Targeted: Vanilla Tempest Abuses Azure Certificates in Ransomware Attack Disrupted by Microsoft

Oct 19, 2025 Read →
Microsoft Teams Targeted in Rhysida Ransomware Campaign: Over 200 Fraudulent Certificates Revoked by Microsoft
Active Exploitation Alert

Microsoft Teams Targeted in Rhysida Ransomware Campaign: Over 200 Fraudulent Certificates Revoked by Microsoft

Oct 19, 2025 Read →
Europol Dismantles SIMCARTEL SIM Box Network Used for Mass Fake Account Creation and Global Cybercrime
Active Exploitation Alert

Europol Dismantles SIMCARTEL SIM Box Network Used for Mass Fake Account Creation and Global Cybercrime

Oct 19, 2025 Read →
Envoy Air Data Breach: Clop Ransomware Exploits Oracle E-Business Suite Zero-Day (CVE-2025-61882)
Active Exploitation Alert

Envoy Air Data Breach: Clop Ransomware Exploits Oracle E-Business Suite Zero-Day (CVE-2025-61882)

Oct 19, 2025 Read →
Critical WatchGuard Fireware OS VPN Vulnerability (CVE-2025-9242) Allows Unauthenticated Remote Device Takeover
Active Exploitation Alert

Critical WatchGuard Fireware OS VPN Vulnerability (CVE-2025-9242) Allows Unauthenticated Remote Device Takeover

Oct 19, 2025 Read →
Critical CVEs Impacting ConnectWise Automate: Urgent Patch Required to Prevent AiTM Update Attacks
Active Exploitation Alert

Critical CVEs Impacting ConnectWise Automate: Urgent Patch Required to Prevent AiTM Update Attacks

Oct 19, 2025 Read →
CAPI Backdoor: New .NET Malware Targets Windows Systems in Russian Automotive and E-Commerce Sectors via Phishing ZIP Files
Active Exploitation Alert

CAPI Backdoor: New .NET Malware Targets Windows Systems in Russian Automotive and E-Commerce Sectors via Phishing ZIP Files

Oct 19, 2025 Read →
Pixnapping (CVE-2025-48561): Critical Android Vulnerability Enables Stealthy Theft of 2FA Codes and Sensitive On-Screen Data
Active Exploitation Alert

Pixnapping (CVE-2025-48561): Critical Android Vulnerability Enables Stealthy Theft of 2FA Codes and Sensitive On-Screen Data

Oct 15, 2025 Read →
Oracle E-Business Suite Zero-Day Exploit Leaked by ShinyHunters: CVE-2025-61884 Analysis and Mitigation Guide
Active Exploitation Alert

Oracle E-Business Suite Zero-Day Exploit Leaked by ShinyHunters: CVE-2025-61884 Analysis and Mitigation Guide

Oct 15, 2025 Read →
Microsoft Edge IE Mode Exploited as Backdoor: Zero-Day Vulnerability Forces Emergency Restrictions
Active Exploitation Alert

Microsoft Edge IE Mode Exploited as Backdoor: Zero-Day Vulnerability Forces Emergency Restrictions

Oct 15, 2025 Read →
Malicious Crypto-Stealing VSCode Extensions Target OpenVSX and AI Code Editors: Threat Analysis and Mitigation
Active Exploitation Alert

Malicious Crypto-Stealing VSCode Extensions Target OpenVSX and AI Code Editors: Threat Analysis and Mitigation

Oct 15, 2025 Read →
Flax Typhoon Exploits ArcGIS Servers: Chinese APT Turns SOE Into Persistent Backdoor
Active Exploitation Alert

Flax Typhoon Exploits ArcGIS Servers: Chinese APT Turns SOE Into Persistent Backdoor

Oct 15, 2025 Read →
Comprehensive Analysis of TA585’s MonsterV2 Malware: Attack Chain, Technical Innovations, and Risks to Windows Systems
Active Exploitation Alert

Comprehensive Analysis of TA585’s MonsterV2 Malware: Attack Chain, Technical Innovations, and Risks to Windows Systems

Oct 15, 2025 Read →
Zimbra CVE-2025-27915 Zero-Day Exploited via Malicious ICS Files to Breach Brazilian Military Systems
Active Exploitation Alert

Zimbra CVE-2025-27915 Zero-Day Exploited via Malicious ICS Files to Breach Brazilian Military Systems

Oct 7, 2025 Read →
Chinese Cybercrime Group Exploits IIS Servers Worldwide for SEO Fraud and Credential Theft
Active Exploitation Alert

Chinese Cybercrime Group Exploits IIS Servers Worldwide for SEO Fraud and Credential Theft

Oct 7, 2025 Read →
China-Linked PlugX and Bookworm Attacks on Huawei U2000 Telecom Systems in ASEAN – In-Depth Cyber Threat Analysis
Active Exploitation Alert

China-Linked PlugX and Bookworm Attacks on Huawei U2000 Telecom Systems in ASEAN – In-Depth Cyber Threat Analysis

Sep 29, 2025 Read →
New COLDRIVER Malware Campaign Targets Windows Systems: BO Team and Bearlyfy Join Russia-Focused Cyberattacks
Active Exploitation Alert

New COLDRIVER Malware Campaign Targets Windows Systems: BO Team and Bearlyfy Join Russia-Focused Cyberattacks

Sep 28, 2025 Read →
Fortra GoAnywhere Zero-Day CVSS 10 Exploit: In-Depth Analysis and Mitigation Strategies
Active Exploitation Alert

Fortra GoAnywhere Zero-Day CVSS 10 Exploit: In-Depth Analysis and Mitigation Strategies

Sep 28, 2025 Read →
Fake Microsoft Teams Installers Delivering Oyster Malware via Malvertising: Comprehensive Threat Analysis for Microsoft Teams
Active Exploitation Alert

Fake Microsoft Teams Installers Delivering Oyster Malware via Malvertising: Comprehensive Threat Analysis for Microsoft Teams

Sep 28, 2025 Read →
Crash Testing BAS: How Behavioral Analytics Security Validates Real-Time Cyber Defense
Active Exploitation Alert

Crash Testing BAS: How Behavioral Analytics Security Validates Real-Time Cyber Defense

Sep 28, 2025 Read →
Comprehensive Cybersecurity Report: Cisco ASA Firewall Zero-Day Exploits Using RayInitiator and LINE VIPER Malware
Active Exploitation Alert

Comprehensive Cybersecurity Report: Cisco ASA Firewall Zero-Day Exploits Using RayInitiator and LINE VIPER Malware

Sep 28, 2025 Read →
Unmasking GPT-4-Powered MalTerminal Malware’s Ransomware and Reverse Shell Exploitation
Active Exploitation Alert

Unmasking GPT-4-Powered MalTerminal Malware’s Ransomware and Reverse Shell Exploitation

Sep 22, 2025 Read →
UNC1549 Cyber Attack: LinkedIn Job Lures & MINIBIKE Malware Breach Telecom Remote Management Systems in 11 Firms
Active Exploitation Alert

UNC1549 Cyber Attack: LinkedIn Job Lures & MINIBIKE Malware Breach Telecom Remote Management Systems in 11 Firms

Sep 22, 2025 Read →