Collaborate Disseminate
Cybercriminals exploit a WSUS vulnerability to deploy Skuld Stealer malware, even after Microsoft released an urgent security patch. Continue reading Hackers Exploit WSUS Flaw to Spread Skuld Stealer Despite Microsoft Patch
Are you using a fake version of a popular app? Appknox warns US users about malicious brand clones hiding on third-party app stores. Protect yourself from hidden spyware and ‘commercial parasites.’ Continue reading Spyware-Plugged ChatGPT, DALL·E and WhatsApp Apps Target US Users
Ribbon Communications discloses a year-long breach by nation-state actors. The attack highlights critical supply chain risk, reflecting the Salt Typhoon and F5 espionage trends. Continue reading Year-Long Nation-State Hack Hits US Telecom Ribbon Communications
Hackers exploit critical XWiki flaw CVE-2025-24893 to hijack corporate servers for cryptomining, with active attacks confirmed by VulnCheck researchers. Continue reading Hackers Hijack Corporate XWiki Servers for Crypto Mining
A new Python-based infostealer called RedTiger is targeting Discord gamers to steal authentication tokens, passwords, and payment information. Learn how the malware works, its evasion tactics, and essential security steps like enabling MFA. Continue reading RedTiger Malware Steals Data, Discord Tokens and Even Webcam Images
Unsecured House Democrats’ resume bank (DomeWatch) exposed 7,000 records, including PII and “top secret” clearance status, raising identity theft fears. Continue reading DomeWatch Leak Exposed Personal Data of Capitol Hill Applicants
Operant AI reveals Shadow Escape, a zero-click attack using the MCP flaw in ChatGPT, Gemini, and Claude to secretly steal trillions of SSNs and financial data. Traditional security is blind to this new AI threat. Continue reading Shadow Escape 0-Click Attack in AI Assistants Puts Trillions of Records at Risk
Massive Synthient Stealer Log leak adds 183 million stolen usernames and passwords to Have I Been Pwned, exposing new victims worldwide. Continue reading 183 Million Synthient Stealer Credentials Added to Have I Been Pwned
SentinelLABS’ research reveals PhantomCaptcha, a highly coordinated, one-day cyber operation on Oct 8, 2025, targeting the International Red Cross, UNICEF, and Ukraine government groups using fake emails and a Remote Access Trojan (RAT) linked to Russi… Continue reading PhantomCaptcha RAT Attack Targets Aid Groups Supporting Ukraine
South Asian hacking group Bitter (APT-Q-37) is deploying a C# backdoor using two new methods: a WinRAR flaw and malicious Office XLAM files, targeting government and military sectors. Continue reading Bitter APT Exploiting Old WinRAR Vulnerability in New Backdoor Attacks