Apache ActiveMQ Flaw Exploited to Deploy DripDropper Malware on Cloud Linux Systems
î ‚Aug 19, 2025î „Ravie LakshmananLinux / Malware Threat actors are exploiting a nearly two-year-old security flaw in Apache ActiveMQ to gain…
New GodRAT Trojan Targets Trading Firms Using Steganography and Gh0st RAT Code
î ‚Aug 19, 2025î „Ravie LakshmananMalware / Cyber Attack Financial institutions like trading and brokerage firms are the target of a new…
Public Exploit for Chained SAP Flaws Exposes Unpatched Systems to Remote Code Execution
î ‚Aug 19, 2025î „Ravie LakshmananVulnerability / Cyber Espionage A new exploit combining two critical, now-patched security flaws in SAP NetWeaver has…
U.K. Government Drops Apple Encryption Backdoor Order After U.S. Civil Liberties Pushback
î ‚Aug 19, 2025î „Ravie LakshmananEncryption / Cloud Security The U.K. government has apparently abandoned its plans to force Apple to weaken…
PyPI Blocks 1,800 Expired-Domain Emails to Prevent Account Takeovers and Supply Chain Attacks
î ‚Aug 19, 2025î „Ravie LakshmananSupply Chain Security The maintainers of the Python Package Index (PyPI) repository have announced that the package…
Noodlophile Malware Campaign Expands Global Reach with Copyright Phishing Lures
î ‚Aug 18, 2025î „Ravie LakshmananMalware / Enterprise Security The threat actors behind the Noodlophile malware are leveraging spear-phishing emails and updated…
Microsoft Windows Vulnerability Exploited to Deploy PipeMagic RansomExx Malware
î ‚Aug 18, 2025î „Ravie LakshmananVulnerability / Cloud Security Cybersecurity researchers have lifted the lid on the threat actors’ exploitation of a…
NFC Fraud, Curly COMrades, N-able Exploits, Docker Backdoors & More
î ‚Aug 18, 2025î „Ravie LakshmananCybersecurity / Hacking News Power doesn’t just disappear in one big breach. It slips away in the…
Malicious PyPI and npm Packages Discovered Exploiting Dependencies in Supply Chain Attacks
Cybersecurity researchers have discovered a malicious package in the Python Package Index (PyPI) repository that introduces malicious behavior through a…
Wazuh for Regulatory Compliance
î ‚Aug 18, 2025î „The Hacker NewsData Breach / Regulatory Compliance Organizations handling various forms of sensitive data or personally identifiable information…