CISA and NSA: Hardening guidance for Microsoft Exchange
CISA and NSA (with ACSC and Canada’s Cyber Centre) published consolidated hardening guidance for Microsoft Exchange: patch and migrate from EOL versions, restrict and strengthen […]
Month: October 2025
Automated Botnet Campaigns
A sharp rise in automated botnet campaigns (Mirai, Gafgyt, Mozi, AISURU/TurboMirai) is targeting PHP servers, IoT devices, and cloud gateways by exploiting known CVEs, exposed […]
NPM packages Causes Havoc
Ten typosquatting npm packages were published that execute an obfuscated loader at postinstall, display a fake ASCII CAPTCHA, fingerprint victims, download a 24 MB PyInstaller-packaged […]
Qilin Ransomware
Qilin ransomware operators are executing Linux ELF encryptors on Windows hosts by enabling or installing Windows Subsystem for Linux (WSL) after initial access. They transfer […]
Leaked Credentials
Synthient aggregated leaked credentials from Telegram, forums, social media, and the Tor network into a 3.5 TB dataset containing 183 million unique email addresses and […]
New Android MaaS “Herodotus”
Herodotus is a new Android malware-as-a-service that mimics human typing by injecting randomized delays into its input routines (0.3–3s) to defeat timing- and behavior-based detection. […]
When AI Remembers Too Much: The ChatGPT Atlas Browser Exploit and What It Means for the Future of AI Security
Artificial intelligence continues to reshape how we work, learn, and connect — but as AI tools become more personal and powerful, they also introduce entirely […]
RedTiger Infostealer Steals Discord Accounts and Payment Data
A recently weaponised open‑source red‑team tool called RedTiger is being used in the wild to build an infostealer that targets Discord users and gamers. Attackers […]
New Phishing Technique called “CoPhish”
Researchers at Datadog Security Labs called the new phishing technique “CoPhish” and showed how malicious Copilot Studio agents can host OAuth consent flows on Microsoft […]
Widespread mass attacks target outdated WordPress plugins
Widespread exploitation campaigns are targeting WordPress sites that still run outdated versions of the GutenKit and Hunk Companion plugins, allowing attackers to install arbitrary plugins […]