Security researchers have uncovered 77 malicious extensions on the Open VSX Marketplace that masqueraded as legitimate … 77 Malicious Open VSX Extensions Found Stealing Developer and CI Environment DataRead more
Cyber Security
Linux SCTPhantom Vulnerability (CVE-2026-64564) Enables Root Access and Container Escape
A newly disclosed Linux kernel vulnerability, CVE-2026-64564, dubbed SCTPhantom, has revealed how an 18-year-old bug in … Linux SCTPhantom Vulnerability (CVE-2026-64564) Enables Root Access and Container EscapeRead more
Russian DOUBLECUP Malware Service Uses ClickFix to Deploy CountLoader and DeviceManager RAT
Security researchers have uncovered a new Russian Loader-as-a-Service (LaaS) platform named DOUBLECUP that is using ClickFix … Russian DOUBLECUP Malware Service Uses ClickFix to Deploy CountLoader and DeviceManager RATRead more
Critical cPanel Flaw Allows Root-Level Database Access, Patch Available
cPanel has released an emergency security update to fix a critical vulnerability that could allow authenticated … Critical cPanel Flaw Allows Root-Level Database Access, Patch AvailableRead more
Chinese Hackers Target Central Asian Governments with New OctLurk and SilkLurk Malware
A previously unidentified Chinese-speaking threat actor is believed to be behind an ongoing cyber espionage campaign … Chinese Hackers Target Central Asian Governments with New OctLurk and SilkLurk MalwareRead more
Microsoft Warns of Fake Hotel Wi-Fi Updates Spreading CornFlake RAT
Cybersecurity researchers have uncovered a sophisticated attack campaign targeting travelers through compromised hotel Wi-Fi networks. According … Microsoft Warns of Fake Hotel Wi-Fi Updates Spreading CornFlake RATRead more
Broadcom Patches Critical VMware Flaws Enabling Authentication Bypass and VM Escape
Broadcom has released emergency security updates to fix multiple vulnerabilities affecting VMware ESX, vCenter, Workstation, and … Broadcom Patches Critical VMware Flaws Enabling Authentication Bypass and VM EscapeRead more
SilverFox Expands BYOVD Attacks with New Vulnerable Drivers to Deploy ValleyRAT
The China-linked cybercrime group Silver Fox has launched a sophisticated cyberattack targeting a Japanese industrial manufacturing … SilverFox Expands BYOVD Attacks with New Vulnerable Drivers to Deploy ValleyRATRead more
Microsoft July Patch Tuesday Fixes 622 CVEs, Including Two Actively Exploited Zero-Days
Microsoft has released its largest Patch Tuesday update ever, addressing 622 security vulnerabilities across its products. … Microsoft July Patch Tuesday Fixes 622 CVEs, Including Two Actively Exploited Zero-DaysRead more
148 Malicious npm Packages Turned Student Proxy Users into a DDoS Botnet
Cybersecurity researchers have uncovered a large-scale campaign involving 148 malicious npm packages that masqueraded as student … 148 Malicious npm Packages Turned Student Proxy Users into a DDoS BotnetRead more