Collaborate Disseminate
Hackers are exploiting a 5-year-old ShowDoc vulnerability (CVE-2025-0520) to deploy web shells, enabling RCE and full server takeover worldwide. Continue reading ShowDoc Vulnerability Patched in 2020 Now Used in Active Server Takeovers
Operation PowerOFF identifies and warns 75K users of DDoS-for-hire services, nets 4 arrests, and seizes 53 domains in a Europol-led crackdown. Continue reading Operation PowerOFF: 75K Users of DDoS-for-Hire Services Identified and Warned
New research from Zimperium reveals four active Android malware campaigns, RecruitRat, SaferRat, Astrinox, and Massiv, targeting over 800 banking apps globally. Continue reading New RecruitRat, SaferRat, Astrinox, Massiv Android Malware Found Targeting 800 Apps
Cybersecurity researchers at Fortinet have discovered Nexcorium, a new Mirai-based malware targeting TBK DVR systems to turn them into a botnet for DDoS attacks. Continue reading New Mirai Variant Nexcorium Hijacks DVR Devices for DDoS Attacks
Researchers at Darktrace have identified ZionSiphon, a new malware targeting Israeli water treatment plants. Learn how this OT-focused… Continue reading New ZionSiphon Malware Discovered Targeting Israeli Water Systems
Hackers spread CGrabber and Direct-Sys malware through GitHub ZIP files, bypassing security tools to steal passwords, crypto wallets, and user data. Continue reading New CGrabber and Direct-Sys Malware Spread Through GitHub ZIP Files
OpenAI unveils GPT-5.4-Cyber, a cybersecurity-focused model built to help defenders analyze malware and fix software bugs. The company is also expanding its Trusted Access for Cyber (TAC) program to thousands of verified experts. Continue reading OpenAI Launches GPT-5.4-Cyber to Boost Defensive Cybersecurity
Private Fiverr user documents, including tax records and IDs, were reportedly found in Google search results due to a storage configuration issue. Read more about the findings and the company’s response to the data exposure. Continue reading Researchers Say Fiverr Left User Files Open to Google Search
Fake Claude AI installer mimicking Anthropic spreads PlugX malware on Windows, using DLL sideloading to gain persistent remote access to infected systems. Continue reading Fake Claude AI Installer Targets Windows Users with PlugX Malware
A new Qrator Labs report reveals that the largest DDoS botnet has grown to 13.5 million devices, and… Continue reading 13.5M Device Botnet Drives 2 Tbps DDoS Attacks on FinTech, Qrator Finds