UNC6040
TRENDING TOPICS JUNE 05, 2025 Update: UNC6040 Vishing Campaign Exploits Salesforce for Data Theft and Extortion UNC6040, a financially motivated threat group, has been running a series of highly targeted voice phishing (vishing) campaigns aimed at Salesforce environments, with operations starting in late 2024 and continuing into 2025. Google'
Windows
TRENDING TOPICS JUNE 04, 2025 Authentication Coercion in Windows: A Persistent and Growing Threat Authentication coercion attacks have become an increasingly significant concern in Windows environments because they allow attackers to exploit vulnerabilities in systems with low-privileged domain accounts. By manipulating RPC interfaces, attackers can coerce a targeted system, often
JavaScript
TRENDING TOPICS JUNE 03, 2025 Exploiting JavaScript TypeError for XSS in Safari: Risks and Mitigations A new cross-site scripting (XSS) flaw has been discovered in Safari that exploits how the browser constructs TypeError messages. This flaw occurs when the new operator is misused with a malformed string, causing Safari to
Monthly Wrap
MONTHLY WRAP MONTHLY WRAP Overview The convergence of stealth, scale, and sophistication defines the cyber threat landscape in May 2025. Threat actors increasingly blend low-tech social engineering with high-tech delivery, using tactics like ClickFix and AI-generated phishing kits to bypass traditional defenses. Campai
HuluCaptcha
TRENDING TOPICS JUNE 02, 2025 HuluCaptcha Phishing Campaign Using Fake CAPTCHA to Deploy Malware A sophisticated phishing campaign utilizing a fake CAPTCHA system called "HuluCaptcha" has been uncovered. The campaign begins with phishing emails that direct users to fraudulent websites featuring seemingly legitimate CAPTCHA challenges. The hidden malicious
Safari
TRENDING TOPICS MAY 30, 2025 Safari Flaw Makes Fullscreen Phishing Attacks More Effective Security researchers have discovered that Apple's Safari browser has a flaw that makes it easier for attackers to carry out fullscreen phishing scams, specifically using a browser-in-the-middle method (BitM). This technique involves tricking users into
Social Engineering
TRENDING TOPICS MAY 29, 2025 Targeted Spear-Phishing Campaign Deployed by Nation-State Actors to Exploit Financial Executives A sophisticated spear-phishing campaign has been discovered, targeting CFOs and finance executives in sectors including banking, insurance, energy, and investment firms across Europe, Africa, Canada, the Middle East, and South Asia. The attackers, likely
Cookies
TRENDING TOPICS MAY 28, 2025 The Hidden Dangers of Web Cookies and How Cybercriminals Exploit Them Web cookies are small text files stored on your device by websites to enhance your browsing experience and remember your login, shopping cart, or language preferences. However, these seemingly harmless files can pose serious
Cyber Insights
EternalBlue is a leaked NSA exploit from 2017 that targets Microsoft's SMBv1 protocol and continues to pose a significant cybersecurity threat in 2024-2025, enabling attackers to achieve remote code execution and lateral movement across networks without user interaction, as demonstrated in major attacks like WannaCry and NotPetya, with
Microsoft
TRENDING TOPICS MAY 27, 2025 Void Blizzard Cyber Espionage Group Targets Critical Infrastructure in Global Cloud Abuse Campaign Microsoft Threat Intelligence Center (MSTIC) has issued an urgent warning about ongoing cyber espionage activities orchestrated by the Russian-affiliated threat actor Void Blizzard (also known as LAUNDRY BEAR). Active since at least
CVE-2025-47934
TRENDING TOPICS MAY 23, 2025 OpenPGP.js Flaw (CVE-2025-47934): Critical Signature Spoofing Vulnerability in JavaScript Encryption Library A critical flaw in OpenPGP.js, a widely used JavaScript library for handling encrypted email, could allow attackers to spoof digital signatures and make tampered messages appear authentic. Tracked as CVE-2025-47934, this vulnerability
Monero Crypto
TRENDING TOPICS MAY 22, 2025 Monero-Linked Backdoor Malware Abuses PyBitmessage for Stealth C2 AhnLab Security Intelligence Center (ASEC) has identified a new malware campaign actively exploited in the wild that delivers a dual-threat payload: a Monero cryptocurrency miner and a backdoor component. This malware is currently being used in real-world