Chinese state-sponsored threat actor TA4922 has broadened its phishing campaign beyond traditional targets, now hitting organizations in the United Kingdom, Germany, Italy, and South Africa. The group deploys sophisticated credential harvesting infrastructure using compromised legitimate domains and
European law enforcement agencies successfully dismantled a sophisticated online marketplace specializing in fraudulent identity documents used predominantly by migrant smuggling operations. The operation, coordinated across multiple jurisdictions, resulted in arrests, server seizures, and the disru
The Five Eyes intelligence alliance has issued a joint advisory warning that Chinese state-sponsored threat actors are conducting sophisticated social engineering campaigns using fake job advertisements to target military personnel and defense contractors. These operations aim to extract classified
Russian-linked APT group Gamaredon has weaponized a known WinRAR vulnerability (CVE-2023-38831) to deploy sophisticated modular spyware against Ukrainian targets. The campaign leverages malicious archive files disguised as legitimate documents to achieve initial access, followed by multi-stage paylo
Cybercriminals are creating sophisticated fake websites that impersonate legitimate open-source projects, achieving high search engine rankings to distribute malware. These malicious sites leverage Traffic Distribution Systems (TDS) to selectively serve malware payloads based on victim profiling, wh
A critical zero-day vulnerability in Comodo Internet Security allows remote attackers to trigger a Blue Screen of Death (BSOD) on Windows systems by sending a single malformed network packet. The flaw resides in Comodo’s kernel-mode driver and can be exploited without authentication, affecting milli
Cisco has disclosed a critical vulnerability (CVE-2024-20272) in Unified Communications Manager (UCM) that allows authenticated attackers to execute arbitrary SQL commands on affected systems. With a CVSS score of 8.8, the flaw affects multiple UCM versions and has been accompanied by public proof-o
Cybercriminals are orchestrating a targeted phishing campaign against Chrome extension developers, sending fraudulent copyright infringement notices that impersonate the Chrome Web Store. These convincing emails trick developers into clicking malicious links that lead to credential-harvesting pages
CISA has added CVE-2026-45247, a critical remote code execution (RCE) vulnerability in Adobe Magento, to its Known Exploited Vulnerabilities (KEV) catalog. The flaw is being actively exploited in the wild, allowing attackers to execute arbitrary code on vulnerable e-commerce platforms. Federal agenc
Acer is actively working to patch a critical zero-day vulnerability affecting its Wave 7 mesh router series. The flaw, which has been exploited in the wild before a patch became available, allows attackers to compromise router security and potentially gain unauthorized access to network traffic. Use