Collaborate Disseminate
Cybersecurity firm ESET uncovers PlushDaemon, a previously unknown APT group targeting South Korea, deploying a SlowStepper backdoor. This… Continue reading Chinese PlushDaemon APT Targets S. Korean IPany VPN with Backdoor
CloudSEK uncovers a Zendesk vulnerability allowing cybercriminals to exploit subdomains for phishing and investment scams. Learn about the… Continue reading Zendesk’s Subdomain Registration Exposed to Phishing, Pig Butchering Scams
Cloudflare mitigates a record-breaking 5.6 Tbps DDoS attack, highlighting the growing threat of hyper-volumetric assaults. Learn about the… Continue reading Cloudflare Mitigates Massive 5.6 Tbps Mirai-Variant DDoS Attack
Specops 2025 Breached Password Report reveals over 1 billion passwords stolen by malware in the past year, exposing… Continue reading Redline, Vidar and Raccoon Malware Stole 1 Billion Passwords in 2024
This article explores the recent campaign of Murdoc_Botnet, a malware variant of Mirai targeting vulnerable AVTECH and Huawei… Continue reading New Mirai Variant Murdoc_Botnet Launches DDoS Attacks via IoT Exploits
Millions of devices, including home routers, VPN servers, and CDNs are vulnerable to exploitation due to critical flaws… Continue reading Tunneling Flaws Put VPNs, CDNs and Routers at Risk Globally
FortiGate firewall leak exposes 15,000+ configurations, impacting organizations globally. The actor behind the leak is Belsen Group. Learn… Continue reading 15K Fortigate Firewall Configs Leaked By Belsen Group
Security researcher discovers a non-password-protected database containing over 240,000 records belonging to US-based FinTech bill payment platform Willow… Continue reading Fintech Bill Pay Platform “Willow Pays” Exposes Over 240,000 Records
Sneaky 2FA: New Phishing-as-a-Service targets Microsoft 365, leveraging sophisticated evasion techniques and a Telegram-based platform to steal credentials.… Continue reading Telegram-Based “Sneaky 2FA” Phishing Kit Targets Microsoft 365 Accounts
Silverfort has discovered that a misconfiguration can bypass an Active Directory Group Policy designed to disable NTLMv1, allowing… Continue reading Researchers Warn of NTLMv1 Bypass in Active Directory Policy