Critical n8n Vulnerability (CVE-2025-68613): 9.9 CVSS Authenticated Remote Code Execution Risk and Mitigation Steps
Cybersecurity Incident Analysis

Critical n8n Vulnerability (CVE-2025-68613): 9.9 CVSS Authenticated Remote Code Execution Risk and Mitigation Steps

Jan 6, 2026 Read →
ClickFix Attack Exploits Fake Windows BSOD Screens to Deliver Malware on Windows Systems
Cybersecurity Incident Analysis

ClickFix Attack Exploits Fake Windows BSOD Screens to Deliver Malware on Windows Systems

Jan 6, 2026 Read →
Transparent Tribe (APT36) Deploys Advanced RAT Attacks Targeting Indian Government and Academic Institutions via LNK and HTA Malware
Active Exploitation Alert

Transparent Tribe (APT36) Deploys Advanced RAT Attacks Targeting Indian Government and Academic Institutions via LNK and HTA Malware

Jan 4, 2026 Read →
Resecurity Honeypot Incident: Analysis of Scattered Lapsus$ Hunters’ Claimed Breach and Threat Intelligence Effectiveness
Active Exploitation Alert

Resecurity Honeypot Incident: Analysis of Scattered Lapsus$ Hunters’ Claimed Breach and Threat Intelligence Effectiveness

Jan 4, 2026 Read →
Kimwolf Botnet: Massive Android TV Box and IoT Malware Threat Exploiting Global Networks
Active Exploitation Alert

Kimwolf Botnet: Massive Android TV Box and IoT Malware Threat Exploiting Global Networks

Jan 4, 2026 Read →
Google Cloud Application Integration Exploited in Sophisticated Multi-Stage Phishing Campaign Targeting Microsoft 365 Credentials
Active Exploitation Alert

Google Cloud Application Integration Exploited in Sophisticated Multi-Stage Phishing Campaign Targeting Microsoft 365 Credentials

Jan 4, 2026 Read →
Covenant Health Qilin Ransomware Breach: Technical Analysis of 2025 Attack Impacting 478,188 Patient Records
Active Exploitation Alert

Covenant Health Qilin Ransomware Breach: Technical Analysis of 2025 Attack Impacting 478,188 Patient Records

Jan 4, 2026 Read →
Shai-Hulud 2.0 npm Supply Chain Attack Exposes Trust Wallet: $8.5 Million Stolen in Major Cloud-Native Breach
Technology

Shai-Hulud 2.0 npm Supply Chain Attack Exposes Trust Wallet: $8.5 Million Stolen in Major Cloud-Native Breach

Dec 31, 2025 Read →
RondoDox Botnet Actively Exploits React2Shell Vulnerability (CVE-2025-55182) in Next.js and React Server Components
Technology

RondoDox Botnet Actively Exploits React2Shell Vulnerability (CVE-2025-55182) in Next.js and React Server Components

Dec 31, 2025 Read →
European Space Agency JIRA and Bitbucket Breach: Hacker Claims 200GB Data Theft from External Servers
Technology

European Space Agency JIRA and Bitbucket Breach: Hacker Claims 200GB Data Theft from External Servers

Dec 31, 2025 Read →
ErrTraffic: How ClickFix Attacks Exploit Fake Browser Glitches to Compromise WordPress, Joomla, and cPanel Systems
Technology

ErrTraffic: How ClickFix Attacks Exploit Fake Browser Glitches to Compromise WordPress, Joomla, and cPanel Systems

Dec 31, 2025 Read →
Critical Vulnerability in IBM API Connect (CVE-2025-13915) Enables Remote Authentication Bypass and Unauthorized Access
Technology

Critical Vulnerability in IBM API Connect (CVE-2025-13915) Enables Remote Authentication Bypass and Unauthorized Access

Dec 31, 2025 Read →
Critical CVE-2025-13915 Authentication Bypass Vulnerability in IBM API Connect: Impact, Exploitation, and Mitigation Guidance
Technology

Critical CVE-2025-13915 Authentication Bypass Vulnerability in IBM API Connect: Impact, Exploitation, and Mitigation Guidance

Dec 31, 2025 Read →
WIRED Database Breach: Over 2.3 Million Subscriber Records Leaked in Condé Nast Cyberattack
Cybersecurity Incident Analysis

WIRED Database Breach: Over 2.3 Million Subscriber Records Leaked in Condé Nast Cyberattack

Dec 29, 2025 Read →
Korean Air Employee Data Breach Clop Ransomware Supply Chain Attack Report
Cybersecurity Incident Analysis

Korean Air Employee Data Breach Clop Ransomware Supply Chain Attack Report

Dec 29, 2025 Read →
Trust Wallet Chrome Extension Supply Chain Attack: $7 Million Cryptocurrency Theft via Compromised v2.68 Update
Cybersecurity Incident Analysis

Trust Wallet Chrome Extension Supply Chain Attack: $7 Million Cryptocurrency Theft via Compromised v2.68 Update

Dec 28, 2025 Read →
Rainbow Six Siege Massive Breach: MongoBleed Exploit Leads to Unauthorized Distribution of Billions of In-Game Credits
Cybersecurity Incident Analysis

Rainbow Six Siege Massive Breach: MongoBleed Exploit Leads to Unauthorized Distribution of Billions of In-Game Credits

Dec 28, 2025 Read →
MongoDB MongoBleed Vulnerability (CVE-2025-14847): Critical Unauthenticated Memory Leak and Data Exposure Risk
Cybersecurity Incident Analysis

MongoDB MongoBleed Vulnerability (CVE-2025-14847): Critical Unauthenticated Memory Leak and Data Exposure Risk

Dec 28, 2025 Read →
LastPass 2022 Breach Enabled Years-Long Cryptocurrency Thefts with Over $35M Laundered Through Russian Exchanges, TRM Labs Reports
Cybersecurity Incident Analysis

LastPass 2022 Breach Enabled Years-Long Cryptocurrency Thefts with Over $35M Laundered Through Russian Exchanges, TRM Labs Reports

Dec 28, 2025 Read →
LangGrinch (CVE-2025-68664): Critical langchain-core Vulnerability Enables Secret Exfiltration and Code Execution via Serialization Injection
Cybersecurity Incident Analysis

LangGrinch (CVE-2025-68664): Critical langchain-core Vulnerability Enables Secret Exfiltration and Code Execution via Serialization Injection

Dec 28, 2025 Read →
WebRAT Malware Campaign Targets Security Researchers via Fake CVE Exploit PoCs on GitHub
Active Exploitation Alert

WebRAT Malware Campaign Targets Security Researchers via Fake CVE Exploit PoCs on GitHub

Dec 25, 2025 Read →
La Poste and La Banque Postale Hit by Pro-Russian Noname057(16) DDoS Cyberattack in December 2025
Active Exploitation Alert

La Poste and La Banque Postale Hit by Pro-Russian Noname057(16) DDoS Cyberattack in December 2025

Dec 25, 2025 Read →
Healthcare Industry Pushes Back on HIPAA Security Rule Overhaul: Impact on Electronic Protected Health Information (ePHI) Systems
Active Exploitation Alert

Healthcare Industry Pushes Back on HIPAA Security Rule Overhaul: Impact on Electronic Protected Health Information (ePHI) Systems

Dec 25, 2025 Read →
Fake MAS Windows Activation Domain Infects Windows Systems with Cosmali Loader and XWorm PowerShell Malware
Active Exploitation Alert

Fake MAS Windows Activation Domain Infects Windows Systems with Cosmali Loader and XWorm PowerShell Malware

Dec 25, 2025 Read →