Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts Summary Cybersecurity firm Huntress has reported a widespread compromise of SonicWall SSL VPN devices that allowed threat actors to…
Astaroth Banking Trojan Abuses GitHub to Remain Operational After Takedowns Summary Researchers at McAfee Labs have uncovered a campaign in which the Astaroth banking trojan uses GitHub repositories as a…
npm, PyPI, and RubyGems Packages Found Sending Developer Data to Discord Channels Summary Punchy author note: This is urgent if you build, run or vet open-source packages — malicious libraries…
Researchers Expose TA585’s MonsterV2 Malware Capabilities and Attack Chain Summary Cybersecurity researchers at Proofpoint have detailed activity by a previously undocumented threat actor they call TA585, which has been distributing…
Why Unmonitored JavaScript Is Your Biggest Holiday Security Risk Summary This article warns that the biggest blind spot for online retailers ahead of the 2025 holiday season is unmonitored JavaScript…
Researchers Warn RondoDox Botnet is Weaponizing Over 50 Flaws Across 30+ Vendors Summary Security researchers have observed the RondoDox malware campaign expanding into a broad, automated exploitation operation that weaponises…
Microsoft Locks Down IE Mode After Hackers Turned Legacy Feature Into Backdoor Summary Microsoft has tightened how Internet Explorer (IE) mode is launched inside Edge after receiving credible reports that…
Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control Summary Claroty Team 82 disclosed two critical vulnerabilities in Red Lion Sixnet RTUs — CVE-2023-42770 (authentication…
Hackers Target ICTBroadcast Servers via Cookie Exploit to Gain Remote Shell Access Summary Cybersecurity researchers have confirmed active exploitation of a critical command injection bug in ICTBroadcast (CVE-2025-2611, CVSS 9.3).…
New SAP NetWeaver Bug Lets Attackers Take Over Servers Without Login Summary SAP has issued fixes for 13 security issues in its October 2025 patch cycle, including a maximum-severity insecure…
