Collaborate Disseminate
Rival hackers expose the alleged operators behind Lumma Stealer, a major data-theft malware, causing leaks and internal chaos that have slowed its growth. Continue reading Rival Hackers Dox Alleged Operators of Lumma Stealer
New research on SocGholish (FakeUpdates) reveals how this MaaS platform is used by threat actors like Evil Corp and RansomHub to compromise websites, steal data, and launch high-impact attacks on healthcare and businesses worldwide. Continue reading SocGholish Malware Using Compromised Sites to Deliver Ransomware
The China-linked Salt Typhoon APT group attacked a European telecom via a Citrix NetScaler vulnerability in July 2025, Darktrace reports. This follows past US Army and telecom breaches. Continue reading Salt Typhoon APT Targets Global Telecom and Energy Sectors, Says Darktrace
Envoy Air (American Airlines) confirms a breach by CL0P after they exploited the critical CVE-2025-61882 zero-day flaw in Oracle E-Business Suite. Continue reading Envoy Air (American Airlines) Confirms Oracle EBS 0-Day Breach Linked to Cl0p
Sublime Security warns of a massive credential phishing scam using fake job offers from brands like KFC and Red Bull to steal Facebook login details. Don’t fall for the trap. Continue reading New Phishing Emails Pretend to Offer Jobs to Steal Facebook Logins
North Korea’s Famous Chollima is back, merging BeaverTail and OtterCookie malware to target job seekers. Cisco Talos details the new threat. Keylogging, screen recording, and cryptocurrency wallet theft detected in an attack. Continue reading NK’s Famous Chollima Use BeaverTail and OtterCookie Malware in Job Scam
The Cofense Phishing Defense Centre warns of a new tech support scam using Microsoft’s brand to lock browsers and steal data. Learn how the attack uses fake ‘payment lures’ and urgent security alerts to trick victims into calling a fraudulent support n… Continue reading New Tech Support Scam Uses Microsoft Logo to Fake Browser Lock, Steal Data
October’s Microsoft Patch Tuesday fixes 170+ flaws, including 3 actively exploited zero-days and critical WSUS RCE (CVSS 9.8). Immediate patching is mandatory. Final free updates for Windows 10. Continue reading Microsoft Patch Tuesday Oct 2025 Fixs 175 Vulnerabilities including 3 Zero-Days
Cybersecurity firm Sublime Security details a new credential phishing scam impersonating Google Careers to steal login details from Google Workspace and Microsoft 365 users.
Continue reading Fake Google Job Offer Email Scam Targets Workspace and Microsoft 365 Users
Microsoft restricted access to Edge’s IE Mode in August 2025 after hackers used a Chakra zero-day flaw to bypass security and take over user devices. Check out the new steps for enabling IE Mode. Continue reading Microsoft Limits IE Mode in Edge After Chakra Zero-Day Activity Detected