Hackers Turn Velociraptor DFIR Tool Into Weapon in LockBit Ransomware Attacks Summary Threat actors associated with Storm-2603 (aka CL-CRI-1040 / Gold Salem) have been observed weaponising Velociraptor — an open-source…
Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts Summary Cybersecurity firm Huntress has reported a widespread compromise of SonicWall SSL VPN devices that allowed threat actors to…
New Oracle E-Business Suite Bug Could Let Hackers Access Data Without Login Summary Oracle has published a security alert for a new vulnerability in E-Business Suite (EBS), tracked as CVE-2025-61884.…
Astaroth Banking Trojan Abuses GitHub to Remain Operational After Takedowns Summary Researchers at McAfee Labs have uncovered a campaign in which the Astaroth banking trojan uses GitHub repositories as a…
Microsoft Locks Down IE Mode After Hackers Turned Legacy Feature Into Backdoor Summary Microsoft has tightened how Internet Explorer (IE) mode is launched inside Edge after receiving credible reports that…
Researchers Warn RondoDox Botnet is Weaponizing Over 50 Flaws Across 30+ Vendors Summary Security researchers have observed the RondoDox malware campaign expanding into a broad, automated exploitation operation that weaponises…
Why Unmonitored JavaScript Is Your Biggest Holiday Security Risk Summary This article warns that the biggest blind spot for online retailers ahead of the 2025 holiday season is unmonitored JavaScript…
⚡ Weekly Recap: WhatsApp Worm, Critical CVEs, Oracle 0-Day, Ransomware Cartel & More Summary This week’s recap covers rapid, cross-border attacker innovation: an Oracle E-Business Suite zero-day used in large-scale…
Researchers Expose TA585’s MonsterV2 Malware Capabilities and Attack Chain Summary Cybersecurity researchers at Proofpoint have detailed activity by a previously undocumented threat actor they call TA585, which has been distributing…
npm, PyPI, and RubyGems Packages Found Sending Developer Data to Discord Channels Summary Punchy author note: This is urgent if you build, run or vet open-source packages — malicious libraries…
