Collaborate Disseminate
Cofense researchers warn of a phishing scam where attackers use LiveChat to impersonate Amazon and PayPal agents and steal credit card and MFA codes. Continue reading New Phishing Scam Uses LiveChat to Pose as Amazon and PayPal in Real Time
New XWorm 7.1 and Remcos RAT campaigns abuse trusted Windows tools to evade detection. The attacks exploit a WinRAR flaw and use process hollowing to spy on victims. Continue reading New XWorm 7.1 and Remcos RAT Attacks Abuse Windows Tools to Evade Detection
ShinyHunters claims it stole up to 1 petabyte of data from Telus Digital, including support recordings, code, and employee records after a breach. Continue reading ShinyHunters Claims 1 Petabyte Data Theft from Telecom Giant Telus
Qualys uncovers ‘CrackArmor’ vulnerabilities in AppArmor that could expose 12.6M Linux systems to root access and container escapes. Continue reading ‘CrackArmor’ Vulnerability in AppArmor Impacts 12.6M Linux Systems
US agencies race to meet a CISA deadline after a critical Cisco SD-WAN Flaw exposed federal networks to long-term intrusion and forced security action. Continue reading US Agencies Face CISA Deadline Over Critical Cisco SD-WAN Flaw
Scammers are hijacking popular security tools like Cloudflare to hide fake Microsoft 365 login pages. Learn how this new invisible phishing campaign bypasses antivirus software and how you can stay safe. Continue reading Hackers Use Cloudflare Human Check to Hide Microsoft 365 Phishing Pages
Researchers have discovered PixRevolution, a new Android banking trojan targeting Brazil’s PIX system. Unlike automated scams, this malware uses live operators to watch your screen and divert funds instantly. Continue reading New PixRevolution Malware Steals Brazil’s PIX Transfers in Real Time
BeatBanker Android Trojan spreads via fake Google Play Store pages, using a silent audio loop to stay active while stealing crypto, banking data, and login credentials. Continue reading BeatBanker Android Trojan Uses Silent Audio Loop to Steal Crypto
Aryaka researchers have identified a new threat from a Russian-speaking group using ‘BlackSanta’ malware. By disguising attacks as job applications, hackers are bypassing security to target recruitment workflows. Continue reading BlackSanta Malware Targets HR Staff with Fake CV Downloads
ShinyHunters claims to have stolen data from 400 firms via Salesforce portals and is threatening to leak the information unless ransom demands are paid. Continue reading ShinyHunters Hackers Threaten 400 Firms Over Stolen Salesforce Data