Hackers sneak AdaptixC2 into the npm ecosystem by disguising it as a legitimate package, targeting developers who rely on Node.js modules. Researchers in October discovered that a malicious library named “https-proxy-utils” mimicked popular proxy tools such as “http-proxy-agent.” Once installed, it executed a post-installation script that deployed the AdaptixC2 agent, giving attackers covert access to […]
Microsoft patched 172 security flaws in its October 2025 Patch Tuesday update, the highest monthly total so far this year. The rollout includes fixes for eight critical vulnerabilities, two publicly disclosed issues, and three zero-day exploits. Microsoft patches 172 flaws across its product suite, underscoring the growing complexity of enterprise security risks. Among the addressed […]
CrowdStrike Uncovers Oracle EBS attack campaign exploiting a newly identified zero-day vulnerability, now tracked as CVE-2025-61882. This vulnerability impacts Oracle E-Business Suite (EBS) applications, widely used by enterprises for resource planning and operations. According to CrowdStrike, the campaign involves mass exploitation attempts against exposed EBS systems, suggesting an organized and likely sophisticated effort. The cybersecurity […]
CrowdStrike has detected active exploitation of the Git vulnerability identified as CVE-2025-48384. The company reported that its security platform, CrowdStrike Falcon, blocks Git-based attacks by stopping threat actors who use deceptive social engineering techniques alongside compromised repositories. This campaign targets developers by luring them into cloning malicious Git projects, which then trigger the exploit. According […]
A newly uncovered cyber-espionage campaign tied to the Cavalry Werewolf hackers targets Russia’s public sector and critical industries, exploiting trusted government communications. Active from May through August 2025, the group—also known as YoroTrooper and Silent Lynx—used spear-phishing emails posing as Kyrgyz government agencies to deliver malware. These phishing messages distribute FoalShell and StallionRAT through RAR […]
TP-Link has issued firmware updates to fix four security vulnerabilities affecting its Omada gateway devices, including a critical pre-authentication operating system command injection flaw. The company acted swiftly as the TP-Link patches critical flaw aim to prevent attackers from executing arbitrary commands on impacted devices without user authentication. The vulnerabilities affect a wide range of […]
More than 70,000 WatchGuard Firebox devices remain exposed online, according to security researchers who warn of a critical remote code execution (RCE) vulnerability. The flaw could allow attackers to seize full control of affected WatchGuard firewalls, exposing devices to unauthorized access and potential network compromise. The discovery highlights the ongoing risk for organizations that have […]
Cybersecurity researchers have identified a phishing-as-a-service toolkit known as the Tykit phishing kit targeting Microsoft 365 credentials. The kit uses a distinct approach by embedding a scalable vector graphics (SVG) image to redirect victims to spoofed login pages, increasing the likelihood of deception. Investigators believe this technique helps attackers bypass standard email security filters, allowing […]
The developers behind Vidar Stealer, a prominent malware-as-a-service platform, have launched a major update that significantly enhances its capabilities. The Vidar Stealer 2.0 upgrades introduce multi-threaded data theft, allowing the malware to exfiltrate information more efficiently from infected systems. Security analysts say this version marks a notable leap in both performance and stealth. In addition […]
WSO2 has issued critical security advisories to address two severe access control vulnerabilities—CVE-2025-9804 and CVE-2025-10611—impacting its API Manager and Identity Server products. The company moved quickly after identifying the flaws, which could allow unauthorized access to sensitive enterprise systems. These WSO2 patches for critical flaws aim to prevent potential exploitation in production environments. The vulnerabilities […]
China-based cybersecurity firm Qianxin Threat Intelligence Center has identified a new cyber campaign targeting Chinese and Pakistani entities. The attackers, linked to the Bitter APT Hits China group (APT-Q-37), used a zero-day vulnerability in WinRAR along with malicious Microsoft Office macros to deploy a custom C# backdoor. The tools allowed the threat actor to gain […]
ABB has confirmed a critical security flaw in its ALS-mini-S4 and S8 IP intelligent load controllers, exposing energy infrastructure to serious risk. Tracked as CVE-2025-9574 and rated 9.9 on the CVSS scale, the vulnerability stems from missing authentication, allowing remote attackers to gain admin-level access without credentials. The ABB flaw lets hackers fully control these […]