01 10 11 TRENDING TOPICS Update: EncryptHub Expands Cybercrime Operations with Phishing, Malware, and Ransomware EncryptHub, a financially driven threat group, has been carrying out advanced phishing campaigns to deliver information stealers and ransomware while developing a new remote access tool called EncryptRAT. This group targets users of popular applications
01 10 11 TRENDING TOPICS Lotus Panda Expands Operations with Evolved Sagerunex Backdoor Lotus Panda, a Chinese threat actor also known as Billbug, Bronze Elgin, Lotus Blossom, Spring Dragon, and Thrip, has been ramping up cyber operations against government, manufacturing, telecommunications, and media sectors in the Philippines, Vietnam, Hong Kong,
State Sponsored
MONTHLY WRAP MONTHLY WRAP Overview The cybersecurity landscape in February 2025 saw a surge in sophisticated cyber threats, with a continued evolution in attack methodologies, increased exploitation of zero-day vulnerabilities, and a notable escalation in botnet and ransomware activities. State-sponsored actors from Ch
01 10 11 TRENDING TOPICS Android Zero-Day Exploits Exposed in March 2025 Security Update Google has patched 43 security flaws in its March 2025 Android update, including two actively exploited zero-days. One of these, CVE-2024-50302, is a high-severity information disclosure vulnerability in the Linux kernel’s Human Interface Device driver.
01 10 11 TRENDING TOPICS Ransomware Gangs Exploit Paragon Partition Manager Driver for Privilege Escalation Threat actors exploit a zero-day vulnerability (CVE-2025-0289) in Paragon Partition Manager’s BioNTdrv.sys driver to escalate privileges and execute arbitrary code in ransomware attacks. This flaw is part of a larger set of five
Infostealer malware deployment has surged recently among both financially motivated cybercriminals and espionage-focused APT groups.
01 10 11 Vo1d Botnet Expands, Infecting Over 1.5 Million Android TV Devices A new variant of the Vo1d malware botnet has compromised 1,590,299 Android TV devices across 226 countries, with 800,000 active bots still in operation. This botnet, tracked by XLab since November 2024, has
The combination of effective security evasion, sophisticated techniques, and severe impact classifies this as a high-priority threat. 01001 10110 11010 00101 11100 01111 CYBER INSIGHTS CYBER INSIGHTS Breakdown A widespread malware campaign is exploiting a serious flaw in Windows security by abusing an outda
01 10 11 nRootTag: Bluetooth Exploit Turns Apple’s Find My Network Into a Covert Tracking System Security researchers have identified nRootTag, a Bluetooth-based tracking vulnerability in Apple's Find My network, which could turn nearly any Bluetooth-enabled device into a covert tracking beacon. The exploit takes advantage of
01 10 11 Table of Contents 1. New Auto-Color Linux Backdoor Targets North American Govts, Universities 2. Update: CISA Adds Microsoft and Zimbra Flaws to KEV Catalog Amid Active Exploitation 3. Update: LightSpy Expands to 100+ Commands, Increasing Control Over Windows, macOS, Linux, and Mobile 4. New Undetectable Batch Script
*Security researchers discovered attackers can re-register abandoned AWS S3 buckets to intercept millions of file requests and deliver malware, a vulnerability AWS has not addressed despite warnings.
01 10 11 Table of Contents 1. Update: Poseidon Stealer Targets Mac Users via Fake DeepSeek Website 2. 200 Malicious GitHub Repositories Distributing Malware to Developers 3. Over 35,000 Websites Hacked to Inject Malicious Scripts Redirecting Users to Chinese Websites 1. A sophisticated malware campaign actively targets macOS users