Collaborate Disseminate
Cisco Talos uncovers CyberLock ransomware, Lucky_Gh0$t, and Numero malware masquerading as legitimate software and AI tool installers. Learn… Continue reading Fake ChatGPT and InVideo AI Downloads Deliver Ransomware
Mandiant Threat Defense uncovers a campaign where Vietnam-based group UNC6032 tricks users with malicious social media ads for… Continue reading Fake AI Video Tool Ads on Facebook, LinkedIn Spread Infostealers
ReversingLabs discovers new malware hidden inside AI/ML models on PyPI, targeting Alibaba AI Labs users. Learn how attackers… Continue reading Malware Hidden in AI Models on PyPI Targets Alibaba AI Labs Users
Cisco Talos warns of active exploitation of a zero-day vulnerability (CVE-2025-0994) in Cityworks supposedly by Chinese hackers from… Continue reading Chinese Hackers Exploit Cityworks 0-Day to Hit US Local Governments
Researchers have released PoC for CVE-2025-32756, a severe security flaw, that is actively being exploited in Fortinet products… Continue reading Researchers Drop PoC for Fortinet CVE-2025-32756, Urging Quick Patching
A critical XSS vulnerability, CVE-2024-27443, in Zimbra Collaboration Suite’s CalendarInvite feature is actively being exploited, potentially by the… Continue reading Zimbra CVE-2024-27443 XSS Flaw Hits 129K Servers, Sednit Suspected
SK Telecom reveals malware intrusion that remained hidden for nearly two years, led to the leaking of 26.69… Continue reading SK Telecom Uncovers Two-Year Malware Attack, Leaking 26M IMSI Records
Akamai researchers reveal a critical flaw in Windows Server 2025 dMSA feature that allows attackers to compromise any… Continue reading BadSuccessor Exploits Windows Server 2025 Flaw for Full AD Takeover
Cofense Intelligence’s May 2025 report exposes how cybercriminals are abusing legitimate Remote Access Tools (RATs) like ConnectWise and Splashtop to deliver malware and steal data. Learn about this growing threat. Continue reading ConnectWise ScreenConnect Tops List of Abused RATs in 2025 Attacks
Operation Endgame takes down DanaBot malware network; 300 servers neutralized, €21.2M in crypto seized, 16 charged, 20 international warrants. Continue reading Operation Endgame Takes Down DanaBot Malware, Neutralizes 300 Servers