Secretive MaaS Group ‘TAG-150’ Develops Novel ‘CastleRAT’ Summary Researchers have uncovered a stealthy malware-as-a-service (MaaS) operation labelled TAG-150 that centres on a loader called CastleLoader and a family of remote…
How Has IoT Security Changed Over the Past 5 Years? Summary IoT adoption has grown significantly across industries, but security improvements have been uneven. Experts interviewed for the article note…
Critical SAP S/4HANA Vulnerability Under Attack, Patch Now Summary A critical code-injection flaw in SAP S/4HANA (CVE-2025-42957) with a 9.9 CVSS score is being exploited in the wild. The vulnerability…
The Critical Failure in Vulnerability Management Summary Commentary by Amar Ramakrishnan argues the vulnerability-management market is struggling because vendors built businesses around surfacing flaws and satisfying audits rather than reducing…
45 New Domains Linked to Salt Typhoon, UNC4841 Summary Researchers at Silent Push uncovered 45 domains — some registered as far back as 2020 — linked to China‑backed threat actors…
‘MostereRAT’ Malware Blends In, Blocks Security Tools Summary Researchers at Fortinet’s FortiGuard Labs warn of a phishing-led campaign deploying a sophisticated remote access Trojan Fortinet calls “MostereRAT.” The malware begins…
Summary A threat actor tracked as UNC6395 compromised Salesloft’s GitHub account earlier this year. The initial intrusion allowed the attacker to download repository data and perform reconnaissance between March and…
Nepal social media ban sparks protests, dozens injured Summary At least 14 people were reported killed and dozens more injured after security forces clashed with thousands of mostly young protesters…
US sanctions companies behind cyber scam centres in Cambodia, Myanmar Summary The U.S. Treasury and State Department sanctioned multiple individuals and companies tied to large-scale cyber scam compounds in Myanmar…
Kazakh oil giant denies cyberattack, says incident was ‘planned’ phishing drill Summary KazMunayGas, Kazakhstan’s state oil company, has rejected claims from Seqrite Labs that it was targeted by a newly…
