SCtoCS

Qilin’s Hybrid Campaign: Linux Payload + BYOVD Exploit Raises the Ransomware Bar

Recent reports indicate that the Qilin ransomware family has evolved into a more sophisticated hybrid threat, combining a Linux-targeting…

Dell RecoverPoint for VMs Zero Day CVE-2026–22769 Exploited Since Mid 2024

A critical zero-day vulnerability (CVE-2026–22769) in Dell RecoverPoint for Virtual Machines has been actively exploited in targeted…

SonicWall has attributed its September 2025 cloud backup breach to a state-sponsored threat actor…

The investigation revealed a targeted intrusion aimed at stealing customer data from cloud-hosted systems, using advanced persistence and…

More Than 67,000 Fake npm Packages Flood Registry in Worm-Like Spam Campaign

Researchers have identified a massive worm-like spam campaign that injected over 67,000 fake packages into the npm registry. Although many…

Chinese Hackers Leveraged Anthropic AI Systems to Run Automated Cyber Espionage Operations

A new report details how a China-linked threat group allegedly leveraged Anthropic AI systems to automate various stages of cyber-espionage…

Researchers Discover Critical AI Bugs Affecting Meta, Nvidia, and Microsoft Inference Frameworks

Security researchers have identified a set of critical vulnerabilities within AI inference frameworks developed by Meta, Nvidia, and…

China’s Hackers Repurpose Legacy Flaws, from Log4j to IIS, into Global Espionage Tools

New analysis shows Chinese state-linked actors increasingly weaponize long-standing vulnerabilities — including Log4j and IIS flaws — to…

CISA Warns of Critical WatchGuard Fireware Vulnerability Exposing 54,000 Fireboxes to…

Fake Chrome Extension Safery Steals Ethereum Wallet Seed Phrases via Sui Blockchain

Researchers have exposed a fraudulent Chrome extension named Safery, designed to steal Ethereum wallet seed phrases and exfiltrate them…

WhatsApp ‘Maverick’ Malware Hijacks Browser Sessions to Target Brazil’s Biggest Banks

Researchers have uncovered a new malware threat known as Maverick, which propagates through WhatsApp and hijacks victims’ browser sessions…

Iranian Hackers Launch SpearSpecter Spy Operation Targeting Defense and Government

Security researchers have uncovered a sophisticated cyber-espionage campaign dubbed SpearSpecter, reportedly linked to Iranian threat…

GPUGate Malware Leverages Google Ads and Fake GitHub Commits to Target IT Companies

GPUGate is a new and sophisticated malware campaign targeting IT companies by exploiting Google Ads and fake GitHub Commits. Attackers lure…

CISA Identifies Four Actively Exploited Security Vulnerabilities in Latest KEV

The Cybersecurity and Infrastructure Security Agency (CISA) has added four actively exploited vulnerabilities to its latest Known Exploited…

Malicious npm Package Targets Crypto Wallets

A fake npm package named nodejs-smtp is impersonating the popular Nodemailer library to trick developers. This malicious package…

Nation-State Hackers Use New Airstalk Malware in Suspected Supply Chain Attack

Researchers have uncovered a nation-state campaign using Airstalk, a newly identified malware family, in a suspected supply chain…

Notepad++ Patches Hijacked Update Mechanism Exploited to Deliver Targeted Malware

Notepad++ has patched a hijacked update mechanism that threat actors were abusing to distribute targeted malware via what appeared to be…