The Russia-linked Turla APT group has deployed a previously unknown backdoor called STOCKSTAY in targeted espionage operations against Ukrainian entities. Google’s Threat Analysis Group (TAG) identified this sophisticated malware framework featuring modular architecture, encrypted command-and-contro
North Korean threat actors have deployed macOS.Gaslight, a sophisticated malware strain designed to deceive security analysts by manipulating AI-powered analysis tools. The malware employs anti-analysis techniques that specifically target machine learning detection systems, generating false benign i
A newly identified advanced persistent threat actor, tracked as CL-STA-1062, has been conducting a prolonged espionage campaign against government entities and critical infrastructure across Southeast Asia since at least Q3 2023. The threat actor employs custom malware toolsets, sophisticated living
A sophisticated phishing campaign is targeting the hospitality industry with malicious ZIP archives disguised as photo collections. The attack delivers a Node.js-based implant that establishes persistent remote access on compromised systems. Hotels, resorts, and hospitality management companies are
A sophisticated backdoor dubbed “Mistic” has been identified as the primary tool of an access broker supplying corporate network credentials to ransomware operators. The malware features advanced evasion techniques including self-destruction capabilities, encrypted communications, and minimal forens
A critical privilege escalation vulnerability (CVE-2024-20272) in Cisco Unified Communications Manager (CUCM) has been weaponized by threat actors in less than 24 hours after public disclosure. The flaw allows authenticated attackers to escalate privileges to root level, granting complete system con
Tata Electronics, a key supplier for tech giants Apple and Tesla, has confirmed a significant data breach after threat actors claimed to have exfiltrated 630GB of sensitive corporate data. The leak allegedly contains proprietary manufacturing information, employee records, and confidential business
The Federal Communications Commission (FCC) has enacted comprehensive cybersecurity regulations targeting emergency alert systems and undersea cable infrastructure. These rules establish mandatory security protocols, vulnerability reporting requirements, and enhanced protection measures for systems
Threat actors are abusing Shopify’s legitimate Shop app—a popular order-tracking platform—to deliver callback phishing attacks that bypass traditional email security controls. By exploiting the app’s notification system, attackers send authentic-looking messages from Shopify’s infrastructure, tricki
Cybercriminals are exploiting the massive hype around Grand Theft Auto 6 (GTA 6) by creating fraudulent websites claiming to offer early access, beta keys, and exclusive content. These malicious sites distribute information-stealing malware, cryptocurrency draining scripts, and phishing schemes. Thr