CISA Adds TP-Link and WhatsApp Flaws to KEV Catalog Amid Active Exploitation
î ‚Sep 03, 2025î „Ravie LakshmananVulnerability / Mobile Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a high-severity…
Salesloft Takes Drift Offline After OAuth Token Theft Hits Hundreds of Organizations
î ‚Sep 03, 2025î „Ravie LakshmananData Breach / Threat Intelligence, Salesloft on Tuesday announced that it’s taking Drift temporarily offline “in the…
Lazarus Group Expands Malware Arsenal With PondRAT, ThemeForestRAT, and RemotePE
î ‚Sep 02, 2025î „Ravie LakshmananMalware / Threat Intelligence The North Korea-linked threat actor known as the Lazarus Group has been attributed…
Researchers Warn of MystRodX Backdoor Using DNS and ICMP Triggers for Stealthy Control
î ‚Sep 02, 2025î „Ravie LakshmananCyber Espionage / Network Security Cybersecurity researchers have disclosed a stealthy new backdoor called MystRodX that comes…
A Critical Part of Enterprise AI Governance
î ‚Sep 02, 2025î „The Hacker NewsData Privacy / SaaS Security The Harsh Truths of AI Adoption MITs State of AI in…
Ukrainian Network FDN3 Launches Massive Brute-Force Attacks on SSL VPN and RDP Devices
Cybersecurity researchers have flagged a Ukrainian IP network for engaging in massive brute-force and password spraying campaigns targeting SSL VPN…
Silver Fox Exploits Microsoft-Signed WatchDog Driver to Deploy ValleyRAT Malware
The threat actor known as Silver Fox has been attributed to abuse of a previously unknown vulnerable driver associated with…
Malicious npm Package nodejs-smtp Mimics Nodemailer, Targets Atomic and Exodus Wallets
î ‚Sep 02, 2025î „Ravie LakshmananCryptocurrency / Malware Cybersecurity researchers have discovered a malicious npm package that comes with stealthy features to…
Android Droppers Now Deliver SMS Stealers and Spyware, Not Just Banking Trojans
î ‚Sep 01, 2025î „Ravie LakshmananMobile Security / Malvertising Cybersecurity researchers are calling attention to a new shift in the Android malware…
WhatsApp 0-Day, Docker Bug, Salesforce Breach, Fake CAPTCHAs, Spyware App & More
Cybersecurity today is less about single attacks and more about chains of small weaknesses that connect into big risks. One…