Russia-Linked APT28 Exploited MDaemon Zero-Day to Hack Government Webmail Servers

15/05/2025 0 Comments 0 tags

A Russia-linked threat actor has been attributed to a cyber espionage operation targeting webmail servers such as Roundcube, Horde, MDaemon, and Zimbra via cross-site scripting (XSS) vulnerabilities, including a then-zero-day

New Chrome Vulnerability Enables Cross-Origin Data Leak via Loader Referrer Policy

15/05/2025 0 Comments 0 tags

Google on Wednesday released updates to address four security issues in its Chrome web browser, including one for which it said there exists an exploit in the wild. The high-severity

Samsung Patches CVE-2025-4632 Used to Deploy Mirai Botnet via MagicINFO 9 Exploit

14/05/2025 0 Comments 0 tags

Samsung has released software updates to address a critical security flaw in MagicINFO 9 Server that has been actively exploited in the wild. The vulnerability, tracked as CVE-2025-4632 (CVSS score:

BianLian and RansomExx Exploit SAP NetWeaver Flaw to Deploy PipeMagic Trojan

14/05/2025 0 Comments 0 tags

At least two different cybercrime groups BianLian and RansomExx are said to have exploited a recently disclosed security flaw in SAP NetWeaver, indicating that multiple threat actors are taking advantage

Xinbi Telegram Market Tied to $8.4B in Crypto Crime, Romance Scams, North Korea Laundering

14/05/2025 0 Comments 0 tags

A Chinese-language, Telegram-based marketplace called Xinbi Guarantee has facilitated no less than $8.4 billion in transactions since 2022, making it the second major black market to be exposed after HuiOne

CTM360 Identifies Surge in Phishing Attacks Targeting Meta Business Users

14/05/2025 0 Comments 0 tags

A new global phishing threat called “Meta Mirage” has been uncovered, targeting businesses using Meta’s Business Suite. This campaign specifically aims at hijacking high-value accounts, including those managing advertising and

Earth Ammit Breached Drone Supply Chains via ERP in VENOM, TIDRONE Campaigns

14/05/2025 0 Comments 0 tags

A cyber espionage group known as Earth Ammit has been linked to two related but distinct campaigns from 2023 to 2024 targeting various entities in Taiwan and South Korea, including

Learning How to Hack: Why Offensive Security Training Benefits Your Entire Security Team

14/05/2025 0 Comments 0 tags

Organizations across industries are experiencing significant escalations in cyberattacks, particularly targeting critical infrastructure providers and cloud-based enterprises. Verizon’s recently released 2025 Data Breach Investigations Report found an 18% YoY increase

Horabot Malware Targets 6 Latin American Nations Using Invoice-Themed Phishing Emails

14/05/2025 0 Comments 0 tags

Cybersecurity researchers have discovered a new phishing campaign that’s being used to distribute malware called Horabot targeting Windows users in Latin American countries like Mexico, Guatemala, Colombia, Peru, Chile, and

Microsoft Fixes 78 Flaws, 5 Zero-Days Exploited; CVSS 10 Bug Impacts Azure DevOps Server

14/05/2025 0 Comments 0 tags

Microsoft on Tuesday shipped fixes to address a total of 78 security flaws across its software lineup, including a set of five zero-days that have come under active exploitation in