RedDelta Deploys PlugX Malware to Target Mongolia and Taiwan in Espionage Campaigns

10/01/2025 0 Comments 0 tags

Mongolia, Taiwan, Myanmar, Vietnam, and Cambodia have been targeted by the China-nexus RedDelta threat actor to deliver a customized version of the PlugX backdoor between July 2023 and December 2024.

CrowdStrike Warns of Phishing Scam Targeting Job Seekers with XMRig Cryptominer

10/01/2025 0 Comments 0 tags

Cybersecurity company CrowdStrike is alerting of a phishing campaign that exploits its own branding to distribute a cryptocurrency miner that’s disguised as an employee CRM application as part of a

Google Project Zero Researcher Uncovers Zero-Click Exploit Targeting Samsung Devices

10/01/2025 0 Comments 0 tags

Cybersecurity researchers have detailed a now-patched security flaw impacting Monkey’s Audio (APE) decoder on Samsung smartphones that could lead to code execution. The high-severity vulnerability, tracked as CVE-2024-49415 (CVSS score:

Taking the Pain Out of Cybersecurity Reporting: A Practical Guide for MSPs

10/01/2025 0 Comments 0 tags

Cybersecurity reporting is a critical yet often overlooked opportunity for service providers managing cybersecurity for their clients, and specifically for virtual Chief Information Security Officers (vCISOs). While reporting is seen

AI-Driven Ransomware FunkSec Targets 85 Victims Using Double Extortion Tactics

10/01/2025 0 Comments 0 tags

Cybersecurity researchers have shed light on a nascent artificial intelligence (AI) assisted ransomware family called FunkSec that sprang forth in late 2024, and has claimed more than 85 victims to

Major Vulnerabilities Patched in SonicWall, Palo Alto Expedition, and Aviatrix Controllers

10/01/2025 0 Comments 0 tags

Palo Alto Networks has released software patches to address several security flaws in its Expedition migration tool, including a high-severity bug that an authenticated attacker could exploit to access sensitive

New Banshee Stealer Variant Bypasses Antivirus with Apple’s XProtect-Inspired Encryption

09/01/2025 0 Comments 0 tags

Cybersecurity researchers have uncovered a new, stealthier version of a macOS-focused information-stealing malware called Banshee Stealer. “Once thought dormant after its source code leak in late 2024, this new iteration

MirrorFace Leverages ANEL and NOOPDOOR in Multi-Year Cyberattacks on Japan

09/01/2025 0 Comments 0 tags

Japan’s National Police Agency (NPA) and National Center of Incident Readiness and Strategy for Cybersecurity (NCSC) accused a China-linked threat actor named MirrorFace of orchestrating a persistent attack campaign targeting

Critical RCE Flaw in GFI KerioControl Allows Remote Code Execution via CRLF Injection

09/01/2025 0 Comments 0 tags

Threat actors are attempting to take advantage of a recently disclosed security flaw impacting GFI KerioControl firewalls that, if successfully exploited, could allow malicious actors to achieve remote code execution

Product Review: How Reco Discovers Shadow AI in SaaS

09/01/2025 0 Comments 0 tags

As SaaS providers race to integrate AI into their product offerings to stay competitive and relevant, a new challenge has emerged in the world of AI: shadow AI.  Shadow AI