Collaborate Disseminate
CISA updates its KEV List with TP-Link Wi-Fi extender and WhatsApp spyware flaws, urging users and agencies to… Continue reading CISA Adds TP-Link Wi-Fi and WhatsApp Spyware Flaws to KEV List
Cybersecurity researcher Jeremiah Fowler discovered an unsecured and misconfigured server exposing 378 GB of internal Navy Federal Credit… Continue reading Misconfigured Server Leaks 378GB of Navy Federal Credit Union Files
A new and clever ClickFix scam is using a fake AnyDesk installer and Windows search to bypass security,… Continue reading Fake AnyDesk Installer Spreads MetaStealer Through ClickFix Scam
Hackers exploited the Salesloft Drift app to steal OAuth tokens and access Salesforce data, exposing customer details at… Continue reading Palo Alto Networks, Zscaler and PagerDuty Hit in Salesforce Linked Data Breaches
Hidden commands in images can exploit AI chatbots, leading to data theft on platforms like Gemini through a… Continue reading Hidden Commands in Images Exploit AI Chatbots and Steal Data
A new report reveals North Korea-linked ScarCruft is using RokRAT malware to target academics in a phishing campaign.… Continue reading North Korea’s ScarCruft Targets Academics With RokRAT Malware
Authorities in the United States and the Netherlands have seized VerifTools, a marketplace selling fake IDs for cybercrime.… Continue reading Feds Seize VerifTools.Net, Operators Relaunch with VerifTools.com
WhatsApp has patched a critical 0-day (CVE-2025-55177) that allowed zero-click spyware attacks on iOS and Mac users. The… Continue reading WhatsApp 0-Day Exploited in Attacks on Targeted iOS and macOS Users
WatchTowr Labs uncovers a zero-day exploit (CVE-2025-54309) in CrushFTP. The vulnerability lets hackers gain admin access via the… Continue reading Hackers Exploit CrushFTP Zero-Day to Take Over Servers
JFrog researchers found eight malicious NPM packages using 70 layers of obfuscation to steal data from Chrome browser… Continue reading 8 Malicious NPM Packages Stole Chrome User Data on Windows