U.S. Immigration and Customs Enforcement (ICE) has awarded a $25 million contract for advanced biometric iris scanning technology to expand surveillance capabilities across detention facilities and border operations. This deployment raises significant cybersecurity concerns around biometric data pro
Law enforcement agencies have successfully dismantled one of the largest botnets in history, comprising over 17 million compromised devices worldwide. This massive network of infected computers, IoT devices, and servers was capable of launching devastating distributed denial-of-service (DDoS) attack
The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Palo Alto Networks vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, signaling active exploitation in the wild. The flaw affects PAN-OS software and requires immediate attention from organizations runn
Dutch law enforcement, in collaboration with international partners, has successfully disrupted one of the largest botnets ever recorded, comprising approximately 17 million infected devices worldwide. The operation targeted malware infrastructure that had compromised routers, IoT devices, and netwo
Malicious actors have deployed typosquatted npm packages mimicking popular JavaScript libraries to steal sensitive developer credentials, including cloud provider tokens, CI/CD secrets, and environment variables. These packages contain obfuscated code that exfiltrates data to attacker-controlled ser
JINX-0164, a sophisticated threat actor, is actively targeting cryptocurrency companies with fake job recruitment campaigns that deliver macOS malware. The operation leverages social engineering through fraudulent recruiter personas to compromise employees at digital asset firms, deploying multi-sta
Iranian state-sponsored threat actor MuddyWater has launched a sophisticated espionage campaign targeting government and telecom sectors across nine countries using DLL side-loading techniques. The operation leverages legitimate applications to execute malicious payloads while evading detection, dem
Threat actors are distributing the Deno-based remote access trojan (RAT) through fake software repositories on GitHub and SourceForge. These malicious packages masquerade as legitimate development tools and productivity software, targeting developers and tech-savvy users. The Deno RAT provides attac
A severe vulnerability in 7-Zip, one of the world’s most popular file compression utilities, allows attackers to execute arbitrary code on victim systems through specially crafted archive files. The flaw affects multiple versions of the software and poses significant risks to organizations and indiv
InvisibleFerret malware has evolved its evasion tactics by abandoning traditional Python scripts in favor of compiled Python (.pyd) and shared object (.so) files. This strategic shift allows the malware to bypass signature-based detection systems that primarily focus on script-based threats. The upd