Department of Homeland Security (DHS) Secretary Markwayne Mullin has identified specific staffing targets for the Cybersecurity and Infrastructure Security Agency (CISA) amid ongoing federal workforce reductions. This organizational restructuring comes at a critical juncture when cyber threats again
FileFix malware represents a sophisticated threat that successfully evades Windows security mechanisms through advanced anti-analysis techniques and legitimate process abuse. This malware family employs process hollowing, reflective DLL injection, and NTFS Alternate Data Streams to maintain persiste
Cybercriminals are launching sophisticated phishing campaigns using fraudulent purchase orders to distribute JS.MonoGlyphRAT, a JavaScript-based remote access trojan (RAT). The malware targets US enterprises through convincing business email compromise tactics, establishing persistent backdoor acces
Chinese state-sponsored threat actor TA4922 is conducting sophisticated espionage operations across the UK and Europe using a previously undocumented malware strain called SilentRunLoader. This custom loader exhibits advanced evasion techniques and serves as a conduit for additional payloads, target
A critical unpatched vulnerability in Windows Search allows attackers to steal NTLMv2 password hashes through specially crafted search URI protocol handlers. By exploiting this flaw, threat actors can force Windows systems to leak authentication credentials to remote servers without user interaction
A critical vulnerability in Microsoft 365 Android applications could have allowed attackers to hijack user accounts affecting billions of Android users worldwide. The flaw exploited Android’s intent-based communication system, enabling malicious apps to intercept authentication tokens and gain unaut
A newly disclosed HTTP/2 vulnerability dubbed “HTTP/2 Bomb” enables attackers to trigger severe resource exhaustion on major web servers including nginx, Apache httpd, Microsoft IIS, Envoy, and Cloudflare Pingora through a single malicious request. The attack leverages HTTP/2’s HPACK header compress
Security researchers have disclosed a sophisticated zero-click exploit chain targeting Google’s Pixel 10 devices that achieves full root access without any user interaction. The attack leverages vulnerabilities in the Pixel’s telephony stack and kernel subsystem, allowing remote code execution throu
A critical authentication bypass vulnerability in HP Poly VoIP phones (CVE-2024-41937) allows unauthenticated attackers to gain administrative access to affected devices. With a CVSS score of 9.8, this flaw affects multiple Poly phone models widely deployed across enterprise environments. Attackers
Multiple npm packages maintained by Red Hat were compromised in a sophisticated supply chain attack dubbed “Miasma.” Attackers gained unauthorized access to Red Hat developer credentials and injected malicious preinstall scripts designed to harvest environment variables, AWS credentials, and other s