Drift Loses $285 Million in Durable Nonce Social Engineering Attack Linked to DPRK
Solana-based decentralized exchange Drift has confirmed that attackers drained about $285 million from the platform during a security incident that…
New SparkCat Variant in iOS, Android Apps Steals Crypto Wallet Recovery Phrase Images
î „Ravie Lakshmananî ‚Apr 03, 2026Mobile Security / Threat Intelligence Cybersecurity researchers have discovered a new version of the SparkCat malware on the Apple…
Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials
î „Ravie Lakshmananî ‚Apr 02, 2026Vulnerability / Threat Intelligence A large-scale credential harvesting operation has been observed exploiting the React2Shell vulnerability as an initial infection…
Cisco Patches 9.8 CVSS IMC and SSM Flaws Allowing Remote System Compromise
î „Ravie Lakshmananî ‚Apr 02, 2026Network Security / Vulnerability Cisco has released updates to address a critical security flaw in the Integrated Management…
Pre-Auth Chains, Android Rootkits, CloudTrail Evasion & 10 More Stories
î „Ravie Lakshmananî ‚Apr 02, 2026Cybersecurity / Hacking News The latest ThreatsDay Bulletin is basically a cheat sheet for everything breaking on the…
The State of Trusted Open Source Report
In December 2025, we shared the first-ever The State of Trusted Open Source report, featuring insights from our product data and customer…
Researchers Uncover Mining Operation Using ISO Lures to Spread RATs and Crypto Miners
î „Ravie Lakshmananî ‚Apr 02, 2026Cryptomining / Malware A financially motivated operation codenamed REF1695 has been observed leveraging fake installers to deploy remote access trojans (RATs)…
WhatsApp Alerts 200 Users After Fake iOS App Installed Spyware; Italian Firm Faces Action
î „Ravie Lakshmananî ‚Apr 02, 2026Surveillance / Mobile Security Meta-owned messaging platform WhatsApp said it alerted about 200 users who were tricked…
Apple Expands iOS 18.7.7 Update to More Devices to Block DarkSword Exploit
î „Ravie Lakshmananî ‚Apr 02, 2026Mobile Security / Vulnerability Apple on Wednesday expanded the availability of iOS 18.7.7 and iPadOS 18.7.7 to a broader range of…
CERT-UA Impersonation Campaign Spread AGEWHEEZE Malware to 1 Million Emails
î „Ravie Lakshmananî ‚Apr 01, 2026Email Security / Artificial Intelligence The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of…