Author: Mash

A new botnet called Eleven11bot has compromised over 86,000 IoT devices, mainly security cameras and network video recorders (NVRs), to [...]

A new strain of the Vo1d malware botnet has infected nearly 1.6 million Android TV devices across 226 countries, integrating [...]

A social engineering scam has been targeting job seekers in the Web3 industry using a fraudulent "GrassCall" meeting app that [...]

A malware campaign known as GitVenom has been using hundreds of fake GitHub repositories to spread info-stealers, remote access trojans [...]

Microsoft is experimenting with ad-supported versions of its Office desktop apps, allowing users to edit documents with restricted functionality. Unlike [...]

A new phishing scam is abusing PayPal’s address settings to send fraudulent purchase confirmations, tricking users into calling scammers who [...]

Google is continuing its phased deprecation of Manifest V2-based extensions, including the popular ad blocker uBlock Origin, as part of [...]

The Chinese state-sponsored hacking group Salt Typhoon has been using a custom tool called JumbledPath to covertly monitor network traffic [...]

The Chinese APT group "Mustang Panda," also known as Earth Preta, has been abusing Microsoft's Application Virtualization Injector (MAVInject.exe) to [...]

Microsoft is removing the Location History feature from Windows, which previously allowed apps like Cortana to access stored location data [...]

Google Chrome has upgraded its "Enhanced Protection" feature with AI to provide real-time security against malicious websites, downloads, and extensions. [...]

Security researchers from Rapid7 revealed that attackers used a previously unknown PostgreSQL vulnerability (CVE-2025-1094) as a zero-day to exploit BeyondTrust’s [...]

Security researchers at DataDog uncovered a vulnerability called "whoAMI," which lets attackers gain code execution in AWS accounts by publishing [...]

Hackers are increasingly targeting unpatched systems vulnerable to older security flaws, specifically CVE-2022-47945 in ThinkPHP and CVE-2023-49103 in ownCloud. The [...]

Apple has issued urgent security updates to address a zero-day vulnerability (CVE-2025-24200) that was exploited in highly targeted attacks. The [...]

Microsoft has offered a solution for users experiencing blocked security updates on certain Windows 11 24H2 systems. The issue occurs [...]

Cisco has released fixes for two critical vulnerabilities (CVE-2025-20124 and CVE-2025-20125) in its Identity Services Engine (ISE) platform, a widely [...]

AMD has released firmware and microcode updates to mitigate a high-severity flaw (CVE-2024-56161) that could enable attackers with local admin [...]

A Chinese cyber-espionage group, Evasive Panda (also known as DaggerFly), has been using a newly discovered SSH backdoor, "ELF/Sshdinjector.A!tr," to [...]

As part of its November security updates, Google patched two Android zero-day vulnerabilities, CVE-2024-43047 and CVE-2024-43093, both actively exploited in [...]

PyPI has launched a new 'Project Archival' system, enabling developers to mark projects as archived, signaling users that no future [...]

Google's Threat Intelligence Group (GTIG) has identified government-backed APT groups from over 20 countries, including Iran, China, North Korea, and [...]

Microsoft has improved text contrast for all Chromium-based browsers on Windows, including Google Chrome and Edge, by integrating enhanced gamma [...]

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about Contec CMS8000 patient monitors, which secretly send [...]

Akamai researchers have identified Aquabotv3, a new variant of the Mirai-based botnet malware, exploiting the CVE-2024-41710 vulnerability in Mitel SIP [...]

Microsoft is testing a new scareware blocker in its Edge browser, designed to protect Windows PC users from tech support [...]

Chinese AI platform DeepSeek has paused new registrations for its DeepSeek-V3 chat service following a major cyberattack. The platform recently [...]

Hackers have set up nearly 1,000 fake web pages impersonating Reddit and WeTransfer to distribute Lumma Stealer malware. The scam [...]

Google has launched a Chrome Web Store tailored for enterprises, enabling organizations to create a curated list of trusted extensions [...]

Two severe vulnerabilities in the RealHome theme and Easy Real Estate plugin for WordPress could allow attackers to gain administrator [...]

A high-severity vulnerability in 7-Zip (CVE-2025-0411) allowed attackers to bypass Windows' Mark of the Web (MotW) security mechanism, enabling the [...]

Hewlett Packard Enterprise (HPE) is probing allegations by threat actor IntelBroker, who claims to have accessed the company’s developer environments [...]

A malicious package named 'pycord-self' on PyPi has been discovered, designed to steal Discord authentication tokens and establish a backdoor [...]

A new vulnerability, CVE-2024-7344, has been discovered in UEFI Secure Boot, affecting Microsoft-signed applications in third-party system recovery tools. The [...]

A fraudulent proof-of-concept (PoC) exploit for the LDAPNightmare vulnerability (CVE-2024-49113) has been circulating on GitHub, secretly deploying infostealer malware that [...]

Docker Desktop is failing to start on macOS due to false malware alerts stemming from files signed with an incorrect [...]

Cybercriminals are exploiting CVE-2024-52875, a critical CRLF injection flaw in GFI KerioControl firewalls, to execute remote code and steal sensitive [...]

At least five Chrome extensions were compromised in a planned cyberattack, where threat actors injected code to steal sensitive user [...]

Microsoft has acknowledged an issue affecting Windows 11 24H2 installations, where newer cumulative updates fail if the OS was installed [...]

A new Mirai-based botnet is actively targeting vulnerabilities in DigiEver DS-2105 Pro NVRs and outdated TP-Link routers, exploiting a previously [...]