News

Adobe ColdFusion Critical Flaw Added to CISA’s Exploited Catalog: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has included a critical security vulnerability found in Adobe ColdFusion in …

New XLoader macOS Malware Disguised as ‘OfficeNote’ App: A fresh variant of the macOS-targeting XLoader malware has emerged, camouflaging itself as the legitimate ‘OfficeNote’ productivity app. This devious …

New P2PInfect Worm Targets Redis Servers with Undocumented Breach Methods: The P2PInfect worm, a peer-to-peer malware, is employing undisclosed initial access methods to infiltrate vulnerable Redis servers, forming …

Patchwork Hackers Target Chinese Research Organizations with EyeShell Backdoor: Threat actors belonging to the Patchwork hacking crew have launched a targeted campaign against Chinese universities and research organizations, …

A new malware, Android Malware CherryBlos, employs optical character recognition (OCR) techniques to pilfer sensitive data stored in images (OCR-Powered Data Theft). Disguised in fake social media posts, …

AVRecon Botnet Exploits Compromised Routers for Illegal Proxy Services: The AVRecon botnet has raised security concerns as it utilizes compromised small office/home office (SOHO) routers in a long-running …

Ninja Forms Plugin Vulnerabilities Leave 800k Sites Exposed: Security researchers have uncovered critical flaws in the popular Ninja Forms plugin for WordPress, potentially exposing over 800,000 sites to …

Fruity Trojan Spreads Remcos RAT via Deceptive Software: A dangerous cyber threat is on the rise as threat actors employ deceptive tactics, creating fake websites hosting trojanized software …

Norway Discloses Zero-Day Exploitation in Government IT Systems: Norway’s government IT systems faced a significant security breach as attackers exploited a zero-day vulnerability in Ivanti’s Endpoint Manager Mobile …

Massive Info-Stealing Malware Breach: 400,000 Corporate Credentials Stolen: In the ever-evolving landscape of cyber threats, a shocking discovery has emerged – over 400,000 corporate credentials stolen by info-stealing …