New Sturnus Android Trojan Quietly Captures Encrypted Chats and Hijacks Devices
î ‚Nov 20, 2025î „Ravie LakshmananMalware / Mobile Security Cybersecurity researchers have disclosed details of a new Android banking trojan called Sturnus…
CTM360 Exposes a Global WhatsApp Hijacking Campaign: HackOnChat
î ‚Nov 20, 2025î „The Hacker NewsOnline Fraud / Web Security CTM360 has identified a rapidly expanding WhatsApp account-hacking campaign targeting users…
Iran-Linked Hackers Mapped Ship AIS Data Days Before Real-World Missile Strike Attempt
î ‚Nov 20, 2025î „Ravie LakshmananCyber Warfare / Threat Intelligence Threat actors with ties to Iran engaged in cyber warfare as part…
TamperedChef Malware Spreads via Fake Software Installers in Ongoing Global Campaign
î ‚Nov 20, 2025î „Ravie LakshmananMalvertising / Artificial Intelligence Threat actors are leveraging bogus installers masquerading as popular software to trick users…
Hackers Actively Exploiting 7-Zip Symbolic Link–Based RCE Vulnerability (CVE-2025-11001)
î ‚Nov 19, 2025î „Ravie LakshmananVulnerability / Threat Intelligence A recently disclosed security flaw impacting 7-Zip has come under active exploitation in…
Python-Based WhatsApp Worm Spreads Eternidade Stealer Across Brazilian Devices
Cybersecurity researchers have disclosed details of a new campaign that leverages a combination of social engineering and WhatsApp hijacking to…
WrtHug Exploits Six ASUS WRT Flaws to Hijack Tens of Thousands of EoL Routers Worldwide
î ‚Nov 19, 2025î „Ravie LakshmananVulnerability / Threat Intelligence A newly discovered campaign has compromised tens of thousands of outdated or end-of-life…
How to Use Ringfencing to Prevent the Weaponization of Trusted Software
The challenge facing security leaders is monumental: Securing environments where failure is not an option. Reliance on traditional security postures,…
ServiceNow AI Agents Can Be Tricked Into Acting Against Each Other via Second-Order Prompts
î ‚Nov 19, 2025î „Ravie LakshmananAI Security / SaaS Security Malicious actors can exploit default configurations in ServiceNow’s Now Assist generative artificial…
EdgeStepper Implant Reroutes DNS Queries to Deploy Malware via Hijacked Software Updates
î ‚Nov 19, 2025î „Ravie LakshmananCyber Espionage / Malware The threat actor known as PlushDaemon has been observed using a previously undocumented…