Collaborate Disseminate
Sysdig discovered North Korea-linked EtherRAT, a stealthy new backdoor using Ethereum smart contracts for C2 after exploiting the critical React2Shell vulnerability (CVE-2025-55182). Continue reading North Korean Hackers Deploy EtherRAT Malware in React2Shell Exploits
Cybersecurity researchers have uncovered a critical ChatGPT Atlas browser attack, confirming the danger of the ongoing surge in the ClickFix threat. Continue reading Fake ChatGPT Atlas Browser Used in ClickFix Attack to Steal Passwords
Koi Security exposes ShadyPanda, a group that used trusted Chrome/Edge extensions to infect 4.3 million users over 7 years for deep surveillance and corporate espionage. Continue reading 7 Year Long ShadyPanda Attack Spied on 4.3M Chrome and Edge Users
North Korean hackers escalated the “Contagious Interview” attack, flooding the npm registry with over 200 malicious packages to install OtterCookie malware. This attack targets blockchain and Web3 developers through fake job interviews and coding tests. Continue reading NK Hackers Push 200 Malicious npm Packages with OtterCookie Malware
CloudSEK found over 2,000 fake sites impersonating Amazon and top brands before Cyber Monday and Black Friday. Learn the key fraud signs now to stay safe. Continue reading Over 2,000 Fake Shopping Sites Spotted Before Cyber Monday
Cybersecurity firm Cato Networks reveals HashJack, a new AI browser vulnerability using the ‘#’ symbol to hide malicious commands. Microsoft and Perplexity fixed the flaw, but Google’s Gemini remains at risk. Continue reading HashJack Attack Uses URL ‘#’ to Control AI Browser Behavior
New research from Ontinue exposes a major security flaw in Microsoft Teams B2B Guest Access. Learn how attackers bypass all Defender for Office 365 protections with a single invite. Continue reading Microsoft Teams Flaw in Guest Chat Exposes Users to Malware Attacks
Samourai Wallet founders Keonne Rodriguez and William Hill were sentenced to 4 and 5 years for laundering $237M via their crypto mixer. Continue reading Samourai Wallet Founders Jailed in $237M Crypto Laundering Case
Bitdefender Labs found fake Battlefield 6 pirated copies and trainers spreading aggressive malware, C2 agents, and infostealers, designed to steal player data and crypto-wallets. Continue reading Fake Battlefield 6 Downloads Are Spreading Malware, Stealing Player Data
AI security firm AISLE revealed CVE-2025-13016, a critical Firefox Wasm bug that risked 180M users for six months. Learn how the memory flaw allowed code execution. Continue reading Update Firefox to Patch CVE-2025-13016 Vulnerability Affecting 180 Million Users