CVE-2025-22225 in VMware ESXi now used in active ransomware attacks

2 weeks ago

Ransomware groups now exploit VMware ESXi vulnerability CVE-2025-22225, patched by Broadcom in March 2025. The U.S. Cybersecurity and Infrastructure Security…

Taiwanese operator of Incognito Market sentenced to 30 years over $105M darknet drug ring

2 weeks ago

A Taiwanese man was sentenced to 30 years for running Incognito Market, a major darknet drug site that sold over…

Paris raid on X focuses on child abuse material allegations

2 weeks ago

French prosecutors raided X offices in Paris over illegal content; Elon Musk and CEO summoned for voluntary interviews in April.…

GreyNoise tracks massive Citrix Gateway recon using 63K+ residential proxies and AWS

2 weeks ago

GreyNoise spotted a dual-mode Citrix Gateway recon campaign using 63K+ residential proxies and AWS to find login panels and enumerate…

Microsoft: Info-Stealing malware expands from Windows to macOS

2 weeks ago

Microsoft warns info-stealing attacks are expanding from Windows to macOS, using cross-platform languages like Python and abusing trusted platforms. Microsoft…

U.S. CISA adds SolarWinds Web Help Desk, Sangoma FreePBX, and GitLab flaws to its Known Exploited Vulnerabilities catalog<gwmw style="display:none;"></gwmw>

2 weeks ago

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds SolarWinds Web Help Desk, Sangoma FreePBX, and GitLab flaws to its Known Exploited…

Hackers abused React Native CLI flaw to deploy Rust malware before public disclosure

2 weeks ago

Hackers exploit a critical React Native CLI flaw (CVE-2025-11953) to run remote commands and drop stealthy Rust malware, weeks before…

APT28 exploits Microsoft Office flaw in Operation Neusploit

2 weeks ago

Russia-linked APT28 is behind Operation Neusploit, exploiting a newly disclosed Microsoft Office vulnerability in targeted attacks. Russia-linked group APT28 (aka…

Notepad++ infrastructure hack likely tied to China-nexus APT Lotus Blossom

2 weeks ago

Rapid7 researchers say the Notepad++ hosting breach is likely linked to the China-nexus Lotus Blossom APT group. Recently, the Notepad++…

MoltBot Skills exploited to distribute 400+ malware packages in days

2 weeks ago

Over 400 malicious OpenClaw packages were uploaded in days, using MoltBot skills to spread password-stealing malware. Researchers uncovered a large…

This website uses cookies.