GlassWorm
TRENDING TOPICS FEB 03, 2026 GlassWorm Supply Chain Attack Abuses Trusted Open VSX Extensions to Steal Developer Secrets A supply chain attack tracked as GlassWorm compromised the Open VSX Registry after threat actors gained unauthorized access to the publishing credentials of a legitimate developer account, oorzc. On January 30, 2026,
Telegram
TRENDING TOPICS JAN 13, 2026 Hidden Telegram Proxy Links Enable One-Click IP Address Exposure Researchers have disclosed a Telegram client behavior that allows attackers to expose a user’s real IP address with a single click by abusing how MTProto proxy links are handled on mobile platforms. Specially crafted t[
Cryptomining
TRENDING TOPICS DEC 18, 2025 Ongoing Cryptomining Campaign Targeting EC2 and ECS via Compromised IAM Credentials Amazon’s AWS GuardDuty security team has identified an active cryptomining campaign targeting AWS customer environments by abusing valid, compromised IAM credentials rather than exploiting a software vulnerability. The operation began on November 2
AWS
TRENDING TOPICS OCT 21, 2025 Update: AWS Restores Services Caused by DNS Resolution Failure Amazon Web Services (AWS) suffered a prolonged outage across its US-EAST-1 region beginning late on October 19, 2025, and lasting nearly 24 hours, disrupting more than 140 services and impacting users worldwide. The issue originated from
AWS
TRENDING TOPICS OCT 20, 2025 Significant AWS Outage Causes Widespread Internet Disruption Across Global Services In the early hours of October 20, 2025, Amazon Web Services (AWS) experienced a severe outage affecting multiple regions, with the US-EAST-1 Region at the epicenter. The disruption triggered widespread downtime across major online platforms,
XRayC2
TRENDING TOPICS OCT 07, 2025 XRayC2 Abuses AWS X-Ray for Covert Command-and-Control Operations Researchers have identified a new command-and-control framework known as XRayC2, which exploits Amazon Web Services’ X-Ray tracing service to create hidden communication channels between attackers and compromised systems. Traditionally, threat actors rely on self-hosted servers or malicious
EDR Freeze
TRENDING TOPICS SEPT 23, 2025 EDR-Freeze: User-Mode Technique That Freezes EDR Processes Researchers have discovered a method called EDR-Freeze that enables attackers to silently disable antivirus and endpoint detection tools without requiring the installation of a malicious driver or exploiting a major system flaw. Instead, it leverages a standard Windows
UNC6395
TRENDING TOPICS SEPT 02, 2025 Update: Palo Alto Networks Confirmed in OAuth Supply-Chain Breach Palo Alto Networks has confirmed that it was among the companies affected by the ongoing OAuth supply-chain campaign, which first came to light with the Salesloft Drift breach. Attackers leveraged compromised tokens to infiltrate Palo Alto’
ECScape
CVE-2025-20281 Critical Cisco ISE / ISE-PIC NO AUTHENTICATION REQUIRED A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. This vulnerability is due to insufficient validation of user-supplied input. Impact: An attacker
Android
TRENDING TOPICS JULY 30, 2025 Chrome Vulnerability Impacts Multiple Platforms Including Apple Devices Google’s Threat Analysis Group (TAG) has identified CVE-2025-6558, a high-severity zero-day vulnerability (CVSS 8.8) affecting the Chrome browser’s ANGLE and GPU components. This flaw occurs when Chrome fails to properly check untrusted input from
GrayAlpha
TRENDING TOPICS JUNE 16, 2025 GrayAlpha Group Leverages Sophisticated Malware and Deceptive Tactics in Ongoing Attacks A newly exposed infrastructure tied to the cybercriminal group GrayAlpha believed to overlap with the notorious FIN7 hacking group, reveals a range of sophisticated tactics targeting the Retail, Hospitality, and Financial sectors. Active since
Lumma Stealer
TRENDING TOPICS JUNE 11, 2025 INTERPOL Dismantles 20,000+ Malicious IPs in Operation Secure INTERPOL’s Operation Secure, a global cybersecurity initiative conducted between January and April 2025, dismantled over 20,000 malicious IP addresses and domains linked to 69 information-stealing malware variants. This large-scale operation involved law enforcement agencies