TRENDING TOPICS MAR 17, 2025 CSS Exploitation in Spam and Tracking Attacks Hackers are finding new ways to sneak dangerous emails past spam filters and track what people do with their messages. One method they use involves CSS, a tool generally meant for designing web pages. By tweaking specific CSS
SideWinder APT has significantly expanded beyond its traditional military and government targets to focus on maritime infrastructure, logistics, telecommunications, and nuclear energy sectors across South Asia, the Middle East, Africa, and Europe.
TRENDING TOPICS MAR 14, 2025 AI-Driven Phishing: Lowering the Barrier for Cybercriminals Symantec researchers tested OpenAI's Operator agent to see how easily it could be manipulated to conduct a phishing attack with minimal human effort. The AI was tasked with finding a specific employee’s name, uncovering their
TRENDING TOPICS MAR 13, 2025 Critical Authentication Bypass and DoS Vulnerabilities Discovered in ruby-saml Two high-severity security flaws, CVE-2025-25291 and CVE-2025-25292, have been found in the ruby-saml library, which is widely used for security assertion markup language (SAML) authentication and SSO. These vulnerabilities stem from inconsistencies in how REXML and
TRENDING TOPICS MAR 12, 2025 Update: AnubisBackdoor and Critical Windows Vulnerabilities Cybercriminals continue to refine their tactics, with the Savage Ladybug group linked to FIN7 introducing AnubisBackdoor. AnubisBackdoor is a Python-based remote access tool designed for stealthy command execution and data theft. Unlike the Android-targeting Anubis banking trojan, this backdoor
TRENDING TOPICS MAR 11, 2025 Update: SideWinder APT Expands Targeting to Critical Infrastructure and Espionage Operations The SideWinder APT has significantly expanded its operations, shifting from targeting military and government entities in Pakistan, Sri Lanka, China, and Nepal to maritime infrastructure, logistics, and nuclear energy sectors in South and Southeast
TRENDING TOPICS MAR 10, 2025 Ragnar Loader: A Stealthy Backdoor Fueling Ransomware Operations Threat researchers have uncovered new details about Ragnar Loader, a highly modular and evasive malware toolkit used by cybercrime groups, including FIN7, FIN8, Ragnar Locker (Monstrous Mantis), and Ruthless Mantis (ex-REvil). Initially observed in 2020, Ragnar Loader
Cyber Insights
The new Anubis ransomware group has emerged as a significant threat to Microsoft environments, specifically targeting Windows-based infrastructure, backup servers, and enterprise cloud storage.
TRENDING TOPICS MAR 07, 2025 Update: Microsoft Disrupts Massive Malvertising Campaign Using GitHub for Malware Distribution Microsoft has dismantled a large-scale malvertising campaign that compromised nearly one million devices worldwide, leveraging GitHub, Dropbox, and Discord as malware distribution platforms. The attack tracked as Storm-0408, involved injecting malicious ads into illegal
01 10 11 TRENDING TOPICS Update: EncryptHub Expands Cybercrime Operations with Phishing, Malware, and Ransomware EncryptHub, a financially driven threat group, has been carrying out advanced phishing campaigns to deliver information stealers and ransomware while developing a new remote access tool called EncryptRAT. This group targets users of popular applications
01 10 11 TRENDING TOPICS Lotus Panda Expands Operations with Evolved Sagerunex Backdoor Lotus Panda, a Chinese threat actor also known as Billbug, Bronze Elgin, Lotus Blossom, Spring Dragon, and Thrip, has been ramping up cyber operations against government, manufacturing, telecommunications, and media sectors in the Philippines, Vietnam, Hong Kong,
State Sponsored
MONTHLY WRAP MONTHLY WRAP Overview The cybersecurity landscape in February 2025 saw a surge in sophisticated cyber threats, with a continued evolution in attack methodologies, increased exploitation of zero-day vulnerabilities, and a notable escalation in botnet and ransomware activities. State-sponsored actors from Ch