Cybercriminals are exploiting tax season anxieties by distributing malicious Income Tax Assessment Notices that deliver Remote Access Trojan (RAT) malware to Windows systems. These sophisticated phishing campaigns leverage social engineering tactics, disguising malware as legitimate tax documents to
A newly identified threat actor known as GhostShell has emerged with targeted phishing campaigns against Ukraine’s drone defense sector. The group employs advanced social engineering techniques combined with malicious payloads designed to compromise critical defense infrastructure. This campaign rep
CISA has added multiple critical Ubiquiti UniFi OS vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, warning that threat actors are actively exploiting these flaws in the wild. The vulnerabilities, carrying maximum CVSS scores, allow unauthenticated remote code execution and comp
CISA’s updated Trusted Internet Connections (TIC) 3.0 guidance now explicitly incorporates Secure Access Service Edge (SASE) architectures as a pathway to modernize federal network security. This guidance enables agencies to transition from legacy perimeter-based security to cloud-native zero trust
Attackers have deployed typosquatted npm packages masquerading as the legitimate PostCSS library, infecting developer workstations with remote access trojans (RATs) and credential stealers. The malicious packages specifically target Chrome browser passwords and establish persistent backdoor access t
A newly disclosed vulnerability in Apple’s macOS operating system enables attackers with limited access to disable critical security tools and escalate privileges to root level. The flaw exploits gaps in macOS’s System Integrity Protection (SIP) mechanisms, allowing malicious actors to terminate sec
Threat actors are actively exploiting unpatched Microsoft SharePoint servers to deploy ransomware and custom backdoors across enterprise networks. Multiple attack campaigns targeting known SharePoint vulnerabilities have been observed in the wild, with attackers leveraging these entry points to esta
Microsoft’s Digital Crimes Unit (DCU) successfully dismantled over 200 command-and-control (C2) servers associated with both Amadey bot malware and StealC information stealer in a coordinated legal takedown. This marks the first time a court-authorized operation has simultaneously targeted two disti
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2025-30179 affecting Ubiquiti UniFi OS and CVE-2014-3026 affecting Lantronix EDS5000 devices. Both flaws are confirmed under active exploi
Governments worldwide are grappling with mounting security risks in open-source software ecosystems. Recent supply chain attacks, underfunded critical projects, and the sheer scale of dependency chains have exposed systemic vulnerabilities that traditional regulatory approaches cannot address. As na