A cybersecurity professional turned ransomware facilitator has been sentenced to 70 months in federal prison for providing negotiation services to BlackCat/ALPHV ransomware operators. The individual helped threat actors extort victims by acting as an intermediary, translating communications, and coa
Security researchers have discovered a critical 0-click exploit chain targeting Google Pixel 10 devices through a vulnerability in the Video Processing Unit (VPU) driver. The exploit requires no user interaction and can be triggered remotely through specially crafted media files delivered via messag
An EU official responsible for investigating NSO Group’s Pegasus spyware was infected with the very surveillance tool they were tasked with scrutinizing. This brazen attack undermines democratic oversight mechanisms and demonstrates how commercial spyware continues targeting civil society, journalis
The FBI has seized the NetNut proxy service infrastructure, revealing its connection to the massive Popa botnet that compromised hundreds of thousands of devices worldwide. This operation exposes how legitimate-appearing proxy services can be weaponized through malware distribution, transforming uns
A sophisticated AsyncRAT malware campaign is leveraging DLL sideloading techniques alongside legitimate ScreenConnect remote access software to establish persistent, stealthy access to compromised systems. Attackers are exploiting trusted application processes to load malicious DLLs, evading traditi
A sophisticated phishing toolkit named ARToken is actively targeting Microsoft 365 users by exploiting OAuth’s legitimate Device Authorization Flow (Device Code Flow). The panel automates token theft through adversary-in-the-middle attacks, enabling attackers to bypass multi-factor authentication, c
The CitrixBleed vulnerability (CVE-2023-4966) affecting Citrix NetScaler ADC and Gateway appliances has been actively exploited within 24 hours of public disclosure. This critical session hijacking flaw allows unauthenticated attackers to steal valid session tokens and bypass multifactor authenticat
The FortiBleed vulnerability (CVE-2024-23113) is being actively exploited by INC Ransom and Lynx ransomware groups to steal credentials from vulnerable Fortinet devices. This critical authentication bypass flaw affects FortiOS SSL-VPN and allows attackers to extract session tokens and authentication
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2025-21298, a critical Microsoft SharePoint Server vulnerability, to its Known Exploited Vulnerabilities (KEV) catalog. This deserialization flaw allows authenticated attackers to execute arbitrary code remotely on vulner
The Court of Justice of the European Union (CJEU) has upheld a €4.1 billion antitrust fine against Google for abusing its Android market dominance. The ruling highlights serious concerns about Google’s control over user data access, app installation restrictions, and the security implications of its