ClickFix Campaign Uses Browser Fingerprinting to Hide macOS Infostealer AttacksThe discovery of more than 250 domains supporting a macOS-focused ClickFix campaign demonstrates how attackers are improving the infrastructure surrounding social-engineering attacks rather than…
KHunt Attack Shows How SQL Injection Can Turn an Oracle Database into a Hidden Post-Exploitation PlatformThe discovery of the KHunt post-exploitation toolkit operating d…
CISA Warning Highlights Active Exploitation of Langflow, N-central and Apache Tomcat VulnerabilitiesCISA’s warning regarding actively exploited vulnerabilities in IBM La…
OVSwrap Linux Kernel Flaw Allows Local Users to Gain Root Through Open vSwitchA newly disclosed Linux kernel vulnerability known as OVSwrap demonstrates how a flaw in a …
TP-Link Omada ZTP Vulnerabilities Show How Automated Network Provisioning Can Become an Attack PathThe discovery of 15 vulnerabilities affe…
QuickFox Supply-Chain Attack Delivered FDMTP Backdoor Through Official Windows InstallerThe discovery of a long-running supply-chain compro…
Counterfeit Open VSX Extensions Harvest Developer and CI/CD Environment InformationThe discovery of 77 counterfeit extensions on the Open V…
New XCSSET Variant Turns Compromised Xcode Projects into a macOS Supply-Chain AttackThe emergence of XCSSET version 40 demonstrates how att…
CISA Adds Actively Exploited N-able, Apache Tomcat and Langflow Vulnerabilities to KEV CatalogThe addition of three vulnerabilities affecti…
Greatness Phishing Service Exploits RingCentral Trust to Compromise Microsoft 365 AccountsA phishing campaign impersonating RingCentral dem…
Fake Adobe and Zoom Updates Show How Attackers Abuse Trusted Software to Establish Persistent Remote AccessA series of phishing campaigns u…
Keyv-Linked npm Worm Demonstrates How Developer Credentials Can Turn One Compromise into a Software Supply-Chain EpidemicThe discovery of a…
DOUBLECUP ClickFix Service Shows How Browser Caches Are Being Turned into Malware Delivery ChannelsThe newly identified DOUBLECUP loader-as…
Critical cPanel Flaw Could Allow Hosting Customers to Execute SQL with Database Root PrivilegesA newly disclosed critical vulnerability in …
Malicious npm Packages Target Alibaba Developers with a Cross-Platform Remote-Access TrojanThe discovery of 18 malicious npm packages targe…