An open-source remote access trojan known as Chaos RAT has been observed in recent cyberattacks targeting Linux systems, according to security researchers. The free tool provides attackers with capabilities such as reverse shell access, file management, and remote command execution, making it a versatile weapon in malicious campaigns. Chaos RAT, short for Remote Administration Tool, […]
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), along with cybersecurity authorities from nine allied nations, has released a series of detailed guidelines to shield network edge devices from advanced cyber threats. These edge devices—such as firewalls, VPN gateways, and routers—are increasingly being exploited by threat actors, including state-sponsored groups. The guidance includes four technical […]
North Korean hackers target firms by deploying fake Zoom applications to hijack systems through deceptive video conferencing setups. The attackers use LinkedIn to pose as business professionals, initiating contact under the guise of legitimate investment or partnership inquiries. Once trust is established, the attackers invite victims to meetings hosted on spoofed domains resembling Zoom infrastructure, […]
A new wave of North Korea hacks devs through a deceptive campaign that uses fake job interviews and malicious npm packages. Security researchers have identified 35 compromised packages uploaded to the npm repository, which deliver infostealers and backdoors to developers’ systems. These tools collect sensitive information and open unauthorized access points. Labeled the “Contagious Interview” […]
Cybercriminals have found a new exploitation path by misusing the Microsoft 365 tool abused feature known as Direct Send. This feature, intended to help internal systems send emails through Microsoft’s infrastructure, is now being leveraged to distribute phishing messages that slip past conventional email security filters. Security researchers have observed that attackers use Direct Send […]
Cisco has released security updates addressing 35 vulnerabilities across multiple products, with a significant focus on its widely used IOS and IOS XE software platforms. Of these, 26 flaws were found in IOS and IOS XE, including 17 that have been classified as critical or high severity. The company has urged users to apply the […]
Europol has announced the takedown of several websites offering distributed denial-of-service (DDoS)-for-hire services, along with the arrest of four individuals in Poland as part of its ongoing crackdown on cybercrime. The operation targeted illicit platforms that enable users to launch DDoS attacks without technical expertise, disrupting online services by overwhelming them with traffic. The arrests […]
Qilin-linked threat actors were responsible for a significant spike in ransomware activity in April 2025, accounting for 45 breaches, according to cybersecurity researchers. The group employed a combination of the known malware SmokeLoader and a newly identified .NET-based loader dubbed NETXLOADER in a campaign first observed in November 2024. Researchers say NETXLOADER functions as a […]
Google is rolling out new artificial intelligence-based protections designed to detect online scams across its Chrome browser, Search engine, and Android operating system, the company announced Thursday. The initiative leverages Gemini Nano, Google’s on-device large language model, to enhance Safe Browsing features in Chrome version 137 on desktop platforms. By processing data locally, Gemini Nano […]
A newly identified phishing technique is exploiting blob URLs to bypass Secure Email Gateways (SEGs) and evade traditional security analysis tools, according to researchers at Cofense. The method leverages blob URIs—browser-generated, temporary data URLs—to create credential harvesting pages that reside solely in the victim’s browser memory. The attack begins with emails linking to allowlisted services […]
Moldovan authorities have arrested a 45-year-old foreign national suspected of carrying out a €4.5 million ransomware attack on a Dutch research agency, officials said Monday. The suspect is believed to have orchestrated a series of cyber intrusions targeting companies in the Netherlands in 2021, according to a statement from law enforcement. The individual is wanted […]
SAP has issued security patches to fix a second zero-day vulnerability that was actively exploited in recent cyberattacks targeting its NetWeaver application servers. The flaw, which had not been previously disclosed, allowed attackers to compromise systems before a fix was made available, highlighting the urgency of the update. This marks the second such vulnerability in […]