Cybersecurity researchers have uncovered a large-scale automated password spray campaign targeting Microsoft Azure Command-Line Interface (Azure … Hackers Bypass Microsoft Conditional Access in Massive Azure CLI Password Spray AttackRead more
Cyber Security
FortiBleed Campaign Linked to INC and Lynx Ransomware Attacks
The large-scale FortiBleed credential theft campaign has now been directly linked to the INC and Lynx … FortiBleed Campaign Linked to INC and Lynx Ransomware AttacksRead more
ToddyCat Deploys Umbrij Malware to Hijack Gmail Accounts via Google OAuth API
The advanced persistent threat (APT) group ToddyCat has been linked to a newly discovered malware called … ToddyCat Deploys Umbrij Malware to Hijack Gmail Accounts via Google OAuth APIRead more
Apple Releases Security Updates After Fixing WebKit Vulnerabilities Discovered Using AI Tools
Apple has released a new round of security updates for iOS, iPadOS, macOS, and Safari, addressing … Apple Releases Security Updates After Fixing WebKit Vulnerabilities Discovered Using AI ToolsRead more
Mustang Panda Targets Indian Government Using Zoho WorkDrive in Cloud-Based Spy Campaign
The China-aligned espionage group Mustang Panda has been linked to two active cyber-espionage campaigns targeting Indian … Mustang Panda Targets Indian Government Using Zoho WorkDrive in Cloud-Based Spy CampaignRead more
Critical SimpleHelp Flaw Exploited to Deploy TaskWeaver and Djinn Stealer Malware
A previously unknown threat actor is actively exploiting a critical vulnerability in SimpleHelp remote monitoring and … Critical SimpleHelp Flaw Exploited to Deploy TaskWeaver and Djinn Stealer MalwareRead more
Silent Swap Malware Uses Browser Extensions to Steal Cryptocurrency
Cybersecurity researchers have uncovered a sophisticated cryptocurrency theft campaign known as Silent Swap, which uses malicious … Silent Swap Malware Uses Browser Extensions to Steal CryptocurrencyRead more
Infoblox Discovers Over 236,000 Scam Websites Built Using DCloud Uni-App Templates
Cybersecurity researchers at Infoblox have uncovered a massive network of more than 236,000 fraudulent websites built … Infoblox Discovers Over 236,000 Scam Websites Built Using DCloud Uni-App TemplatesRead more
Critical libssh2 Vulnerability (CVE-2026-55200) Exposes SSH Clients to Remote Code Execution
Public Proof-of-Concept Raises Urgency for Organizations Using libssh2 A newly disclosed security flaw in libssh2 has … Critical libssh2 Vulnerability (CVE-2026-55200) Exposes SSH Clients to Remote Code ExecutionRead more
Microsoft Removes 119 Malicious Edge Extensions That Secretly Stole User Credentials
Microsoft has dismantled a sophisticated malware campaign that abused the Microsoft Edge Add-ons Store by distributing … Microsoft Removes 119 Malicious Edge Extensions That Secretly Stole User CredentialsRead more
