Attackers hijack Axios npm account to spread RAT malware

3 weeks ago

Threat actors hijacked the npm account of Axios to distribute RAT malware via malicious package updates. Threat actors compromised the…

Nearly half a Million mobile customers of Lloyds Banking Group affected by security incident

3 weeks ago

Lloyds Banking Group data incident exposed transactions of ~450,000 mobile banking users due to a faulty update. A faulty software…

Dutch Ministry of Finance takes treasury systems offline amid cyber incident investigation

3 weeks ago

The Dutch Ministry of Finance took treasury banking portal offline after a cyberattack; core tax systems were not affected. The…

U.S. CISA adds a flaw in Citrix NetScaler to its Known Exploited Vulnerabilities catalog

3 weeks ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in Citrix NetScaler to its Known Exploited Vulnerabilities catalog.…

Qilin Ransomware allegedly breached chemical manufacturer giant Dow Inc

3 weeks ago

Qilin ransomware claims a breach of Dow Inc., listing it on its Tor leak site, but no proof of the…

China-Linked groups target Southeast Asian government with advanced malware in 2025

3 weeks ago

China-linked groups hit a Southeast Asian government in 2025, deploying multiple malware families in a sophisticated cyber campaign. In 2025,…

It’s a mystery … alleged unpatched Telegram zero-day allows device takeover, but Telegram denies

3 weeks ago

A critical Telegram flaw could allow zero-click remote code execution on devices, but Telegram denies it. Researcher Michael DePlante (@izobashi)…

Critical Fortinet FortiClient EMS flaw exploited for Remote Code Execution<gwmw style="display: none; background-color: transparent;"></gwmw>

3 weeks ago

Attackers are exploiting a critical Fortinet FortiClient EMS flaw (CVE-2026-21643) that allows remote code execution via SQL injection. A critical…

New macOS Infinity Stealer uses Nuitka Python payload and ClickFix

3 weeks ago

Infinity Stealer targets macOS via fake Cloudflare CAPTCHA, using Nuitka; first such campaign per Malwarebytes. Researchers at Malwarebytes spotted a…

Russia-linked APT TA446 uses DarkSword exploit to target iPhone users in phishing wave

3 weeks ago

Russia-linked TA446 is using the DarkSword iOS exploit kit in targeted phishing campaigns to compromise iPhone users. Russia-linked APT group…

This website uses cookies.