Iran
TRENDING TOPICS AUG 26, 2025 Iranian Shipping Crippled Through Maritime Communications Hack In late August 2025, a coordinated cyberattack crippled Iran’s maritime communications, severing satellite links, navigation data, and port coordination for 64 vessels. The operation, attributed to the hacktivist group Lab-Dookhtegan, did not directly breach each ship but
ACRStealer
TRENDING TOPICS JULY 24, 2025 Update: ACRStealer Evolves into AmateraStealer with Advanced Evasion and C2 Techniques ACRStealer, an information-stealing malware that has been active since 2024, underwent significant enhancements in 2025, including upgrades to its stealth and command-and-control (C2) capabilities. Noted initially for abusing services like Google Docs and Steam
Salt Typhoon
CVE-2025-49596 Critical MCP Inspector A remote code execution vulnerability in MCP Inspector due to improper validation of serialized input during inspection routines. This vulnerability can be exploited over the network without authentication. Impact: Users should immediately upgrade to MCP Inspector version 3.9.2 or later to remediate this critical
Atomic macOS
TRENDING TOPICS JULY 08, 2025 Update: Atomic macOS Stealer Expands Capabilities With Persistent Backdoor, Escalating Threat to macOS Ecosystems Earlier this year, we reported on Russian-speaking threat actors using platforms like GitHub and FileZilla to distribute the Atomic macOS Stealer (AMOS), targeting macOS users through fake versions of legitimate software.
Iran
TRENDING TOPICS JUNE 24, 2025 DHS Warns of Pro-Iranian Hacktivist Surge Following U.S.-Iran Military Escalation In the aftermath of the United States’ June 22, 2025, airstrikes on Iranian nuclear facilities and Tehran’s swift retaliatory missile attacks on U.S. bases in Qatar and Iraq, the Department of
Godfather
TRENDING TOPICS JUNE 20, 2025 UPDATE: Godfather Android Trojan Uses Virtual Sandbox to Hijack Real Banking and Crypto Apps The latest version of the GodFather Android trojan marks a serious escalation in mobile malware by deploying a full virtualization framework directly on infected devices. Unlike traditional banking trojans that rely
JavaScript
TRENDING TOPICS JUNE 03, 2025 Exploiting JavaScript TypeError for XSS in Safari: Risks and Mitigations A new cross-site scripting (XSS) flaw has been discovered in Safari that exploits how the browser constructs TypeError messages. This flaw occurs when the new operator is misused with a malformed string, causing Safari to
HuluCaptcha
TRENDING TOPICS JUNE 02, 2025 HuluCaptcha Phishing Campaign Using Fake CAPTCHA to Deploy Malware A sophisticated phishing campaign utilizing a fake CAPTCHA system called "HuluCaptcha" has been uncovered. The campaign begins with phishing emails that direct users to fraudulent websites featuring seemingly legitimate CAPTCHA challenges. The hidden malicious
Social Engineering
TRENDING TOPICS MAY 29, 2025 Targeted Spear-Phishing Campaign Deployed by Nation-State Actors to Exploit Financial Executives A sophisticated spear-phishing campaign has been discovered, targeting CFOs and finance executives in sectors including banking, insurance, energy, and investment firms across Europe, Africa, Canada, the Middle East, and South Asia. The attackers, likely
Application Security
TRENDING TOPICS MAY 09, 2025 Update: Host Header Injection Attacks Surge, Exposing Major Gaps in Web Application Security Host Header Injection is rapidly emerging as a critical threat vector, with cybersecurity researchers observing a sharp increase in successful breaches exploiting this overlooked weakness. The HTTP Host header is at the
Play Ransomware
TRENDING TOPICS MAY 07, 2025 Update: Play Ransomware Group Uses CVE-2025-29824 for Post-Exploitation Access Play ransomware group has recently exploited a vulnerability in the Windows Common Log File System (CLFS) driver, now tracked as CVE-2025-29824, which allows local privilege escalation to SYSTEM level. This flaw was used in targeted attacks
AI
TRENDING TOPICS MAY 05, 2025 AI-Powered Chimera Malware Cripples Small Business in Coordinated Cross-Platform Attack A small e-commerce business, X Business, recently fell victim to a fast-moving cyberattack powered by an advanced AI-driven malware called Chimera. What began as a routine update to their inventory system escalated in under half