Collaborate Disseminate
A set of nine malicious NuGet packages has been identified as capable of dropping time-delayed payloads to sabotage database operations and corrupt industrial control systems.
According to software supply chain security company Socket, the packages wer… Continue reading Hidden Logic Bombs in Malware-Laced NuGet Packages Set to Detonate Years After Installation
Imagine this: Sarah from accounting gets what looks like a routine password reset email from your organization’s cloud provider. She clicks the link, types in her credentials, and goes back to her spreadsheet. But unknown to her, she’s just… Continue reading Enterprise Credentials at Risk – Same Old, Same Old?
Google on Thursday said it’s rolling out a dedicated form to allow businesses listed on Google Maps to report extortion attempts made by threat actors who post inauthentic bad reviews on the platform and demand ransoms to remove the negative comments.
… Continue reading Google Launches New Maps Feature to Help Businesses Report Review-Based Extortion Attempts
Cybersecurity researchers have flagged a malicious Visual Studio Code (VS Code) extension with basic ransomware capabilities that appears to be created with the help of artificial intelligence – in other words, vibe-coded.
Secure Annex researcher John … Continue reading Vibe-Coded Malicious VS Code Extension Found with Built-In Ransomware Capabilities
A previously unknown threat activity cluster has been observed impersonating Slovak cybersecurity company ESET as part of phishing attacks targeting Ukrainian entities.
The campaign, detected in May 2025, is tracked by the security outfit under the mon… Continue reading Trojanized ESET Installers Drop Kalambur Backdoor in Phishing Attacks on Ukraine
Cisco on Wednesday disclosed that it became aware of a new attack variant that’s designed to target devices running Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software releases that a… Continue reading Cisco Warns of New Firewall Attack Exploiting CVE-2025-20333 and CVE-2025-20362
Introduction
Financial institutions are facing a new reality: cyber-resilience has passed from being a best practice, to an operational necessity, to a prescriptive regulatory requirement.
Crisis management or Tabletop exercises, for a long time relati… Continue reading From Tabletop to Turnkey: Building Cyber Resilience in Financial Services
Cybercrime has stopped being a problem of just the internet — it’s becoming a problem of the real world. Online scams now fund organized crime, hackers rent violence like a service, and even trusted apps or social platforms are turning into… Continue reading ThreatsDay Bulletin: AI Tools in Malware, Botnets, GDI Flaws, Election Attacks & More
Bitdefender has once again been recognized as a Representative Vendor in the Gartner® Market Guide for Managed Detection and Response (MDR) — marking the fourth consecutive year of inclusion. According to Gartner, more than 600 providers globally claim… Continue reading Bitdefender Named a Representative Vendor in the 2025 Gartner® Market Guide for Managed Detection and Response
The threat actor known as Curly COMrades has been observed exploiting virtualization technologies as a way to bypass security solutions and execute custom malware.
According to a new report from Bitdefender, the adversary is said to have enabled the Hy… Continue reading Hackers Weaponize Windows Hyper-V to Hide Linux VM and Evade EDR Detection