Collaborate Disseminate
Team Cymru details the Yurei ransomware campaign, using standard tools and a few Stranger Things–named payloads to breach and encrypt systems. Continue reading Yurei Ransomware Uses Common Tools, Adds Stranger Things References
New research from Varonis Threat Labs reveals Storm infostealer, a malicious subscription service that bypasses Google Chrome encryption.… Continue reading Storm Infostealer Sold as Service, Targets Browsers, Wallets and Accounts
A LinkedIn phishing scam uses fake notifications and lookalike domains to steal credentials, hijack accounts, and access sensitive professional data. Continue reading LinkedIn Phishing Scam Uses Fake Notifications to Hijack Accounts
Human error exposed 512,000+ lines of Anthropic Claude AI Code, revealing KAIROS and Capybara secrets, pushing users to switch to the Native Installer. Continue reading Anthropic Leaks 512,000 Lines of Claude AI Code in Major Blunder
New research from Seqrite explains the ‘dual-use dilemma,’ where ransomware attackers repurpose legitimate IT tools like IOBit Unlocker… Continue reading Ransomware Groups Exploit Legit IT Tools to Bypass Antivirus
New research from Octagon Networks reveals a critical zero-day ImageMagick vulnerability that allows Remote Code Execution (RCE) via simple image uploads affecting Ubuntu, Amazon Linux, and WordPress. This magic byte shift bypasses even the most secure… Continue reading ImageMagick Zero-Day Enables RCE on Linux and WordPress Servers
Axios npm Package compromised in a supply chain attack, exposing developers to malware, data theft, and full system takeover risks worldwide. Continue reading Hackers Poison Axios npm Package with 100 Million Weekly Downloads
F5 BIG-IP APM flaw CVE-2025-53521 escalates to critical 9.8 RCE, actively exploited. Patch now, check IoCs, and secure vulnerable systems immediately. Continue reading Critical F5 BIG-IP Flaw Upgraded to 9.8 RCE, Exploited in the Wild
OpenAI Codex vulnerability allowed attackers to steal GitHub tokens via malicious branch names using hidden Unicode command injection flaw. Continue reading OpenAI Codex Vulnerability Allowed Attackers to Steal GitHub Tokens
15-year-old strongSwan flaw allows attackers to crash VPNs via integer underflow bug, affecting EAP-TTLS plugin and multiple versions worldwide. Continue reading 15-Year-Old strongSwan Flaw Lets Attackers Crash VPNs via Integer Underflow