Collaborate Disseminate
TL;DR: A critical deserialization vulnerability (CVSS 9.8 – CVE-2025-27520) in BentoML (v1.3.8–1.4.2) lets attackers execute remote code without… Continue reading BentoML Vulnerability Allows Remote Code Execution on AI Servers
ReversingLabs reveals a malicious npm package targeting Atomic and Exodus wallets, silently hijacking crypto transfers via software patching. Continue reading npm Malware Targets Atomic and Exodus Wallets to Hijack Crypto Transfers
New Xanthorox AI hacking platform spotted on dark web with modular tools, offline mode, and advanced voice, image, and code-based cyberattack features. Continue reading Xanthorox AI Surfaces on Dark Web as Full Spectrum Hacking Assistant
NSA and global cybersecurity agencies warn fast flux DNS tactic is a growing national security threat used in phishing, botnets, and ransomware. Continue reading NSA and Global Allies Declare Fast Flux a National Security Threat
Cybersecurity researchers at Jscamblers have uncovered a sophisticated web-skimming campaign targeting online retailers. The campaign utilizes a legacy… Continue reading Hackers Exploit Stripe API for Web Skimming Card Theft on Online Stores
Cybersecurity researcher Jeremiah Fowler uncovers a massive 47.8GB database with disturbing AI-generated content belonging to GenNomis. Continue reading AI Image Site GenNomis Exposed 47GB of Underage Deepfakes
China-linked APT group FamousSparrow hits targets in the Americas using upgraded SparrowDoor malware in new cyberespionage campaign, ESET reports. Continue reading China’s FamousSparrow APT Hits Americas with SparrowDoor Malware
A critical vulnerability (CVE-2025-1268) in Canon printer drivers allows remote code execution. See which drivers are affected, how to patch them. Continue reading Canon Printer Drivers Flaw Could Let Hackers Run Malicious Code
A recent analysis published by Infoblox reveals a sophisticated phishing operation, dubbed Morphing Meerkat, actively exploiting DNS vulnerabilities… Continue reading New Morphing Meerkat Phishing Kit Exploits DNS to Spoof 100+ Brands
The phishing campaign is highly sophisticated! Continue reading Russian Phishing Uses Fake CIA Sites to Target Anti-war, Ukraine Supporters