The Kali365 Phishing-as-a-Service (PhaaS) platform has significantly expanded its targeting capabilities beyond Microsoft 365 to include Okta identity services and MAX Messenger communication platform. This evolution represents a dangerous shift in the PhaaS ecosystem, enabling even low-skilled thre
The North Korean state-sponsored Lazarus Group has launched a sophisticated npm brandjacking campaign targeting software developers. By creating typosquatted packages that mimic legitimate libraries, the threat actors are distributing malware designed to steal credentials, cryptocurrency wallets, an
Cisco has released emergency patches for a critical authentication bypass vulnerability (CVE-2024-20272) in Unified Communications Manager (Unified CM) with a CVSS score of 9.8. Public exploit code is now circulating, enabling unauthenticated attackers to execute arbitrary commands with root privile
The Five Eyes intelligence alliance has issued a fresh warning about renewed Chinese espionage operations targeting government officials, defense contractors, and critical infrastructure workers through LinkedIn. Threat actors are creating sophisticated fake profiles to establish trusted relationshi
Chinese state-sponsored threat actor TA4922 has broadened its phishing campaign beyond traditional targets, now hitting organizations in the United Kingdom, Germany, Italy, and South Africa. The group deploys sophisticated credential harvesting infrastructure using compromised legitimate domains and
European law enforcement agencies successfully dismantled a sophisticated online marketplace specializing in fraudulent identity documents used predominantly by migrant smuggling operations. The operation, coordinated across multiple jurisdictions, resulted in arrests, server seizures, and the disru
The Five Eyes intelligence alliance has issued a joint advisory warning that Chinese state-sponsored threat actors are conducting sophisticated social engineering campaigns using fake job advertisements to target military personnel and defense contractors. These operations aim to extract classified
Russian-linked APT group Gamaredon has weaponized a known WinRAR vulnerability (CVE-2023-38831) to deploy sophisticated modular spyware against Ukrainian targets. The campaign leverages malicious archive files disguised as legitimate documents to achieve initial access, followed by multi-stage paylo
Cybercriminals are creating sophisticated fake websites that impersonate legitimate open-source projects, achieving high search engine rankings to distribute malware. These malicious sites leverage Traffic Distribution Systems (TDS) to selectively serve malware payloads based on victim profiling, wh
A critical zero-day vulnerability in Comodo Internet Security allows remote attackers to trigger a Blue Screen of Death (BSOD) on Windows systems by sending a single malformed network packet. The flaw resides in Comodo’s kernel-mode driver and can be exploited without authentication, affecting milli