npm, PyPI, and RubyGems Packages Found Sending Developer Data to Discord Channels Summary Punchy author note: This is urgent if you build, run or vet open-source packages — malicious libraries…
Researchers Expose TA585’s MonsterV2 Malware Capabilities and Attack Chain Summary Cybersecurity researchers at Proofpoint have detailed activity by a previously undocumented threat actor they call TA585, which has been distributing…
⚡ Weekly Recap: WhatsApp Worm, Critical CVEs, Oracle 0-Day, Ransomware Cartel & More Summary This week’s recap covers rapid, cross-border attacker innovation: an Oracle E-Business Suite zero-day used in large-scale…
Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control Summary Claroty Team 82 disclosed two critical vulnerabilities in Red Lion Sixnet RTUs — CVE-2023-42770 (authentication…
Hackers Target ICTBroadcast Servers via Cookie Exploit to Gain Remote Shell Access Summary Cybersecurity researchers have confirmed active exploitation of a critical command injection bug in ICTBroadcast (CVE-2025-2611, CVSS 9.3).…
New SAP NetWeaver Bug Lets Attackers Take Over Servers Without Login Summary SAP has issued fixes for 13 security issues in its October 2025 patch cycle, including a maximum-severity insecure…
Chinese Hackers Exploit ArcGIS Server as Backdoor for Over a Year Summary ReliaQuest attributes a long-running compromise of a public-facing ArcGIS server to the China-linked activity group Flax Typhoon (aka…
RMPocalypse: Single 8-Byte Write Shatters AMD’s SEV-SNP Confidential Computing Summary Researchers at ETH Zürich disclosed a flaw called RMPocalypse that allows a single 8-byte write to the Reverse Map Paging…
New Pixnapping Android Flaw Lets Rogue Apps Steal 2FA Codes Without Permissions Summary Researchers from Berkeley, Washington, UC San Diego and Carnegie Mellon have discovered “Pixnapping” — a pixel‑stealing side‑channel…
ThreatsDay Bulletin: $15B Crypto Bust, Satellite Spying, Billion-Dollar Smishing, Android RATs & More Summary This week’s ThreatsDay round-up highlights a string of high-impact cyber incidents and emerging attack techniques: a…
