Trending Topics
TRENDING TOPICS
NOV 25, 2025
Round 2: Shai-Hulud Worm Exploits npm
ClickFix
Coverage of the ClickFix social engineering technique, in which fake CAPTCHA or verification pages trick victims into copying and pasting attacker-supplied commands into a terminal or Run dialog, bypassing traditional file-based delivery and detection.
Trending Topics
TRENDING TOPICS
NOV 24, 2025
Update: DPRK Expands Contagious Interview Operation With
Trending Topics
FortiWeb zero-day CVE-2025-64446 lets attackers create admin accounts. Charming Kitten (APT42, Mint Sandstorm) runs SpearSpecter against senior officials via WhatsApp rapport-building. Dragon Breath (APT-Q-27) deploys RONINGLOADER to disable AV tools.
Trending Topics
CVE-2025-37734
Medium
Elastic Kibana
SSRF VULNERABILITY
Origin Validation Error in
Trending Topics
Fake Microsoft CAPTCHA pages lead to tech support scams. WaterPlum's ClickFake campaign deploys updated OtterCandy RAT. DeceptiveDevelopment (UNC5342, DEV#POPPER, Void Dokkaebi) hides malware in blockchain smart contracts via EtherHiding.
Trending Topics
TRENDING TOPICS
OCT 09, 2025
CrowdStrike Patches Falcon Sensor Vulnerabilities on Windows
Trending Topics
TRENDING TOPICS
SEPT 17, 2025
FileFix Campaign Expands Fix Attack Family With
Trending Topics
Fake Microsoft Teams site spreads Odyssey macOS stealer. Atomic Stealer hides in cracked software. Lazarus Group (tracked as APT-Q-1) adds ClickFix social engineering to its espionage campaigns. iCloud Calendar invites abused for phishing.
Trending Topics
TRENDING TOPICS
AUG 26, 2025
Iranian Shipping Crippled Through Maritime Communications Hack
Trending Topics
Apple patches a zero-day exploited in sophisticated attacks. UNC5518 sells CAPTCHA-lure access to partners deploying CORNFLAKE.V3. Berserk Bear (Blue Kraken, Crouching Yeti, Dragonfly, Koala Team) exploits a 7-year-old Cisco flaw. ADFS phishing bypasses Microsoft 365 MFA.
Trending Topics
TRENDING TOPICS
AUGUST 11, 2025
Odyssey Stealer Targets macOS in Sophisticated ClickFix
Trending Topics
CVE-2025-25257
Critical
FortiClientEMS
SQL injection vulnerability in FortiClientEMS versions 7.