A newly developed proof-of-concept known as the EDR-Freeze tool exploits Windows functionality by leveraging the Windows Error Reporting (WER) system to suspend security software directly from user mode. This technique raises concerns about the ability of threat actors to bypass endpoint detection and response (EDR) systems without requiring administrative privileges. The EDR-Freeze tool exploits Windows […]
Threat actors have increasingly exploited Oracle Scheduler to breach corporate networks by abusing its External Jobs feature. Recent incidents show attackers executing system-level commands through extjobo.exe, gaining unauthorized access even in segmented environments. Researchers observed adversaries initiating attacks by scanning for exposed Oracle listener ports and exploiting misconfigured or default credentials. Once inside, Oracle Scheduler […]
A malicious update disguised as a routine BlockBlasters Steam patch has exposed hundreds of users to a data-stealing malware campaign. The infected update, released on August 30, 2025, targeted players of the 2D platformer developed by Genesis Interactive, turning a trusted download into a vehicle for cyber intrusion. Security analysts at G Data discovered the […]
Cybercriminals have begun deploying AsyncRAT hides in malicious SVGs that mimic legitimate web portals, security researchers report. These Scalable Vector Graphics files are crafted to appear authentic while avoiding detection, as they do not require connections to external websites to function. The deceptive SVGs leverage embedded scripts to initiate the download and execution of the […]
A ransomware attack disrupted operations at several major European airports over the weekend, causing widespread delays and confusion for travelers. The Ransomware Attack Disrupts Majornaturally check-in and boarding systems, leaving airlines and passengers grappling with significant service interruptions. Security teams moved quickly to isolate affected networks and begin recovery efforts. Authorities confirmed that the cyberattack […]
Britain’s Secret Intelligence Service, MI6, has launched a new recruitment initiative by creating a secure portal on the dark web. The move, described as a way to simplify communication for potential agents, marks a significant shift in how the agency engages with candidates. MI6 launches dark web access to offer anonymity and protection for those […]