Babuk2, a ransomware group operating under multiple aliases, targets critical sectors including Government, Healthcare, Finance, and Defense contractors with extortion strategies that often reuse previously leaked data combined with newly harvested information. The group has claimed 83 victims as of March 2025 according to Bitdefender's April 2025 Threat
Fortinet
Fortinet VPN appliances face active exploitation of multiple critical vulnerabilities by advanced threat actors using sophisticated evasion techniques. Despite patches, attackers maintain persistence through methods like symbolic link abuse, putting approximately 300,000 exposed devices at significant risk. CYBER INSI
CISA
TRENDING TOPICS APR 16, 2025 CVE Funding Crisis Averted, but Raises Long-Term Governance Concerns MITRE, the long-time operator of the Common Vulnerabilities and Exposures (CVE) and Common Weakness Enumeration (CWE) programs, warned that its contract with the U.S. Department of Homeland Security (DHS) was set to expire
Waitung Threat Hyjacking
TRENDING TOPICS APR 15, 2025 New Stealth Malware Technique “Waiting Thread Hijacking” Bypasses Detection with Minimal Footprint Researchers at Check Point have detailed a novel malware injection method known as Waiting Thread Hijacking (WTH), which allows malicious code to be executed inside legitimate Windows processes without relying on traditionally flagged
Cyber Insights
APT32 (OceanLotus), a suspected Vietnamese state-sponsored threat group, has evolved its sophisticated cyber espionage capabilities to target finance and real estate sectors through advanced supply chain attacks, including backdoored development tools distributed via trusted platforms like GitHub. CYBER INSIGHTS CYB
Windows
TRENDING TOPICS APR 14, 2025 Microsoft Issues Critical Fixes for Active Directory Policy and Windows Server 2025 Failures Microsoft has issued out-of-band updates to address a widespread issue affecting local audit policy reporting on systems managed by Active Directory Group Policy. Admins noticed that even when logon auditing
Trox Stealer
TRENDING TOPICS APR 11, 2025 TROX Stealer Campaign Exploits Urgency to Target Sensitive Data TROX Stealer is at the center of a widespread malware campaign that relies heavily on urgency-driven phishing emails to lure victims into downloading malicious payloads. First detected in December 2024, this stealer was distributed using
AkiraBot
TRENDING TOPICS APR 10, 2025 AkiraBot: AI-Driven Spam Campaign Targeting SMB Web Platforms AkiraBot is an advanced spam automation tool that exploits online contact forms, chat widgets, and comment sections across small to medium-sized business websites. Since September 2024, it has targeted over 420,000 unique domains and
ToddyCat
TRENDING TOPICS APR 09, 2025 ToddyCat Deploys TCESB Malware by Exploiting ESET Flaw and Dell Driver Weakness ToddyCat, a China-affiliated threat actor known for espionage-focused operations in Asia, has been linked to a recent campaign exploiting CVE-2024-11859—a DLL search order vulnerability in ESET’s Command
TRENDING TOPICS APR 08, 2025 Chrome 136 Closes 23-Year Privacy Loophole in Browsing History Google is rolling out a critical update in Chrome 136 that addresses a long-standing privacy flaw over two decades. The issue stems from the CSS :visited selector—a visual tool websites use to show
Neptune RAT
TRENDING TOPICS APR 07, 2025 Neptune RAT: Emerging Threat with Deep System Access and Persistent Capabilities Neptune RAT is a newly identified Remote Access Trojan targeting Windows systems, engineered in Visual Basic .NET and distributed across platforms including GitHub, Telegram, and YouTube. It is promoted as a premium tool for
Phishing
TRENDING TOPICS APR 04, 2025 Microsoft Warns of Widespread Tax-Themed Phishing Campaigns Recent phishing campaigns tied to tax season target thousands of U.S. organizations with a mix of credential theft, malware delivery, and initial access operations. Microsoft Warns of emails arrive with PDF attachments containing QR codes, shortened