Cybersecurity analysts have uncovered a malicious campaign that exploits known vulnerabilities in TBK digital video recorders and Four-Faith routers to form a new distributed denial-of-service (DDoS) botnet named RondoDox. The RondoDox Botnet hijacks TBK DVR-4104 and DVR-4216 models by leveraging CVE-2024-3721, a medium-severity command injection flaw. Attackers also target Four-Faith routers using CVE-2024-12856, which affects […]
Cybersecurity firm CTM360 has uncovered a global online fraud operation involving more than 17,000 fake news websites impersonating well-known media outlets. The campaign, dubbed “BaitTrap Uncovers 17000 Fake,” spans at least 50 countries and uses deceptive pages that mimic platforms like CNN, BBC and CNBC to lure victims into fraudulent investment schemes. These fake sites, […]
The Atomic macOS malware backdoor has undergone a significant upgrade, adding a persistent access mechanism that poses heightened risks to Apple users globally. Previously known for rapid data theft, the malware now includes a backdoor that allows attackers to maintain long-term control over infected systems, execute remote commands and evade detection. Researchers at Moonlock, MacPaw’s […]
Apple patched several critical vulnerabilities in macOS’s SMBClient that exposed users to remote code execution and system crashes. These flaws, identified as CVE-2025-24269 and CVE-2025-24235, affect the SMB filesystem client used for mounting remote file shares. Apple patches macOS flaws by improving input validation and enforcing stricter access controls, urging users to update immediately and […]
A China-linked cyber group known as Houken compromised France’s critical infrastructure by exploiting zero-day vulnerabilities in Ivanti products, according to a report from ANSSI, the country’s national cybersecurity agency. The Houken Hack Hits France incident underscores growing concerns over state-sponsored cyber operations targeting essential systems across Europe. ANSSI’s investigation revealed that attackers used previously unknown […]
A Pakistan-based cyber-espionage group known as Transparent Tribe has deployed a new strain of Linux malware to target India’s defense sector, according to cybersecurity researchers. The latest Transparent Tribe hacks India campaign highlights a shift in the group’s tactics, with a strong focus on infiltrating Linux-based systems often used in secure environments. Security analysts linked […]
Brazilian authorities arrested a Brazil IT worker held responsible for facilitating a $100 million heist targeting the PIX instant payment system. João Roque, 48, an IT employee at C&M, allegedly sold system access for roughly R$15,000 and helped hackers execute fraudulent transactions affecting at least six financial institutions. Police detained Roque in São Paulo’s Jaraguá […]
A new cyber-espionage campaign targeting Russian companies has been linked to a previously unknown Windows-based malware strain named Batavia. According to cybersecurity firm Kaspersky, the operation has remained active since July 2024. The Batavia Spyware Hits Russian firms through emails disguised as contract-related communications, embedding malicious links that initiate the infection process. Researchers said attackers […]
The UK government is considering legislative reforms to address threats to undersea infrastructure, signaling that UK plans new laws targeting sabotage of critical submarine cables. Current protections rely on the Submarine Telegraph Act of 1885, a statute seen as outdated in the face of evolving security risks. Officials have raised concerns about the vulnerability of […]
Federal agencies are urging operators of critical infrastructure to immediately identify and disconnect vulnerable operational technology (OT) and industrial control systems (ICS) in response to escalating cyber threats linked to Iran. The advisory follows growing concerns that Iran cyber threat spurs increased targeting of essential services, putting energy, water, and transportation sectors at heightened risk. […]
Security researchers have identified a critical flaw in a data exfiltration tool used by the Cl0p ransomware gang, exposing it to potential remote code execution attacks. The Cl0p Hack Tool Flawnaturally, linked to previous high-profile breaches involving MOVEit Transfer software, now appears to carry vulnerabilities that could allow attackers to hijack systems using the same […]
A newly identified advanced persistent threat group known as NightEagle, also tracked as APT-Q-95, has launched a targeted campaign against China’s military and technology sectors, exploiting a vulnerability in Microsoft Exchange servers. Cybersecurity analysts say the NightEagle hacks Exchange servers using a zero-day exploit chain, enabling attackers to infiltrate sensitive networks linked to government and […]