Threat actors are cloning legitimate websites of popular reverse engineering and security analysis tools—including Ghidra, dnSpy, and others—to distribute malware-laden versions. These fraudulent sites appear in search results and trick researchers, developers, and security professionals into downlo
A newly identified threat actor dubbed “Pink” has emerged with a focused campaign targeting enterprise users to steal cloud storage credentials. The group employs sophisticated phishing techniques, credential harvesting infrastructure, and evasion tactics to compromise corporate accounts across majo
Michigan lawmakers are advocating for a complete ban on Chinese-manufactured and Chinese-branded vehicles from entering U.S. borders, citing national security risks related to surveillance capabilities, data collection, and potential remote control features. The proposed measures go beyond existing
The threat actor UNC3753 is conducting a sophisticated campaign targeting U.S. law firms through vishing (voice phishing) attacks combined with legitimate remote monitoring and management (RMM) tools. Attackers impersonate IT support personnel to trick employees into installing remote access softwar
VMware has disclosed multiple stored cross-site scripting (XSS) vulnerabilities affecting several of its enterprise products. These flaws allow authenticated attackers to inject malicious JavaScript code that executes in victims’ browsers when viewing compromised pages. The vulnerabilities impact VM
Threat actors are increasingly abusing legitimate system administration and software deployment tools to deliver malware while evading detection. By leveraging trusted binaries like PowerShell, Windows Management Instrumentation (WMI), and legitimate remote access software, attackers bypass traditio
Cybercriminals have evolved beyond digital-only extortion schemes, with threat actors now physically appearing at victims’ homes and businesses carrying USB drives containing stolen data as proof of compromise. This hybrid physical-digital attack vector represents a dangerous escalation in extortion
Major corporate websites including Toshiba and Muji displayed fraudulent login prompts after being compromised through a malicious Polyfill.io script. The attack leveraged a legitimate JavaScript library service that was compromised at the supply chain level, injecting fake credential harvesting for
Oxford University has confirmed a second security breach within weeks, this time compromising student data through its career services platform. The incident exposed personal information of students and alumni who used the university’s career management system. This follows a separate breach earlier
CISA has issued an urgent warning about active exploitation of a critical vulnerability in SolarWinds Serv-U file transfer software. Threat actors are leveraging this flaw to crash servers, causing widespread service disruptions. Organizations running affected versions must immediately apply patches