Collaborate Disseminate
Bitdefender Labs found fake Battlefield 6 pirated copies and trainers spreading aggressive malware, C2 agents, and infostealers, designed to steal player data and crypto-wallets. Continue reading Fake Battlefield 6 Downloads Are Spreading Malware, Stealing Player Data
AI security firm AISLE revealed CVE-2025-13016, a critical Firefox Wasm bug that risked 180M users for six months. Learn how the memory flaw allowed code execution. Continue reading Update Firefox to Patch CVE-2025-13016 Vulnerability Affecting 180 Million Users
The Shai Hulud worm’s “Second Coming” has compromised over 26,000 public repositories. We detail the attacker’s mistake, the target packages, and mandatory security tips. Continue reading Shai Hulud npm Worm Impacts 26,000+ Repos in Supply Chain Attack
Cybersecurity firm Checkmarx Zero, in collaboration with Microsoft, removed a malicious ‘prettier-vscode-plus’ extension from the VSCode Marketplace. The fake coding tool was a Brandjacking attempt designed to deploy Anivia Stealer malware and steal Wi… Continue reading Fake Prettier Extension on VSCode Marketplace Dropped Anivia Stealer
Certo Software found RadzaRat, an Android RAT disguised as a file manager that has a 0/66 detection rate on VirusTotal. It keylogs passwords and steals files. Continue reading New RadzaRat Spyware Poses as File Manager to Hijack Android Devices
A critical security flaw (CVE-2025-11001) in 7-Zip has a public exploit. Learn why this high-risk vulnerability is dangerous and how to manually update to version 25.01 now. Continue reading Critical 7 Zip Vulnerability With Public Exploit Requires Manual Update
CrowdStrike fired an insider for selling internal screenshots to Scattered Lapsus$ Hunters for $25,000. Read how the security team detected the activity and protected customers. Continue reading CrowdStrike Fires Worker Over Insider Leak to Scattered Lapsus Hunters
Sturnus, an advanced Android banking trojan, has been discovered by ThreatFabric. Learn how this malware bypasses end-to-end encryption on Signal and WhatsApp, steals bank credentials using fake screens, and executes fraudulent transactions. Continue reading New Sturnus Android Malware Reads WhatsApp, Telegram, Signal Chats via Accessibility Abuse
ShinyHunters breached Gainsight apps integrated with Salesforce, claiming access to data from 1000 firms using stolen credentials and compromised tokens. Continue reading ShinyHunters Breach Gainsight Apps on Salesforce, Claim Data from 1000 Firms
Trustwave SpiderLabs warns of Eternidade Stealer, a new banking trojan spreading via personalised WhatsApp messages. Find out how this malicious software bypasses security checks and deploys fake login screens for major banks and wallets. Continue reading New Eternidade Stealer Uses WhatsApp to Steal Banking Data