Vulnerabilities

The malicious add-ons masquerade as legitimate AI sidebar tools.  ​ Read More  ​ 

The vulnerability enables unauthenticated RCE by allowing attackers to inject and run shell commands on exposed devices.  ​ Read More  ​ 

Hudson Rock says initial access was likely obtained using credentials harvested by infostealers like RedLine, Lumma, and Vidar.  ​ Read More  ​ 

The campaign, dubbed ‘PHALT#BLYX,’ begins with phishing emails posing as reservation cancellations from popular hotel booking platforms.  ​ Read More  ​ 

Kimwolf is believed to be an Android variant of AISURU and may be behind a series of record-setting DDoS attacks late last year.  ​ Read More  ​ 

The group has maintained “high-intensity intelligence gathering activities” against Ukrainian institutions throughout 2025.  ​ Read More  ​ 

The attackers gained access after Trust Wallet’s developer GitHub secrets were exposed.  ​ Read More  ​ 

The operation uses social engineering and technical evasion techniques, delivering malware through trojanized HWP documents.  ​ Read More  ​ 

The latest campaign alone impacted 2.2 million users through malicious browser extensions distributed across the three major browsers.  ​ Read More  ​ 

Goldberg worked at incident response firm Sygnia, while Martin, served as a ransomware negotiator for financial technology company DigitalMint.  ​ Read More  ​ 

ensys and the Shadowserver Foundation identified roughly 87,000 and 74,854 potentially exposed systems worldwide, respectively.  ​ Read More  ​ 

In brief: Fortinet warns of a five-year-old FortiOS flaw exploited in the wild, Russian defense-industry orgs targeted in a new campaign, and more.  ​ Read More  ​ 

The seized domain served as a backend control panel that stored and managed illegally harvested bank login credentials.  ​ Read More  ​ 

The extensions route all web traffic through attacker-controlled proxy servers using hardcoded credentials hidden with a custom encoding scheme.  ​ Read More  ​ 

The group is experimenting with new techniques to evade detection but still shows gaps in technical execution and language accuracy.  ​ Read More  ​