Collaborate Disseminate
Hackers are installing multiple RMMs like Atera and Splashtop in a new malware attack. This article details the abuse of Discord CDN link andn fake OneDrive phishing campaign discovered by Sublime Security. Continue reading Discord CDN Link Abused to Deliver RAT Disguised as OneDrive File
A new Proofpoint report reveals how attackers are using Microsoft 365’s Direct Send and unsecured SMTP relays to… Continue reading Hackers Abuse Microsoft 365 Direct Send to Deliver Internal Phishing Emails
JSCEAL malware targets millions using fake crypto app ads to steal wallets and data. Users urged to stay alert and avoid downloading from untrusted sources. Continue reading New JSCEAL Malware Targets Millions via Fake Crypto App Ads
A new security flaw, LegalPwn, exploits a weakness in generative AI tools like GitHub Copilot and ChatGPT, where malicious code is disguised as legal disclaimers. Learn why human oversight is now more critical than ever for AI security. Continue reading LegalPwn Attack Tricks GenAI Tools Into Misclassifying Malware as Safe Code
Security researchers at Bitdefender have found two critical vulnerabilities (CVE-2025-31700, CVE-2025-31701) in popular Dahua security cameras, including the Hero C1 model. Continue reading Bitdefender Warns Users to Update Dahua Cameras Over Critical Flaws
Security firm Point Wild has exposed a new malware campaign using malicious LNK files to install the REMCOS backdoor. This report details how attackers disguise files to gain full system control. Continue reading New Attack Uses Windows Shortcut Files to Install REMCOS Backdoor
The US DOJ has announced the largest-ever compensation process for human trafficking victims of Backpage. Learn about the $200M fund, who is eligible, and the steps to file a petition before the February 2, 2026, deadline. This comes years after the si… Continue reading US Government Begins $200M Payouts to Backpage Trafficking Victims
Beware of Epsilon Red ransomware as attackers impersonate Discord, Twitch and OnlyFans using fake verification pages with .HTA files and ActiveX to spread malware. Continue reading OnlyFans, Discord ClickFix-Themed Pages Spread Epsilon Red Ransomware
Man in the Prompt attack shows how browser extensions can exploit ChatGPT, Gemini and other AI tools to steal data or inject hidden prompts. Continue reading Browser Extensions Can Exploit ChatGPT, Gemini in ‘Man in the Prompt’ Attack
watchTowr’s latest research details critical SonicWall SMA100 flaws (CVE-2025-40596, 40597, 40598). Discover how pre-auth stack/heap overflows and XSS put SSL-VPNs at risk. Patch now! Continue reading SonicWall Urges Patch After 3 Major VPN Vulnerabilities Disclosed