LockBit
TRENDING TOPICS FEB 05, 2026 Update: LockBit 5.0 Emerges as Cross-Platform Ransomware Targeting Windows, Linux, and ESXi Environments Kaspersky has identified a new wave of LockBit 5.0 ransomware samples designed to operate across Windows, Linux, and VMware ESXi environments, reflecting a continued shift toward highly scalable, multi-platform ransomware
Telegram
TRENDING TOPICS JAN 13, 2026 Hidden Telegram Proxy Links Enable One-Click IP Address Exposure Researchers have disclosed a Telegram client behavior that allows attackers to expose a user’s real IP address with a single click by abusing how MTProto proxy links are handled on mobile platforms. Specially crafted t[
Zestix
TRENDING TOPICS JAN 06, 2026 Zestix Targets Credential-Driven Access to Corporate File-Sharing Data Hudson Rock reports that a threat actor known as Zestix has been advertising stolen corporate data tied to dozens of organizations, with activity pointing to compromised ShareFile, Nextcloud, and ownCloud environments. The likely entry point was employee
ChatGPT
CVE-2025-48539 High Android Operating System USE-AFTER-FREE A use-after-free flaw in acl_arbiter.cc (SendPacketToPeer) can trigger an out-of-bounds read, enabling remote or adjacent attackers to achieve code execution without requiring user interaction or elevated privileges on Android devices. Mitigation: Update to the latest Android patch level immediately and enable runtime
Apt41
TRENDING TOPICS SEPT 10, 2025 China-Linked APT41 Hackers Target U.S. Trade Officials Amid 2025 Negotiations The House Select Committee on China has issued a formal advisory warning of an ongoing cyber espionage campaign attributed to the China-linked threat group APT41, surfacing during a period of heightened U.S.–China
Government
TRENDING TOPICS AUG 27, 2025 Nevada Shuts Down State Offices After Major Cyberattack Disrupts IT Systems The State of Nevada has entered its third day of disruption following a large-scale cyberattack that began early Sunday morning and has forced the closure of all state offices. The Governor’s Technology Office
Salt Typhoon
CVE-2025-49596 Critical MCP Inspector A remote code execution vulnerability in MCP Inspector due to improper validation of serialized input during inspection routines. This vulnerability can be exploited over the network without authentication. Impact: Users should immediately upgrade to MCP Inspector version 3.9.2 or later to remediate this critical
Hacktivists
TRENDING TOPICS JULY 15, 2025 Update: Hacktivist Attacks on Industrial Systems Intensify Amid Global Tensions Hacktivist operations targeting Industrial Control Systems (ICS) have grown significantly in both scale and sophistication, shifting from basic denial-of-service efforts to more coordinated, technically advanced intrusions aimed at disrupting operations and stealing sensitive data. According
XWorm
TRENDING TOPICS JULY 07, 2025 Update: XWorm RAT Expands Capabilities with Advanced Loaders, Stagers, and Ransomware Deployment The XWorm RAT, a well-known tool in the cybercrime space, has advanced its techniques, combining new stagers and loaders to bypass modern security defenses and expand its reach across Windows environments. Recent campaigns
WordPress
TRENDING TOPICS JULY 01, 2025 Stealth Malware Campaign Uses WordPress Sites to Spread Windows Trojan A new malware campaign actively targeting WordPress websites is delivering a Windows-based Remote Access Trojan (RAT) called client32[.]exe. Discovered by cybersecurity firm Sucuri, this threat is already being exploited in the wild, with real
Shadow Vector
TRENDING TOPICS JUNE 23, 2025 Shadow Vector: A Sophisticated SVG-Based Malware Campaign The Shadow Vector campaign is a highly targeted malware operation currently focusing on users in Colombia, using deceptive spear-phishing emails that impersonate official institutions—primarily the judicial system. The emails contain Scalable Vector Graphics (SVG) attachments that appear
AsyncRAT
TRENDING TOPICS JUNE 17, 2025 Update: Fileless AsyncRAT Campaign Targets Users with Fake Verification Prompts A sophisticated campaign leveraging the fileless variant of AsyncRAT has been uncovered, attributed to cybercriminal groups that employ deceptive tactics to infiltrate users' systems. While the specific threat actor behind this campaign has not