Cryptomining
TRENDING TOPICS DEC 18, 2025 Ongoing Cryptomining Campaign Targeting EC2 and ECS via Compromised IAM Credentials Amazon’s AWS GuardDuty security team has identified an active cryptomining campaign targeting AWS customer environments by abusing valid, compromised IAM credentials rather than exploiting a software vulnerability. The operation began on November 2
Microsoft
TRENDING TOPICS OCT 02, 2025 Microsoft Investigates Classic Outlook Bug Blocking Access to Mailboxes Microsoft is currently investigating a major issue affecting the classic Outlook desktop client on Windows, which is preventing users from accessing their email accounts. Identified in late September 2025, this issue affects individuals who encounter repeated
ChatGPT
CVE-2025-48539 High Android Operating System USE-AFTER-FREE A use-after-free flaw in acl_arbiter.cc (SendPacketToPeer) can trigger an out-of-bounds read, enabling remote or adjacent attackers to achieve code execution without requiring user interaction or elevated privileges on Android devices. Mitigation: Update to the latest Android patch level immediately and enable runtime
Python
TRENDING TOPICS JUNE 27, 2025 Malicious Typosquatted Python Package Triggers Forced Shutdowns on Windows Systems A newly discovered malicious Python package, “psslib,” has been identified on the Python Package Index (PyPI), posing as the widely used “passlib” library in a targeted typosquatting campaign. This fake package exploits the trust developers
UNC6040
TRENDING TOPICS JUNE 05, 2025 Update: UNC6040 Vishing Campaign Exploits Salesforce for Data Theft and Extortion UNC6040, a financially motivated threat group, has been running a series of highly targeted voice phishing (vishing) campaigns aimed at Salesforce environments, with operations starting in late 2024 and continuing into 2025. Google'
China-Linked APT
TRENDING TOPICS MAY 14, 2025 Update: China-Nexus APTs Exploit SAP Zero-Day to Breach Critical Infrastructure Worldwide EclecticIQ and other security researchers have exposed a coordinated cyber-espionage campaign led by multiple China-linked APTs targeting critical infrastructure across the US, UK, and Saudi Arabia. The attackers exploited a previously unknown vulnerability in