Collaborate Disseminate
Cybersecurity researchers have disclosed details of a new dual-vector campaign that leverages stolen credentials to deploy legitimate Remote Monitoring and Management (RMM) software for persistent remote access to compromised hosts.
“Instead of deployi… Continue reading Phishing Attack Uses Stolen Credentials to Install LogMeIn RMM for Persistent Access
Microsoft has warned of a multi‑stage adversary‑in‑the‑middle (AitM) phishing and business email compromise (BEC) campaign targeting multiple organizations in the energy sector.
“The campaign abused SharePoint file‑sharing services to deliver phishing … Continue reading Microsoft Flags Multi-Stage AitM Phishing and BEC Attacks Targeting Energy Firms
Cybersecurity researchers have disclosed details of a new ransomware family called Osiris that targeted a major food service franchisee operator in Southeast Asia in November 2025.
The attack leveraged a malicious driver called POORTRY as part of a kno… Continue reading New Osiris Ransomware Emerges as New Strain Using POORTRY Driver in BYOVD Attack
A critical security flaw has been disclosed in the GNU InetUtils telnet daemon (telnetd) that went unnoticed for nearly 11 years.
The vulnerability, tracked as CVE-2026-24061, is rated 9.8 out of 10.0 on the CVSS scoring system. It affects all versions… Continue reading Critical GNU InetUtils telnetd Flaw Lets Attackers Bypass Login and Gain Root Access
Most of this week’s threats didn’t rely on new tricks. They relied on familiar systems behaving exactly as designed, just in the wrong hands. Ordinary files, routine services, and trusted workflows were enough to open doors without forcing them.
What s… Continue reading ThreatsDay Bulletin: Pixel Zero-Click, Redis RCE, China C2s, RAT Ads, Crypto Scams & 15+ Stories
Security teams at agile, fast-growing companies often have the same mandate: secure the business without slowing it down. Most teams inherit a tech stack optimized for breakneck growth, not resilience. In these environments, the security team is the he… Continue reading Filling the Most Common Gaps in Google Workspace Security
A new malicious package discovered in the Python Package Index (PyPI) has been found to impersonate a popular library for symbolic mathematics to deploy malicious payloads, including a cryptocurrency miner, on Linux hosts.
The package, named sympy-dev,… Continue reading Malicious PyPI Package Impersonates SymPy, Deploys XMRig Miner on Linux Hosts
A new security flaw in SmarterTools SmarterMail email software has come under active exploitation in the wild, two days after the release of a patch.
The vulnerability, which currently does not have a CVE identifier, is tracked by watchTowr Labs as WT-… Continue reading SmarterMail Auth Bypass Exploited in the Wild Two Days After Patch Release
Cybersecurity company Arctic Wolf has warned of a “new cluster of automated malicious activity” that involves unauthorized firewall configuration changes on Fortinet FortiGate devices.
The activity, it said, commenced on January 15, 2026, adding it sha… Continue reading Automated FortiGate Attacks Exploit FortiCloud SSO to Alter Firewall Configurations
Cisco has released fresh patches to address what it described as a “critical” security vulnerability impacting multiple Unified Communications (CM) products and Webex Calling Dedicated Instance that it has been actively exploited as a zero-day in the w… Continue reading Cisco Fixes Actively Exploited Zero-Day CVE-2026-20045 in Unified CM and Webex