Large-Scale ClickFix Phishing Attacks Target Hotel Systems with PureRAT Malware
Cybersecurity researchers have called attention to a massive phishing campaign targeting the hospitality industry that lures hotel managers to ClickFix-style…
Microsoft Uncovers ‘Whisper Leak’ Attack That Identifies AI Chat Topics in Encrypted Traffic
Microsoft has disclosed details of a novel side-channel attack targeting remote language models that could enable a passive adversary with…
Samsung Zero-Click Flaw Exploited to Deploy LANDFALL Android Spyware via WhatsApp
î ‚Nov 07, 2025î „Ravie LakshmananMobile Security / Vulnerability A now-patched security flaw in Samsung Galaxy Android devices was exploited as a…
From Log4j to IIS, China’s Hackers Turn Legacy Bugs into Global Espionage Tools
A China-linked threat actor has been attributed to a cyber attack targeting an U.S. non-profit organization with an aim to…
Hidden Logic Bombs in Malware-Laced NuGet Packages Set to Detonate Years After Installation
î ‚Nov 07, 2025î „Ravie LakshmananSupply Chain Attack / Malware A set of nine malicious NuGet packages has been identified as capable…
Enterprise Credentials at Risk – Same Old, Same Old?
î ‚Nov 07, 2025î „The Hacker NewsData Protection / Cloud Security Imagine this: Sarah from accounting gets what looks like a routine…
Google Launches New Maps Feature to Help Businesses Report Review-Based Extortion Attempts
î ‚Nov 07, 2025î „Ravie LakshmananData Protection / Malware Google on Thursday said it’s rolling out a dedicated form to allow businesses…
Vibe-Coded Malicious VS Code Extension Found with Built-In Ransomware Capabilities
Cybersecurity researchers have flagged a malicious Visual Studio Code (VS Code) extension with basic ransomware capabilities that appears to be…
Cisco Warns of New Firewall Attack Exploiting CVE-2025-20333 and CVE-2025-20362
î ‚Nov 06, 2025î „Ravie LakshmananZero-Day / Vulnerability Cisco on Wednesday disclosed that it became aware of a new attack variant that’s…
Trojanized ESET Installers Drop Kalambur Backdoor in Phishing Attacks on Ukraine
î ‚Nov 06, 2025î „Ravie LakshmananMalware / Vulnerability A previously unknown threat activity cluster has been observed impersonating Slovak cybersecurity company ESET…