Collaborate Disseminate
Ransomware groups are facing an economic downturn of their own: In Q3 2025, only 23 percent of victims paid a ransom, and for data theft incidents that involved no encryption, the payment rate dropped to just 19 percent, according to Coveware. “C… Continue reading Ransomware, extortion groups adapt as payment rates reach historic lows
Microsoft has released an out-of-band security update that “comprehensively” addresses CVE-2025-59287, a remote code execution vulnerability in the Windows Server Update Services (WSUS) that is reportedly being exploited in the wild. About … Continue reading Microsoft releases urgent fix for actively exploited WSUS vulnerability (CVE-2025-59287)
Along with fixing many code-based vulnerabilities, the October 2025 Windows updates also change how File Explorer handles files downloaded from the internet. The change affects the file management tool’s Preview Pane, which lets users see the con… Continue reading Microsoft blocks risky file previews in Windows File Explorer
Check Point researchers have uncovered, mapped and helped set back a stealthy, large-scale malware distribution operation on YouTube they dubbed the “YouTube Ghost Network.” The network published more than 3,000 videos across compromised or… Continue reading Researchers expose large-scale YouTube malware distribution network
CVE-2025-61932, an “improper verification of source of a communication channel” vulnerability affecting Lanscope Endpoint Manager, has been exploited as a zero-day since April 2025, the Japan Computer Emergency Response Team Coordination Ce… Continue reading Lanscope Endpoint Manager vulnerability exploited in zero-day attacks (CVE-2025-61932)
Attackers are trying to exploit CVE-2025-54236, a critical vulnerability affecting Adobe Commerce and Magento Open Source, Sansec researchers have warned. The company blocked over 250 exploitation attempts targeting multiple stores on Wednesday, and ex… Continue reading Critical Adobe Commerce, Magento vulnerability under attack (CVE-2025-54236)
A newly uncovered attack campaign mounted by suspected Morocco-based attackers has been hitting global retailers and other businesses issuing gift cards. What makes this campaign stand out is how the threat actors avoid typical malware techniques and e… Continue reading Attackers target retailers’ gift card systems using cloud-only techniques
Attackers are increasingly abusing internal OAuth-based applications to gain persistent access to cloud environments, Proofpoint researchers warn. These apps often remain unnoticed for quite some time and allow attackers to maintain access to high-priv… Continue reading Attackers turn trusted OAuth apps into cloud backdoors
The rapid technological advances of recent decades have transformed nearly every aspect of our lives. One major shift is that many of us now maintain extensive digital footprints, spanning countless online accounts, from email and social media to banki… Continue reading Life, death, and online identity: What happens to your online accounts after death?
CVE-2025-33073, a Windows SMB Client vulnerability that Microsoft fixed in June 2025, is being exploited by attackers. The confirmation comes from the Cybersecurity and Infrastructure Security Agency (CISA), which has added the flaw to its Known Exploi… Continue reading CISA warns of Windows SMB flaw under active exploitation (CVE-2025-33073)