Collaborate Disseminate
New GoGra Linux malware linked to Harvester APT targets systems in South Asia, using fake PDFs and Microsoft APIs for covert command and control. Continue reading Harvester APT Expands Spying Operations with New GoGra Linux Malware
Cybersecurity researchers at Forcepoint uncover new indirect prompt injection attacks that use hidden website code to exploit AI assistants like GitHub Copilot. Continue reading Hackers Use Hidden Website Instructions in New Attacks on AI Assistants
Acronis reveals Mustang Panda is using an updated version of LOTUSLITE backdoor to target Indian banks and Korean diplomats. Learn how this DLL sideloading attack works. Continue reading Mustang Panda Hits India and S. Korea with Updated LOTUSLITE Backdoor
Bluesky is back online after a roughly 24-hour DDoS attack disrupted services, with the Iran-linked 313 Team claiming responsibility and no data breach reported. Continue reading Bluesky Back Online After DDoS Attack, as Iran-Linked 313 Team Takes Credit
Microsoft vulnerabilities fall, but critical flaws double, BeyondTrust report highlights rising risk in Microsoft Office, Azure, and cloud systems. Continue reading Microsoft Vulnerabilities Drop, But Critical Flaws Double, Report Warns
Grinex exchange collapses after $13.7M breach, blames Western spies as Chainalysis flags possible exit scam and sanctions evasion network links claims. Continue reading Grinex crypto exchange shuts down, blames Western agencies for $13.7M breach
Critical RCE flaw in protobuf.js lets attackers execute code via malicious schemas. Learn who is at risk, affected versions, and how to fix it. Continue reading 52M-Download protobuf.js Library Hit by RCE in Schema Handling
Hackers are exploiting a 5-year-old ShowDoc vulnerability (CVE-2025-0520) to deploy web shells, enabling RCE and full server takeover worldwide. Continue reading ShowDoc Vulnerability Patched in 2020 Now Used in Active Server Takeovers
Operation PowerOFF identifies and warns 75K users of DDoS-for-hire services, nets 4 arrests, and seizes 53 domains in a Europol-led crackdown. Continue reading Operation PowerOFF: 75K Users of DDoS-for-Hire Services Identified and Warned
New research from Zimperium reveals four active Android malware campaigns, RecruitRat, SaferRat, Astrinox, and Massiv, targeting over 800 banking apps globally. Continue reading New RecruitRat, SaferRat, Astrinox, Massiv Android Malware Found Targeting 800 Apps