Chinese Hackers Breach Juniper Networks Routers With Custom Backdoors and Rootkits

12/03/2025 0 Comments 0 tags

The China-nexus cyber espionage group tracked as UNC3886 has been observed targeting end-of-life MX routers from Juniper Networks as part of a campaign designed to deploy custom backdoors, highlighting their

Pentesters: Is AI Coming for Your Role?

12/03/2025 0 Comments 0 tags

We’ve been hearing the same story for years: AI is coming for your job. In fact, in 2017, McKinsey printed a report, Jobs Lost, Jobs Gained: Workforce Transitions in a

Over 400 IPs Exploiting Multiple SSRF Vulnerabilities in Coordinated Cyber Attack

12/03/2025 0 Comments 0 tags

Threat intelligence firm GreyNoise is warning of a “coordinated surge” in the exploitation of Server-Side Request Forgery (SSRF) vulnerabilities spanning multiple platforms. “At least 400 IPs have been seen actively

URGENT: Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited Zero-Days

12/03/2025 0 Comments 0 tags

Microsoft on Tuesday released security updates to address 57 security vulnerabilities in its software, including a whopping six zero-days that it said have been actively exploited in the wild. Of

Apple Releases Patch for WebKit Zero-Day Vulnerability Exploited in Targeted Attacks

12/03/2025 0 Comments 0 tags

Apple on Tuesday released a security update to address a zero-day flaw that it said has been exploited in “extremely sophisticated” attacks. The vulnerability has been assigned the CVE identifier

Blind Eagle Hacks Colombian Institutions Using NTLM Flaw, RATs and GitHub-Based Attacks

11/03/2025 0 Comments 0 tags

The threat actor known as Blind Eagle has been linked to a series of ongoing campaigns targeting Colombian institutions and government entities since November 2024. “The monitored campaigns targeted Colombian

Your Risk Scores Are Lying: Adversarial Exposure Validation Exposes Real Threats

11/03/2025 0 Comments 0 tags

In cybersecurity, confidence is a double-edged sword. Organizations often operate under a false sense of security, believing that patched vulnerabilities, up-to-date tools, polished dashboards, and glowing risk scores guarantee safety.

Ballista Botnet Exploits Unpatched TP-Link Vulnerability, Infects Over 6,000 Devices

11/03/2025 0 Comments 0 tags

Unpatched TP-Link Archer routers have become the target of a new botnet campaign dubbed Ballista, according to new findings from the Cato CTRL team. “The botnet exploits a remote code

Steganography Explained: How XWorm Hides Inside Images

11/03/2025 0 Comments 0 tags

Inside the most innocent-looking image, a breathtaking landscape, or a funny meme, something dangerous could be hiding, waiting for its moment to strike. No strange file names. No antivirus warnings.

Moxa Issues Fix for Critical Authentication Bypass Vulnerability in PT Switches

11/03/2025 0 Comments 0 tags

Taiwanese company Moxa has released a security update to address a critical security flaw impacting its PT switches that could permit an attacker to bypass authentication guarantees. The vulnerability, tracked