cyber security

PhantomRaven Attack Involves 126 Malicious npm Packages with Over 86,000 Downloads Hiding Malicious Code

A sophisticated malware campaign targeting developers has been operating since August 2025, deploying 126 malicious npm packages that have collectively…

2 hours ago

PolarEdge Botnet Infected 25,000+ Devices and 140 C2 Servers Exploiting IoT Vulnerabilities

A sophisticated botnet campaign has compromised more than 25,000 IoT devices across 40 countries while establishing 140 command-and-control servers to…

3 hours ago

New Attack Combines Ghost SPNs and Kerberos Reflection to Elevate Privileges on SMB Servers

A sophisticated privilege escalation vulnerability in Windows SMB servers, leveraging Ghost Service Principal Names (SPNs) and Kerberos authentication reflection to…

3 hours ago

Canada Warns of Hackers Breached ICS Devices Controlling Water and Energy Facilities

Canadian authorities have issued an urgent alert following multiple confirmed incidents where cybercriminals compromised internet-accessible Industrial Control Systems (ICS) devices…

4 hours ago

Microsoft Windows Cloud Files Minifilter Privilege Escalation Vulnerability Exploited

Microsoft has patched a critical race condition vulnerability in its Windows Cloud Files Minifilter driver, known as CVE-2025-55680, which enables…

5 hours ago

Chrome 142 Released With Fix for 20 Vulnerabilities that Allows Malicious Code Execution

Google has officially promoted Chrome 142 to the stable channel, delivering critical security updates for Windows, Mac, and Linux users.…

7 hours ago

CISA Shares New Threat Detections for Actively Exploited WSUS Vulnerability

In a critical update issued on October 29, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) has provided organizations with…

10 hours ago

Russian Hackers Attacking Government Entity Using Stealthy Living-Off-the-Land Tactics

Ukrainian government organizations continue facing relentless cyber threats from Russian-backed threat actors employing sophisticated evasion techniques to maintain persistent network…

18 hours ago

Threat Actors Weaponizes Judicial Documents to Deliver PureHVNC RAT

Between August and October 2025, a sophisticated phishing campaign has emerged targeting Colombian and Spanish-speaking users through deceptive emails masquerading…

19 hours ago

Emerging Cyber Threats Featuring QR Codes ClickFix and LOLBins Challenging SOC Defenses

Cybersecurity experts at ANY.RUN recently unveiled alarming trends in how attackers are exploiting everyday technologies to bypass security operations centers…

19 hours ago