Trending Topics
CVE-2025-37734
Medium
Elastic Kibana
SSRF VULNERABILITY
Origin Validation Error in
Pre-Built Toolkits Are Simplifying Cybercrime
Commercial kits like Tycoon 2FA and SessionShark now let low-skill attackers bypass MFA and blind EDR without writing custom malware, fueling a surge in account takeovers, BEC, and ransomware access.
Trending Topics
CVE-2025-30398
Critical
Nuance PowerScribe 360
INFO DISCLOSURE
Information disclosure vulnerability
Trending Topics
TRENDING TOPICS
NOV 10, 2025
Cephalus Ransomware Exploits RDP Credentials to Execute
Trending Topics
CVE-2025-59287
Critical
Windows Server Update Service
DESERIALIZATION RCE
UNAUTHENTICATED
Deserialization
Trending Topics
TRENDING TOPICS
NOV 06, 2025
Escalating Threat Trends in AI-Driven Malware
Qilin Ransomware Threat
Qilin affiliates run Linux encryptors on Windows through legitimate RMM tools, pair BYOVD attacks with Veeam credential theft, and have hit manufacturers like Nissan and Asahi Group Holdings for tens of millions in losses.
Trending Topics
SmudgedSerpent targets U.S. Iran policy experts, tied to Charming Kitten and MuddyWater. Scattered Spider (UNC3944), LAPSUS$, and ShinyHunters (UNC6040) merge into a cybercrime alliance. NGate enables NFC-relay ATM theft. APT-C-60 refines VHDX phishing.
Trending Topics
TRENDING TOPICS
NOV 04, 2025
SesameOp: Backdoor Leveraging OpenAI API for Covert
Monthly Wrap
MONTHLY WRAP
MONTHLY WRAP
Overview
In October 2025, attackers systematically weaponized trusted
Trending Topics
TRENDING TOPICS
NOV 03, 2025
Agent Session Smuggling: How Malicious AI Hijacks
Trending Topics
CVE-2025-59287
Critical
Windows Server Update Service
UNSAFE DESERIALIZATION
UNAUTHENTICATED
A