Security Intelligence
Zero-day vulnerability in Ivanti Connect Secure exploited for weeks
Ivanti reports suspected Chinese state-sponsored threat actor UNC5221 exploiting zero-day vulnerability in Connect...
Security Intelligence
Max-severity vulnerability discovered in Apache Parquet, patch now
Max severity remote code execution ulnerability, designated CVE-2025-30065, discovered in Apache Parquet.
Security Intelligence
A tale of two CVEs: Dispute over CrushFTP’s recent vulnerability
Confusion ensues after two different CVEs are assigned to the same actively exploited CrushFTP vulnerability.
Security Intelligence
FIN7 delivers Anubis backdoor via compromised SharePoint sites
FIN7 observed deploying its Anubis backdoor to gain unauthorized access to Windows systems.
Security Intelligence
Hidden ‘doggy door’ found in Chinese-made robot dogs
Researchers uncover hidden ‘doggy door’ in China-based Unitree Robotics' Go1 robot dogs.
Security Intelligence
North Korea’s IT worker scheme expands into Europe
North Korean IT worker scheme expands into Europe and other countries.
Security Intelligence
XinXin group offers new ‘dreamy’ PhaaS platform
Cybersecurity researchers reveal highly sophisticated PhaaS platform, dubbed ‘Lucid’, that has targeted 169...
Security Intelligence
New Crocodilus malware snaps up crypto wallets
Newly discovered Android malware, dubbed Crocodilus, targets cryptocurrency users by stealing their wallet seed phrases
Security Intelligence
Hakuna magotchya! Look out for new Morphing Meerkat PhaaS platform
Researchers identify new phishing-as-a-service (PhaaS) platform, called Morphing Meerkat, that employs DNS over HTTPS...
Security Intelligence
Critical sandbox escape flaws in Firefox and Chrome patched
Mozilla and Google release updates to fix a critical sandbox escape flaws in Firefox and Chrome browsers.
Security Intelligence
FamousSparrow hatches two new backdoor variants in latest campaign
China-linked threat actor FamousSparrow targets U.S. trade association, Mexican research institute with enhanced...
Security Intelligence
140 online platforms targeted by new Atlantis credential stuffer
New cybercrime platform called 'Atlantis AIO' that offers automated credential stuffing services targeting 140 online...