A newly identified phishing campaign by the PoisonSeed group enables attackers to bypass Fast IDentity Online (FIDO) key protections by manipulating cross-device sign-in features. The PoisonSeed hack bypasses FIDO by tricking users into scanning malicious QR codes with their mobile multifactor authentication (MFA) applications, allowing adversaries to intercept login credentials and complete authentication flows without […]
Alaska Airlines grounds flights across its network after an unspecified IT issue disrupted operations early Monday. The airline cited a technical failure that forced it to halt all departures temporarily, stranding passengers and delaying schedules at multiple airports. Officials have yet to confirm the source of the disruption or offer a timeline for resolution. Industry […]
A newly discovered 7 Zip flaw lets malicious RAR5 archive files crash systems by exploiting a memory corruption vulnerability in the file archiver’s RAR5 decoder. Tracked as CVE-2025-53816, the bug affects all 7-Zip versions before 25.00 and allows attackers to trigger denial-of-service conditions without executing arbitrary code. Security researchers found the flaw in the CDecoder […]
Hewlett-Packard Enterprise has issued a security update to patch a critical vulnerability in its Instant On Access Points. The HPE flaw exposes admin access by allowing attackers to bypass authentication using hard-coded credentials embedded in the system. Tracked as CVE-2025-37103, the flaw carries a near-maximum CVSS severity rating of 9.8, signaling a significant risk to […]
A new wave of browser-based cryptojacking has emerged, with attackers compromising 3,500 websites hijacked to secretly mine cryptocurrency. Researchers from c/side uncovered the campaign, which uses stealthy JavaScript code and WebSocket connections to siphon computing power from unsuspecting visitors. The findings highlight a resurgence of tactics once used by now-defunct services like CoinHive, which faded […]
The financially motivated threat group EncryptHub, also known as LARVA-208 or Water Gamayun, has launched a new campaign aimed at Web3 developers. In this latest operation, EncryptHub lures Web3 devs by posing as representatives of fake artificial intelligence platforms such as Norlax AI, a clone of the legitimate Teampilot service. The attackers contact potential victims […]
A new wave of cyberattacks using SquidLoader malware targets Hong Kong financial firms, according to cybersecurity researchers. The campaign appears to focus on compromising sensitive systems within the financial sector, raising concerns about growing threats to regional economic infrastructure. Analysts observed that the malware uses sophisticated delivery methods to evade detection and gain access to […]
The U.S. Cybersecurity and Infrastructure Security Agency added a critical Fortinet FortiWeb vulnerability to its Known Exploited Vulnerabilities catalog, warning of widespread exploitation. CISA Flags Fortinet Flaw CVE-2025-25257, a SQL injection bug rated 9.6 out of 10 on the CVSS scale, which allows unauthenticated attackers to execute malicious SQL commands via crafted HTTP or HTTPS […]
Google filed a lawsuit against 25 unnamed individuals it accuses of operating the BadBox 2.0 botnet, a malicious network that allegedly harmed the company’s reputation and financial interests. The tech giant claims the defendants used the botnet to distribute malware through compromised Android devices, misleading users and advertisers. The case, filed in the U.S., underscores […]
A critical vulnerability in Citrix NetScaler, identified as CVE-2025-5777 and known as CitrixBleed 2, was exploited nearly two weeks before public proof-of-concept (PoC) exploits emerged. During that period, Citrix denied attacks were taking place, stating there was no evidence of active exploitation. Security researchers later confirmed that threat actors had already launched attacks targeting this […]
A new phishing campaign is exploiting QR codes to sidestep FIDO security keys, raising concerns about cross-device authentication methods. The method, identified as a man-in-the-middle attack, uses a deceptive login page to intercept sign-in attempts. This approach, where QR Code Phishing Bypasses traditional authentication layers, targets users who rely on QR-based login flows between devices. […]
Cybercriminals are actively exploiting a newly discovered vulnerability in the TeleMessage SGNL platform, raising concerns across the enterprise communications landscape. The TeleMessage SGNL flaw hit naturally during a surge in targeted cyberattacks, with threat actors leveraging it to bypass security protocols and gain unauthorized access to sensitive messaging data. The flaw resides in the platform’s […]