Collaborate Disseminate
The threat actors behind the SocGholish malware have been observed leveraging Traffic Distribution Systems (TDSs) like Parrot TDS and Keitaro TDS to filter and redirect unsuspecting users to sketchy content.
“The core of their operation is a sophistica… Continue reading SocGholish Malware Spread via Ad Tools; Delivers Access to LockBit, Evil Corp, and Others
Cybersecurity researchers have discovered a set of 11 malicious Go packages that are designed to download additional payloads from remote servers and execute them on both Windows and Linux systems.
“At runtime the code silently spawns a shell, pulls a … Continue reading Malicious Go, npm Packages Deliver Cross-Platform Malware, Trigger Remote Data Wipes
Microsoft has released an advisory for a high-severity security flaw affecting on-premise versions of Exchange Server that could allow an attacker to gain elevated privileges under certain conditions.
The vulnerability, tracked as CVE-2025-53786, carri… Continue reading Microsoft Discloses Exchange Server Flaw Enabling Silent Cloud Access in Hybrid Setups
Cybersecurity researchers have disclosed multiple security flaws in video surveillance products from Axis Communications that, if successfully exploited, could expose them to takeover attacks.
“The attack results in pre-authentication remote code execu… Continue reading 6,500 Axis Servers Expose Remoting Protocol, 4,000 in U.S. Vulnerable to Exploits
Now that we are well into 2025, cloud attacks are evolving faster than ever and artificial intelligence (AI) is both a weapon and a shield. As AI rapidly changes how enterprises innovate, security teams are now tasked with a triple burden:
Secure AI e… Continue reading The AI-Powered Security Shift: What 2025 Is Teaching Us About Cloud Defense
SonicWall has revealed that the recent spike in activity targeting its Gen 7 and newer firewalls with SSL VPN enabled is related to an older, now-patched bug and password reuse.
“We now have high confidence that the recent SSL VPN activity is not conne… Continue reading SonicWall Confirms Patched Vulnerability Behind Recent VPN Attacks, Not a Zero-Day
Python is everywhere in modern software. From machine learning models to production microservices, chances are your code—and your business—depends on Python packages you didn’t write.
But in 2025, that trust comes with a serious risk.
Every few weeks, … Continue reading Webinar: How to Stop Python Supply Chain Attacks—and the Expert Tools You Need
Cybersecurity researchers have demonstrated an “end-to-end privilege escalation chain” in Amazon Elastic Container Service (ECS) that could be exploited by an attacker to conduct lateral movement, access sensitive data, and seize control of the cloud e… Continue reading Researchers Uncover ECScape Flaw in Amazon ECS Enabling Cross-Task Credential Theft
The malicious ad tech purveyor known as VexTrio Viper has been observed developing several malicious apps that have been published on Apple and Google’s official app storefronts under the guise of seemingly useful applications.
These apps masquerade as… Continue reading Fake VPN and Spam Blocker Apps Tied to VexTrio Used in Ad Fraud, Subscription Scams
As the volume and sophistication of cyber threats and risks grow, cybersecurity has become mission-critical for businesses of all sizes. To address this shift, SMBs have been urgently turning to vCISO services to keep up with escalating threats and com… Continue reading AI Slashes Workloads for vCISOs by 68% as SMBs Demand More – New Report Reveals