Collaborate Disseminate
An Authentication Bypass (CVE-2025-5947) in Service Finder Bookings plugin allows any unauthenticated attacker to log in as an administrator. Over 13,800 exploit attempts detected. Update to v6.1 immediately. Continue reading Auth Bypass Flaw in Service Finder WordPress Plugin Under Active Exploit
Fortinet warns of Stealit, a MaaS infostealer, now targeting Windows systems and evading detection by using Node.js’s SEA feature while hiding in fake game and VPN installers. Continue reading Stealit Malware Using Node.js to Hide in Fake Game and VPN Installers
Zimperium’s zLabs warns of ClayRat, a fast-spreading Android spyware targeting Russia. It hides in fake apps like TikTok and steals texts, calls records, and camera photos. Continue reading Fake TikTok and WhatsApp Apps Infect Android Devices with ClayRat Spyware
70,000 Discord users had government ID photos and private data exposed via a third-party vendor breach. See Discord’s full response and critical security steps to protect your identity. Continue reading Discord Says Hackers Stole 70,000 ID Photos, Dismisses Extortion Claims
Forcepoint X-Labs reports a surge in sophisticated email attacks using obfuscated JavaScript and steganography to deliver dangerous RATs and info-stealers like Formbook and Agent Tesla. Learn how to defend against the threat. Continue reading Your Shipment Notification is Now a Malware Dropper
FortiGuard Labs reveals Chaos-C++, a new Chaos ransomware variant that deletes files over 1.3 GB instead of encrypting them and uses clipboard hijacking to steal cryptocurrency. Continue reading New Chaos-C++ Ransomware Targets Windows by Wiping Data, Stealing Crypto
Hackers are using fake Microsoft Teams installers found in search results and ads to deploy the Oyster backdoor. Learn how to protect your PC from this remote-access threat. Continue reading Fake Teams Installers Dropping Oyster Backdoor (aka Broomstick)
Met Police arrested two teenagers over the Kido nursery ransomware attack, which exposed data for 8,000 children. Full details on the hack and police investigation. Continue reading UK Police Arrest Two Teens Over Kido Nursery Ransomware Attack
Latest reports suggest the critical GoAnywhere MFT vulnerability (CVE-2025-10035, CVSS 10.0) is actively exploited by the Medusa ransomware gang for unauthenticated RCE. Patch immediately. Continue reading Medusa Ransomware Exploiting GoAnywhere MFT Flaw, Confirms Microsoft
Security researchers at UC Irvine reveal the ‘Mic-E-Mouse’ attack, showing how high-DPI optical sensors in modern mice can detect desk vibrations and reconstruct user speech with high accuracy. Learn how this side-channel vulnerability affects your pri… Continue reading New Mic-E-Mouse Attack Shows Computer Mice Can Capture Conversations