Patch Now: ‘RediShell’ Threatens Cloud Via Redis RCE Summary Wiz Research has disclosed a critical remote code execution vulnerability in Redis (CVE-2025-49844), nicknamed “RediShell.” The flaw is a use-after-free memory…
Cyberattackers Exploit Zimbra Zero-Day Via ICS Summary An unknown threat actor impersonating the Libyan Navy’s Office of Protocol used a malicious calendar (ICS) attachment to exploit a zero-day XSS vulnerability…
Clop Ransomware Hits Oracle Customers Via Zero-Day Flaw Summary The Clop ransomware group has been observed targeting Oracle E-Business Suite customers by exploiting a newly disclosed zero-day vulnerability, CVE-2025-61882. The…
Chinese Gov’t Fronts Trick the West to Obtain Cyber Tech Summary Recorded Future’s investigation spotlights a little-known Beijing research network — the Beijing Institute of Electronics Technology and Application (BEITA),…
LockBit, Qilin & DragonForce Join Forces in Ransomware ‘Cartel’ Summary Three major ransomware and extortion groups — LockBit, Qilin and DragonForce — have announced a coalition-style collaboration, inviting other cybercriminal…
Framelink Figma MCP Server Opens Orgs to Agentic AI Compromise Summary A high-severity command-injection flaw (CVE-2025-53967, CVSS 7.5) was discovered in Framelink’s Figma MCP server integration. The vulnerability exists in…
Medusa Ransomware Actors Exploit Critical Fortra GoAnywhere Flaw Summary Threat actors deploying Medusa ransomware (linked to Storm-1175) have been observed exploiting a maximum-severity deserialization vulnerability in Fortra’s GoAnywhere managed file…
Chaos Ransomware Upgrades With Aggressive New C++ Variant Summary FortiGuard Labs has documented a new, more aggressive Chaos ransomware variant rewritten in C++ (Chaos-C++). The variant introduces faster, more destructive…
Vampire Bot Malware Sinks Fangs Into Job Hunters Summary A Vietnam-based threat group tracked as BatShadow has been running a phishing campaign aimed at job seekers and digital marketing professionals.…
Red Hat Hackers Team Up With Scattered Lapsus$ Hunters Summary Crimson Collective — a new extortion-focused crime group — claims to have breached a self-managed GitLab instance used by Red…
