Cybersecurity
ASUS Router Flaw Linked to China’s Operation WrtHug Espionage Campaign
The ASUS router flaw has become a central piece of a sprawling global intrusion campaign known as Operation WrtHug, a coordinated effort…
Cybersecurity
Cybersecurity news and threat intelligence covering active cyberattacks, exploit campaigns, nation-state operations, and emerging security risks. Reporting focuses on real-world intrusions, offensive tooling, vulnerability abuse, and adversary tactics affecting governments, enterprises, and critical infrastructure worldwide.
Cybersecurity
Mitsubishi Electric Vulnerabilities Expose Critical ICS Software to Remote Attack Risks
The latest ICS advisory from the United States Cybersecurity and Infrastructure Security Agency outlines a serious collection of security weaknesses affecting engineering…
Cybersecurity
Russian Hackers Target U.S. Engineering Firm Over Links to Ukraine
Russian hackers targeted a United States engineering firm in what appears to be a significant escalation in Russia aligned cyber activity aimed…
Malware
StealC V2 Malware Is Being Installed Through Malicious Blender Files
A new malware campaign is abusing Blender asset files to install the StealC V2 information stealer on user systems. Threat actors are…
Cybersecurity
China Cyberwarfare Training Leak Exposes Secret Simulations of Foreign Critical Infrastructure
The new leak surrounding China’s offensive cyber training systems has exposed one of the most revealing looks yet into the internal structure…
Cybersecurity
Criminals Using Fake Bank Support Operations Have Stolen Over $262 Million
The FBI is warning the public about a sharp rise in bank impersonation activity that has resulted in more than 262 million…
Cybersecurity
CISA Warns Spyware Is Actively Hijacking Signal and WhatsApp Accounts
The U.S. Cybersecurity and Infrastructure Security Agency has issued a critical alert warning that advanced spyware campaigns are actively hijacking user accounts…
Cybersecurity
Code Beautifiers Are Exposing High Risk Access Credentials Online
Researchers have uncovered a significant security issue involving popular online code beautifiers, where sensitive credentials and configuration data have been publicly exposed…
Cybersecurity
New Shai Hulud Malware Outbreak Steals GitHub Tokens and Destroys User Files
A large scale malware outbreak is sweeping through the npm ecosystem, compromising hundreds of packages and leaking sensitive developer secrets to GitHub…
Cybersecurity
ShadowPad Malware Exploits WSUS Vulnerability for Full System Access
ShadowPad, a modular espionage focused backdoor linked to long running Chinese threat operations, is being deployed through active exploitation of a recently…
Cybersecurity
Fluent Bit Vulnerabilities Expose Cloud Systems to Remote Code Execution
Security researchers have identified a cluster of vulnerabilities in Fluent Bit, the high performance open source telemetry agent used across major cloud…
Cybersecurity
New Sturnus Android Banking Trojan Can Spy on WhatsApp, Telegram, and Signal
A new Android banking malware family named Sturnus is emerging as one of the most capable threats targeting mobile users, combining credential…