trending topics
msaRAT: The Malware That Never Talks to the Internet Directly Cisco Talos has uncovered a new Rust-based remote access trojan tied to the Chaos ransomware group, and it takes an unusual approach to command-and-control that keeps the malware itself completely off the network. What You Need to
CastleRAT
TRENDING TOPICS MAR 12, 2026 CastleRAT Campaign Abuses Deno Runtime and Steganography to Deliver Fileless Malware Researchers at ThreatDown identified a malware campaign that delivers CastleRAT, a remote access trojan designed for espionage, surveillance, and credential theft, by abusing the legitimate Deno JavaScript runtime. The attack begins with a social
SonicWall
TRENDING TOPICS MAR 02, 2026 Update: Hackers Conduct Mass Scanning Campaign Against SonicWall Firewalls Using 4,000+ IPs A large-scale reconnaissance campaign is actively targeting SonicWall firewall infrastructure worldwide, with attackers using more than 4,000 unique IP addresses to identify vulnerable systems ahead of potential exploitation, according to
Spiderman Phishing
TRENDING TOPICS DEC 11, 2025 Spiderman Phishing Toolkit Expands into High-Volume Bank Fraud The Spiderman phishing framework represents a major escalation in phishing-as-a-service activity targeting European financial institutions. It offers an integrated platform that allows criminal operators to generate precise replicas of dozens of bank portals
ClickFix
CVE-2025-37734 Medium Elastic Kibana SSRF VULNERABILITY Origin Validation Error in Kibana can lead to Server-Side Request Forgery (SSRF) via a forged Origin HTTP header processed by the Observability AI Assistant. This vulnerability allows attackers to make unauthorized requests from the Kibana server to internal or external resources.
AppleScript
CVE-2025-30398 Critical Nuance PowerScribe 360 INFO DISCLOSURE Information disclosure vulnerability exposing sensitive medical or system data to unauthorized users. CVE-2025-60716 Critical Windows DirectX Graphics Kernel PRIVILEGE ESCALATION Kernel-mode code execution via crafted graphics calls in DirectX Graphics Kernel subsystem. CVE-2025-62199 Critical Microsoft Office
Cephalus
TRENDING TOPICS NOV 10, 2025 Cephalus Ransomware Exploits RDP Credentials to Execute Targeted Encryption and Data Theft The newly identified Cephalus ransomware group has emerged as a financially motivated operation that leverages stolen RDP credentials to infiltrate enterprise networks and deploy custom encryption payloads. First detected by AhnLab, Cephalus targets
Google Gemini
TRENDING TOPICS OCT 08, 2025 Gemini Exposed to ASCII Smuggling Exploit Enabling Hidden Prompt Injection FireTail researchers have discovered that Google’s Gemini AI remains vulnerable to ASCII Smuggling, an exploit that utilizes invisible Unicode control characters to conceal malicious commands within ordinary text. FireTail demonstrated that Gemini fails to
AI
TRENDING TOPICS SEPT 30, 2025 Fake AI Browser Extensions Stealing Data Through Chrome Cybercriminals are capitalizing on the growing interest in AI tools by creating malicious Chrome extensions that impersonate popular services, including ChatGPT, Claude, Perplexity, and Meta’s Llama. These extensions trick users by offering AI prompt capabilities directly
ChatGPT
CVE-2025-48539 High Android Operating System USE-AFTER-FREE A use-after-free flaw in acl_arbiter.cc (SendPacketToPeer) can trigger an out-of-bounds read, enabling remote or adjacent attackers to achieve code execution without requiring user interaction or elevated privileges on Android devices. Mitigation: Update to the
UAC-0057
CVE-2025-20265 Critical Cisco Secure Firewall Management Center COMMAND INJECTION Critical vulnerability in the RADIUS subsystem allows unauthenticated remote attackers to inject arbitrary shell commands during authentication, enabling high-privilege code execution. Exploitable only if FMC is configured to use RADIUS for web or SSH management. Mitigation: Apply Cisco