A sophisticated phishing campaign is targeting the hospitality industry with malicious ZIP archives disguised as photo collections. The attack delivers a Node.js-based implant that establishes persistent remote access on compromised systems. Hotels, resorts, and hospitality management companies are
A sophisticated backdoor dubbed “Mistic” has been identified as the primary tool of an access broker supplying corporate network credentials to ransomware operators. The malware features advanced evasion techniques including self-destruction capabilities, encrypted communications, and minimal forens
A critical privilege escalation vulnerability (CVE-2024-20272) in Cisco Unified Communications Manager (CUCM) has been weaponized by threat actors in less than 24 hours after public disclosure. The flaw allows authenticated attackers to escalate privileges to root level, granting complete system con
Tata Electronics, a key supplier for tech giants Apple and Tesla, has confirmed a significant data breach after threat actors claimed to have exfiltrated 630GB of sensitive corporate data. The leak allegedly contains proprietary manufacturing information, employee records, and confidential business
The Federal Communications Commission (FCC) has enacted comprehensive cybersecurity regulations targeting emergency alert systems and undersea cable infrastructure. These rules establish mandatory security protocols, vulnerability reporting requirements, and enhanced protection measures for systems
Threat actors are abusing Shopify’s legitimate Shop app—a popular order-tracking platform—to deliver callback phishing attacks that bypass traditional email security controls. By exploiting the app’s notification system, attackers send authentic-looking messages from Shopify’s infrastructure, tricki
Cybercriminals are exploiting the massive hype around Grand Theft Auto 6 (GTA 6) by creating fraudulent websites claiming to offer early access, beta keys, and exclusive content. These malicious sites distribute information-stealing malware, cryptocurrency draining scripts, and phishing schemes. Thr
Mistic, a newly discovered backdoor, is being deployed in ransomware intrusion chains as a persistent access mechanism. This sophisticated malware combines advanced evasion techniques, encrypted command-and-control (C2) communications, and modular capabilities to maintain long-term access to comprom
Russian authorities continue using Cellebrite’s mobile forensic tools to extract data from activists’ devices despite the Israeli company’s contract termination. A recent case involving a human rights activist demonstrates that Russia’s existing stockpile of Cellebrite equipment remains operational,
A popular Chrome browser extension with over 10 million installations has been discovered containing dormant code injection capabilities that could execute arbitrary scripts on user browsers. The ad blocker, which appears legitimate on the surface, includes obfuscated functions that allow remote cod