A Chinese-speaking advanced persistent threat (APT) group tracked as CL-STA-1062 has been observed deploying a previously unknown backdoor dubbed TinyRCT in targeted cyber espionage operations across Southeast Asia. The sophisticated malware features remote access capabilities, command execution fun
AI-powered exploitation tools are fundamentally changing vulnerability management by reducing the time between disclosure and active exploitation from weeks to hours. Attackers now leverage large language models and automated reconnaissance systems to generate working exploits faster than organizati
WhatsApp has introduced a username feature that allows users to connect without sharing their phone numbers. This privacy-focused update enables users to create unique identifiers for initiating conversations while keeping their actual phone numbers hidden from contacts. The feature addresses longst
The OceanLotus APT group (APT32) has launched a sophisticated cyber-espionage campaign dubbed “FireAnt” targeting Vietnamese investors and financial sector entities. The operation leverages a newly identified backdoor malware called SPECTRALVIPER, delivered through weaponized documents disguised as
Threat actors have weaponized the legitimate update mechanism of ViPNet, a widely-deployed secure communication software used across Russian government agencies, to deliver malicious payloads. The attack demonstrates advanced knowledge of the software’s architecture and represents a significant supp
A sophisticated malvertising campaign dubbed “SearchJack” has compromised 758,000 Chrome browser users by deploying 23 malicious extensions that hijack search queries and redirect traffic for profit. The extensions, which masqueraded as legitimate productivity and utility tools, intercepted user sea
Microsoft has enhanced Defender’s detection capabilities to monitor abuse of the Remote Procedure Call (RPC) protocol, a communication mechanism frequently exploited by threat actors for lateral movement and privilege escalation. This update addresses a long-standing blind spot in Windows security m
Google has released Gemini 3.5 Flash with computer use capabilities that enable autonomous AI agents to interact directly with systems, applications, and interfaces. While these features unlock powerful automation possibilities, they introduce significant security risks including unauthorized system
Cybercriminals are distributing ValleyRAT malware through counterfeit Microsoft Teams download websites. The malicious campaign targets unsuspecting users searching for legitimate Microsoft Teams installations, delivering a sophisticated remote access trojan (RAT) capable of data exfiltration, syste
Grafana confirms unauthorized GitHub token breach — attackers downloaded codebase and attempted extortion. No customer data compromised.