Collaborate Disseminate
New CloudSEK findings show Androxgh0st botnet evolving. Academic institutions, including UC San Diego, hit. Discover how this sophisticated… Continue reading Androxgh0st Botnet Expands Reach, Exploiting US University Servers
Kali Linux 2025.1c includes a new signing key to fix update errors, adds new tools, a redesigned menu with MITRE ATT&CK, and major system upgrades. Continue reading Kali Linux 2025.1c Fixes Key Issue, Adds New Tools and Interface Updates
ShortLeash backdoor, used in the China-linked LapDogs campaign since 2023, enables stealth access, persistence, and data theft via compromised SOHO routers and fake certs. Continue reading China-linked LapDogs Campaign Drops ShortLeash Backdoor with Fake Certs
Zyxel users beware: A critical remote code execution flaw (CVE-2023-28771) in Zyxel devices is under active exploitation by a Mirai-like botnet. GreyNoise observed a surge on June 16, targeting devices globally. Continue reading Zyxel Devices Hit by Active Exploits Targeting CVE-2023-28771 Vulnerability
A new FS-ISAC and Akamai report warns that sophisticated DDoS attacks are severely impacting the global financial sector, leading to multi-day outages. Learn about these evolving threats and how institutions can strengthen defences. Continue reading Report Warns of Sophisticated DDoS Campaigns Crippling Global Banks
European police, led by Denmark and Sweden, are arresting individuals in a crackdown on violence-as-a-service, where criminal groups recruit teenagers online for contract killings. Learn about Europol’s OTF GRIMM task force and how they’re fighting thi… Continue reading Violence-as-a-Service: Encrypted Apps Used in Recruiting Teens as Hitmen
A new detection method from Varonis Threat Labs turns hackers’ sneaky random patterns into a way to catch hidden cyberattacks. Learn about Jitter-Trap and how it boosts cybersecurity defenses. Continue reading New Detection Method Uses Hackers’ Own Jitter Patterns Against Them
Citizen Lab and Google uncovered a new, sophisticated cyberattack linked to Russian state actors that exploits App-Specific Passwords, bypassing Multi-Factor Authentication. Discover how to protect yourself from these evolving threats. Continue reading Hackers Use Social Engineering to Target Expert on Russian Operations
Red Canary uncovers ‘Mocha Manakin,’ a new threat using paste and runs to deliver custom NodeInitRAT malware, potentially leading to ransomware. Learn to protect your systems. Continue reading New Mocha Manakin Malware Deploys NodeInitRAT via Clickfix Attack
Banana Squad hid data-stealing malware in fake GitHub repos posing as Python tools, tricking users and targeting sensitive info like browser and wallet data. Continue reading Banana Squad Hides Data-Stealing Malware in Fake GitHub Repositories