Threat actors conducted an aggressive reconnaissance campaign against SonicWall firewall interfaces, generating over 597,000 scanning sessions within a nine-day period. This massive scanning operation targeted publicly exposed SonicWall management interfaces, likely seeking vulnerable devices for ex
A new investigation reveals that one telecommunications provider has been hosting the majority of active command-and-control (C2) servers operating across the Middle East. This concentration of malicious infrastructure under a single provider raises significant questions about infrastructure abuse,
NFCShare, a sophisticated Android banking trojan, is actively spreading through fraudulent banking app updates hosted on GitHub repositories. The malware specifically targets Near Field Communication (NFC) functionality to steal payment card data and intercept banking credentials. Attackers are leve
Security researchers have uncovered a sophisticated criminal operation behind EtherRAT malware, revealing an extensive infrastructure spanning multiple domains, phishing pages, and distribution channels. The network facilitated credential theft, financial fraud, and unauthorized system access across
A robotics startup is offering free professional home cleaning services in exchange for permission to record every moment of the cleaning process—including video, audio, and sensor data—to train AI models. This arrangement raises serious privacy concerns, creates potential data breach vectors, and e
Oracle E-Business Suite faces active exploitation of CVE-2024-46817, a critical vulnerability allowing unauthenticated remote code execution. Attackers are leveraging this flaw to compromise enterprise systems, with proof-of-concept exploits circulating in underground forums. Organizations running O
A sophisticated Chinese Advanced Persistent Threat (APT) group has deployed a previously unknown malware framework designed specifically for maintaining long-term access to compromised networks. The multi-stage implant demonstrates advanced evasion techniques, modular architecture, and infrastructur
A popular Chrome browser extension with over 10 million installations has been discovered containing dormant code injection capabilities that could execute arbitrary scripts on user browsers. The ad blocker, which appears legitimate on the surface, includes obfuscated functions that allow remote cod
Google has released DiffusionGemma, an open-source AI image generation model featuring a 4x performance improvement over its predecessor. While the speed enhancement democratizes AI capabilities, it simultaneously amplifies security risks including adversarial attacks, deepfake generation velocity,
Critical NGINX vulnerability CVE-2026-8711 lets remote attackers execute malicious code via heap overflow. Unauthenticated exploitation possible. Patch now.