PHANTOMPULSE, a newly discovered Remote Access Trojan (RAT), is actively compromising Windows systems through sophisticated process injection techniques and User Account Control (UAC) bypass methods. The malware employs multi-stage injection, reflective DLL loading, and legitimate process hollowing
Anthropic has launched Claude Fable 5, a new AI model available for a limited time period. This specialized model introduces unique capabilities that present both opportunities and security considerations for organizations. Security teams must understand the model’s architecture, assess potential at
One million WordPress sites at risk: Avada Builder flaws let hackers steal credentials and database secrets. Patch now or face a data breach nightmare.
Citrix has released critical security patches for six vulnerabilities affecting NetScaler ADC and NetScaler Gateway products. The most severe flaw (CVE-2025-24181) allows unauthenticated attackers to read sensitive files from vulnerable systems. Additional vulnerabilities enable denial-of-service at
Meta has filed a contempt of court motion against NSO Group, alleging the Israeli spyware vendor violated a 2020 injunction by continuing to target WhatsApp users. The complaint claims NSO Group deployed new infrastructure and attack methods despite court orders prohibiting such activities. This leg
Gremlin Stealer malware has evolved with sophisticated obfuscation techniques, embedding malicious payloads in resource files to bypass security tools. The new variant targets credentials, cryptocurrency wallets, and browser data while evading traditional detection methods through multi-stage execution and living-off-the-land tactics. A sophisticated evolution of the Gremlin information stealer has emerged, employing advanced obfuscation tactics that…
Americans lost $388M to crypto ATM scams in 2025. Criminals are weaponizing Bitcoin kiosks to drain victims’ accounts. Know the red flags before you use one.
Brazil’s national emergency alert system was breached in a suspected cyberattack, sending fraudulent emergency notifications to millions of mobile devices nationwide. The unauthorized alert falsely warned citizens of an imminent threat, causing widespread panic and confusion. Authorities have launch
NSO Group has allegedly violated a court order by continuing to develop and deploy exploits targeting WhatsApp users, despite ongoing litigation and explicit judicial restrictions. The Israeli spyware vendor’s Pegasus software was reportedly used to compromise WhatsApp accounts through zero-click ex
A sophisticated wave of supply chain attacks has infiltrated multiple developer package repositories, compromising thousands of open-source libraries across npm, PyPI, and RubyGems ecosystems. Attackers deployed typosquatted and dependency-confused packages containing malicious payloads designed to