Authorities Dismantle Massive Residential Proxy Botnet
A joint law enforcement operation has dismantled the NetNut botnet, which hijacked millions of consumer devices to route malicious traffic through residential IP addresses.
The Latest
Ubiquiti Patches Seven Critical Vulnerabilities Across UniFi Product Line
Ubiquiti released patches for seven critical flaws across its UniFi product line, including a command injection vulnerability rated CVSS 10.0.
The New Vulnerability Clearinghouse Paradox: Why Scale and Scarcity Define the Next Security Era
The sudden proliferation of vulnerability clearinghouses reflects a fundamental shift in how pre-disclosure exploits are discovered and managed across shared…
HalluSquatting Exploits AI Hallucinations to Distribute Botnet Malware
The HalluSquatting technique allows attackers to poison AI coding assistants by registering fake resources that LLMs hallucinate, enabling remote code…
New EU Mandate for Driver Monitoring Raises Biometric Privacy Concerns
New EU regulations requiring driver monitoring cameras in all vehicles spark privacy and security debates over biometric data collection and…
Cyberattack on Mount Royal University Leads to Data Theft and System Disruption
Mount Royal University revealed that attackers stole data from student and employee file storage drives and wiped additional departmental data,…
KDDI Hack Exposes 12 Million Email Accounts via Zero Day in Third Party Software
KDDI confirmed that attackers exploited a previously unknown flaw in third party software to steal login credentials from five Japanese…
Malicious Payment SDK Packages Target Developers on NPM and PyPI
Seventeen counterfeit SDK packages on NPM and PyPI impersonate Paysafe, Skrill, and Neteller libraries to steal credentials from developer environments.
Telegram Based RedWing Malware Kit Enables No Skill Bank Fraud
A Telegram based malware rental service called RedWing lets criminals build custom Android banking trojans on demand, bypassing the need…
GitHub Verification Badge Can Be Bypassed by Rewriting Commit Signatures
An attacker can rewrite a signed Git commit's hash without changing its content or breaking its verified badge, undermining hash…
DuckDuckGo Browser Builds Native YouTube Ad Blocker Using Open Source Filter Lists
DuckDuckGo's browser now strips YouTube video ads by default using open source filter lists and proprietary rules.
Fake Google CAPTCHA Lures Mexican Bank Customers Into Banking Trojan Attack
The SCMBANKER malware toolkit uses a fake Google CAPTCHA page to trick Mexican bank customers into running a command that…
Claude Desktop Weaponized via Synced Account Settings in Novel Attack Vector
Pentera Labs showed how a compromised email inbox can lead to remote code execution on a target machine by hijacking…
Claude Cowork Extends AI Task Management to Mobile Devices
Claude's Cowork feature now enables task execution and monitoring across mobile and desktop devices, with offline capabilities and real time…
Spotlight
Banana RAT Operators Exploit Exposed Backend to Generate Polymorphic Payloads
An exposed backend server is actively generating new, polymorphic versions of the Banana RAT banking trojan, complicating detection for defenders.
Emerging Prompt Injection Methods Target Autonomous AI Agents
Attackers are now embedding malicious instructions within data consumed by autonomous AI agents, enabling indirect attacks that can hijack system behavior.
GhostLock Privilege Escalation Flaw Lurked in Linux Kernel for 15 Years
A race condition in Linux kernel futex operations, present since 2011, allows unprivileged local attackers to craft control flow hijacking and achieve root access with high reliability.
Malicious X Ad and ConsentFix Attack Target Mac and Windows Users
Attackers are exploiting a verified X ad to deliver Mac malware and using a new ConsentFix technique to steal Microsoft 365 account tokens.
Features
Attackers Use Microsoft Teams Voice Calls to Deploy EtherRAT Malware
Attackers impersonate corporate IT support via Microsoft Teams voice calls to trick employees into installing the EtherRAT remote access trojan,…
New LONGLEASH Malware Expands Chinese APT’s Relay Network
Chinese APT group UAT-7810 deploys LONGLEASH, DOGLEASH, and JARLEASH malware to compromise networking devices and expand a relay network used…
Dialogflow CX Flaw Enables Persistent Chatbot Injection Attacks
Researchers uncovered a Dialogflow CX vulnerability that lets attackers inject persistent malicious code, potentially exfiltrating conversations and enabling phishing campaigns.
Undocumented Backdoor Discovered in Tenda Router Firmware
CERT/CC warns that an unpatched backdoor in multiple Tenda router models grants full admin access without requiring a valid username.
Global IT Firm Accenture Reveals Data Theft After Cybercriminal Posts Stolen Code for Sale
The theft of source code and access credentials follows previous security incidents involving the same threat actor and the LockBit…
GitLost Attack Shows How GitHub Issues Can Leak Private Repositories Through AI Agents
A single GitHub Issue can force an AI agent to leak private repository data by exploiting a prompt injection flaw…
