Tsundere botnet spreads via MSI and PowerShell installers, using Ethereum-based C2 rotation and game-themed lures to target ...

Discover the latest edition packed with expert insights, tech trends, and strategic analysis across cybersecurity, AI, and ...

Cyber operations by Iran-linked groups used AIS and CCTV intelligence to support real-world missile attacks, Amazon reports.

TamperedChef spreads through fake installers and SEO abuse, delivering a persistent JavaScript backdoor across multiple ...

The vulnerability in question is CVE-2025-11001 (CVSS score: 7.0), which allows remote attackers to execute arbitrary code.

Eternidade Stealer spreads via WhatsApp hijacking, using Python scripts and IMAP-driven C2 updates to target Brazilian users.

Granular application containment reduces overreach, blocks lateral movement, and cuts SOC alerts by up to 90%.

Second-order prompt injection exploits ServiceNow agent discovery, enabling unauthorized actions unless configurations and monitoring are tightened.

Fortinet has warned of a new security flaw in FortiWeb that it said has been exploited in the wild. The medium-severity ...

Sneaky 2FA adds BitB phishing and attackers exploit passkey flaws using rogue extensions and downgrade attacks.

Meta expands WhatsApp security research, reveals $4M payouts, new proxy tool, and patched high-severity flaws.

Tuoni is advertised as an advanced C2 framework designed for security professionals, facilitating penetration testing ...