Russian-linked APT group Gamaredon has weaponized a known WinRAR vulnerability (CVE-2023-38831) to deploy sophisticated modular spyware against Ukrainian targets. The campaign leverages malicious archive files disguised as legitimate documents to achieve initial access, followed by multi-stage paylo
Cybercriminals are creating sophisticated fake websites that impersonate legitimate open-source projects, achieving high search engine rankings to distribute malware. These malicious sites leverage Traffic Distribution Systems (TDS) to selectively serve malware payloads based on victim profiling, wh
A critical zero-day vulnerability in Comodo Internet Security allows remote attackers to trigger a Blue Screen of Death (BSOD) on Windows systems by sending a single malformed network packet. The flaw resides in Comodo’s kernel-mode driver and can be exploited without authentication, affecting milli
Cisco has disclosed a critical vulnerability (CVE-2024-20272) in Unified Communications Manager (UCM) that allows authenticated attackers to execute arbitrary SQL commands on affected systems. With a CVSS score of 8.8, the flaw affects multiple UCM versions and has been accompanied by public proof-o
Cybercriminals are orchestrating a targeted phishing campaign against Chrome extension developers, sending fraudulent copyright infringement notices that impersonate the Chrome Web Store. These convincing emails trick developers into clicking malicious links that lead to credential-harvesting pages
CISA has added CVE-2026-45247, a critical remote code execution (RCE) vulnerability in Adobe Magento, to its Known Exploited Vulnerabilities (KEV) catalog. The flaw is being actively exploited in the wild, allowing attackers to execute arbitrary code on vulnerable e-commerce platforms. Federal agenc
Acer is actively working to patch a critical zero-day vulnerability affecting its Wave 7 mesh router series. The flaw, which has been exploited in the wild before a patch became available, allows attackers to compromise router security and potentially gain unauthorized access to network traffic. Use
The U.S. Department of Justice has taken decisive action against cryptocurrency fraud networks operating across Southeast Asia, successfully freezing $3.8 million in digital assets. These operations, often running from compounds in Cambodia, Laos, and Myanmar, have been targeting American victims th
Europol coordinated a major international law enforcement operation resulting in 29 arrests and the dismantling of nine organized crime groups running illegal streaming services. The operation targeted IPTV platforms generating millions in illicit revenue while distributing copyrighted content to hu
Microsoft has introduced native Unix coreutils to Windows, marking a significant shift in the operating system’s architecture. While this integration enhances developer productivity and cross-platform compatibility, it introduces new attack surfaces, permission model complexities, and potential secu