Researchers have demonstrated that standard Wi-Fi routers can be weaponized to identify and track individuals through walls with alarming accuracy. By analyzing how wireless signals interact with the human body, attackers can create detailed profiles of people’s unique physical characteristics witho
Distributed Denial of Service (DDoS) attacks have become commoditized through DDoS-as-a-Service (DDoSaaS) platforms, with attacks now available for as little as $5. These services operate like legitimate SaaS businesses, offering subscription tiers, customer support, and user-friendly interfaces. Po
The Silent Ransom ransomware group has adopted fast flux networking techniques to hide their data leak sites targeting law firms. By rapidly rotating IP addresses through compromised botnets, the threat actors make their infrastructure resilient against takedown efforts while maintaining persistent
OpenAI confirms employee devices compromised in TanStack supply chain attack. Code-signing certificates rotated after breach affected hundreds of npm and PyPI packages.
The North Korean state-sponsored Lazarus Group has launched a sophisticated npm brandjacking campaign targeting software developers. By creating typosquatted packages that mimic legitimate libraries, the threat actors are distributing malware designed to steal credentials, cryptocurrency wallets, an
Cybercriminals are intensifying automated scanning campaigns targeting publicly accessible Swagger API documentation files, particularly swagger.json. These files inadvertently expose complete API endpoints, authentication mechanisms, and internal architecture details that attackers exploit to breac
TeamPCP, a sophisticated threat actor group, has weaponized the software industry’s obsession with rapid deployment cycles to execute widespread attacks. By exploiting the security gaps inherent in rushed development processes, inadequate testing, and minimal security reviews, the group has compromi
A critical zero-day vulnerability dubbed “RoguePlanet” in Microsoft Defender allows attackers with basic user access to escalate privileges to SYSTEM-level control on Windows machines. The flaw exploits Defender’s built-in scanning mechanisms through a time-of-check-time-of-use (TOCTOU) race conditi
Microsoft has resolved a critical BitLocker recovery bug affecting Windows Server 2025 that prevented administrators from accessing encrypted drives during system recovery scenarios. The issue caused BitLocker recovery keys to fail validation, potentially locking organizations out of critical data.
Threat actors are leveraging weaponized Virtual Hard Disk (VHDX) files to deploy Remcos RAT, a powerful remote access trojan. This attack vector bypasses traditional security measures by exploiting Windows’ native ability to mount virtual disk images, delivering the malware payload through multiple