Android Security Alert: Google Patches 120 Flaws, Including Two Zero-Days Under Attack

03/09/2025 0 Comments 0 tags

Google has shipped security updates to address 120 security flaws in its Android operating system as part of its monthly fixes for September 2025, including two issues that it said

Detecting Data Leaks Before Disaster

03/09/2025 0 Comments 0 tags

In January 2025, cybersecurity experts at Wiz Research found that Chinese AI specialist DeepSeek had suffered a data leak, putting more than 1 million sensitive log streams at risk. According

Threat Actors Weaponize HexStrike AI to Exploit Citrix Flaws Within a Week of Disclosure

03/09/2025 0 Comments 0 tags

Threat actors are attempting to leverage a newly released artificial intelligence (AI) offensive security tool called HexStrike AI to exploit recently disclosed security flaws. HexStrike AI, according to its website,

Iranian Hackers Exploit 100+ Embassy Email Accounts in Global Phishing Targeting Diplomats

03/09/2025 0 Comments 0 tags

An Iran-nexus group has been linked to a “coordinated” and “multi-wave” spear-phishing campaign targeting the embassies and consulates in Europe and other regions across the world. The activity has been

Cloudflare Blocks Record-Breaking 11.5 Tbps DDoS Attack

03/09/2025 0 Comments 0 tags

Cloudflare on Tuesday said it automatically mitigated a record-setting volumetric distributed denial-of-service (DDoS) attack that peaked at 11.5 terabits per second (Tbps). “Over the past few weeks, we’ve autonomously blocked

CISA Adds TP-Link and WhatsApp Flaws to KEV Catalog Amid Active Exploitation

03/09/2025 0 Comments 0 tags

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a high-severity security flaw impacting TP-Link TL-WA855RE Wi-Fi Ranger Extender products to its Known Exploited Vulnerabilities (KEV) catalog, citing

Salesloft Takes Drift Offline After OAuth Token Theft Hits Hundreds of Organizations

03/09/2025 0 Comments 0 tags

Salesloft on Tuesday announced that it’s taking Drift temporarily offline “in the very near future,” as multiple companies have been ensnared in a far-reaching supply chain attack spree targeting the

Lazarus Group Expands Malware Arsenal With PondRAT, ThemeForestRAT, and RemotePE

02/09/2025 0 Comments 0 tags

The North Korea-linked threat actor known as the Lazarus Group has been attributed to a social engineering campaign that distributes three different pieces of cross-platform malware called PondRAT, ThemeForestRAT, and

Researchers Warn of MystRodX Backdoor Using DNS and ICMP Triggers for Stealthy Control

02/09/2025 0 Comments 0 tags

Cybersecurity researchers have disclosed a stealthy new backdoor called MystRodX that comes with a variety of features to capture sensitive data from compromised systems. “MystRodX is a typical backdoor implemented

Shadow AI Discovery: A Critical Part of Enterprise AI Governance

02/09/2025 0 Comments 0 tags

The Harsh Truths of AI Adoption MITs State of AI in Business report revealed that while 40% of organizations have purchased enterprise LLM subscriptions, over 90% of employees are actively