Collaborate Disseminate
IBM has disclosed details of a critical security flaw in API Connect that could allow attackers to gain remote access to the application.
The vulnerability, tracked as CVE-2025-13915, is rated 9.8 out of a maximum of 10.0 on the CVSS scoring system. It… Continue reading IBM Warns of Critical API Connect Bug Allowing Remote Authentication Bypass
Cybersecurity researchers have disclosed details of what appears to be a new strain of Shai Hulud on the npm registry with slight modifications from the previous wave observed last month.
The npm package that embeds the novel Shai Hulud strain is “@vie… Continue reading Researchers Spot Modified Shai-Hulud Worm Testing Payload on npm Registry
The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) on Tuesday removed three individuals linked to the Intellexa Consortium, the holding company behind a commercial spyware known as Predator, from the specially designated nati… Continue reading U.S. Treasury Lifts Sanctions on Three Individuals Linked to Intellexa and Predator Spyware
The Cyber Security Agency of Singapore (CSA) has issued a bulletin warning of a maximum-severity security flaw in SmarterTools SmarterMail email software that could be exploited to achieve remote code execution.
The vulnerability, tracked as CVE-2025-5… Continue reading CSA Issues Alert on Critical SmarterMail Bug Allowing Remote Code Execution
The threat actor known as Silver Fox has turned its focus to India, using income tax-themed lures in phishing campaigns to distribute a modular remote access trojan called ValleyRAT (aka Winos 4.0).
“This sophisticated attack leverages a complex kill c… Continue reading Silver Fox Targets Indian Users With Tax-Themed Emails Delivering ValleyRAT Malware
Artificial intelligence (AI) is making its way into security operations quickly, but many practitioners are still struggling to turn early experimentation into consistent operational value. This is because SOCs are adopting AI without an intentional ap… Continue reading How to Integrate AI into Modern SOC Workflows
The Chinese hacking group known as Mustang Panda has leveraged a previously undocumented kernel-mode rootkit driver to deliver a new variant of backdoor dubbed TONESHELL in a cyber attack detected in mid-2025 targeting an unspecified entity in Asia.
Th… Continue reading Mustang Panda Uses Signed Kernel-Mode Rootkit to Load TONESHELL Backdoor
Last week’s cyber news in 2025 was not about one big incident. It was about many small cracks opening at the same time. Tools people trust every day behave in unexpected ways. Old flaws resurfaced. New ones were used almost immediately.
A common theme … Continue reading ⚡ Weekly Recap: MongoDB Attacks, Wallet Breaches, Android Spyware, Insider Crime & More
Cybersecurity researchers have disclosed details of what has been described as a “sustained and targeted” spear-phishing campaign that has published over two dozen packages to the npm registry to facilitate credential theft.
The activity, which involve… Continue reading 27 Malicious npm Packages Used as Phishing Infrastructure to Steal Login Credentials
A recently disclosed security vulnerability in MongoDB has come under active exploitation in the wild, with over 87,000 potentially susceptible instances identified across the world.
The vulnerability in question is CVE-2025-14847 (CVSS score: 8.7), wh… Continue reading MongoDB Vulnerability CVE-2025-14847 Under Active Exploitation Worldwide