China-linked APT group Fire Ant has been discovered leveraging compromised Cisco routers as covert infrastructure for espionage operations. The group embeds malicious implants directly into network devices, allowing persistent access while blending seamlessly with legitimate traffic. This campaign d
A critical vulnerability in the Cosmos EVM bridge allowed attackers to drain funds from six blockchain networks after Cosmos Labs allegedly knew about the flaw affecting all deployments. The exploit targeted the EVM (Ethereum Virtual Machine) compatibility layer, enabling unauthorized token minting
PaperCut has released a second emergency security patch after researchers discovered bypass techniques that circumvent the initial fix for actively exploited vulnerabilities CVE-2023-27350 and CVE-2023-27351. The flaws allow unauthenticated remote code execution in PaperCut MF and NG print managemen
Two critical vulnerabilities in PaperCut NG/MF print management software can be chained together to achieve unauthenticated remote code execution. The vulnerabilities affect versions prior to 20.1.7, 21.2.11, and 22.0.9, allowing attackers to bypass authentication mechanisms and execute arbitrary co
Cybersecurity researchers have uncovered 19 malicious browser extensions on the Chrome Web Store and Microsoft Edge Add-ons marketplace containing wallet-stealing and crypto-draining code. These extensions masqueraded as legitimate productivity and utility tools while silently exfiltrating cryptocur
The Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) has confirmed a “major” cybersecurity incident following claims by a ransomware group that they breached the federal agency’s systems. The Department of Justice’s Inspector General is leading the investigation into the breach, which repor
Two alleged members of the TeamPCP cybercriminal group have been arrested and face federal charges following a months-long supply-chain attack campaign that compromised multiple software vendors and affected thousands of downstream organizations. The arrests mark a significant disruption to one of 2
Rapid7’s investigation uncovered a thriving underground economy where cybercriminals trade Social Security Numbers (SSNs) and personal identifiable information (PII) of 476 corporate executives across dark web marketplaces. These “Identity-as-a-Service” platforms commoditize executive credentials, e
A newly discovered backdoor dubbed SLEEPWALKER has been found masquerading as a legitimate ESET antivirus agent on Windows systems. This advanced malware remains dormant until activated by a specially crafted network packet, allowing attackers to maintain persistent access while evading detection. T
The FBI has successfully disrupted the QTFY hacking infrastructure, a sophisticated Chinese state-sponsored operation targeting U.S. critical infrastructure and government networks. The operation involved seizing command-and-control servers and disrupting malicious implants across compromised system