Collaborate Disseminate
Cybersecurity researchers at Blackpoint Cyber discovered a new, evasive CastleLoader malware variant using Python and ClickFix social engineering to deliver RATs and info-stealers directly from memory. Continue reading CastleLoader Malware Now Uses Python Loader to Bypass Security
Bitdefender researchers warn that the torrent for Leonardo DiCaprio’s One Battle After Another is a trap deploying Agent Tesla malware. Learn how the fileless LOTL attack targets unsuspecting Windows users. Continue reading Torrent for DiCaprio’s “One Battle After Another” Movie Drops Agent Tesla
Sysdig discovered North Korea-linked EtherRAT, a stealthy new backdoor using Ethereum smart contracts for C2 after exploiting the critical React2Shell vulnerability (CVE-2025-55182). Continue reading North Korean Hackers Deploy EtherRAT Malware in React2Shell Exploits
Cybersecurity researchers have uncovered a critical ChatGPT Atlas browser attack, confirming the danger of the ongoing surge in the ClickFix threat. Continue reading Fake ChatGPT Atlas Browser Used in ClickFix Attack to Steal Passwords
Koi Security exposes ShadyPanda, a group that used trusted Chrome/Edge extensions to infect 4.3 million users over 7 years for deep surveillance and corporate espionage. Continue reading 7 Year Long ShadyPanda Attack Spied on 4.3M Chrome and Edge Users
North Korean hackers escalated the “Contagious Interview” attack, flooding the npm registry with over 200 malicious packages to install OtterCookie malware. This attack targets blockchain and Web3 developers through fake job interviews and coding tests. Continue reading NK Hackers Push 200 Malicious npm Packages with OtterCookie Malware
CloudSEK found over 2,000 fake sites impersonating Amazon and top brands before Cyber Monday and Black Friday. Learn the key fraud signs now to stay safe. Continue reading Over 2,000 Fake Shopping Sites Spotted Before Cyber Monday
Cybersecurity firm Cato Networks reveals HashJack, a new AI browser vulnerability using the ‘#’ symbol to hide malicious commands. Microsoft and Perplexity fixed the flaw, but Google’s Gemini remains at risk. Continue reading HashJack Attack Uses URL ‘#’ to Control AI Browser Behavior
New research from Ontinue exposes a major security flaw in Microsoft Teams B2B Guest Access. Learn how attackers bypass all Defender for Office 365 protections with a single invite. Continue reading Microsoft Teams Flaw in Guest Chat Exposes Users to Malware Attacks
Samourai Wallet founders Keonne Rodriguez and William Hill were sentenced to 4 and 5 years for laundering $237M via their crypto mixer. Continue reading Samourai Wallet Founders Jailed in $237M Crypto Laundering Case