Silver Fox is using India income tax phishing emails and fake software sites to install ValleyRAT, a modular Windows remote ...
The 2025 SANS SOC Survey shows AI use is rising, but many SOCs lack integration, customization, and clear validation ...
Mustang Panda deployed TONESHELL via a signed kernel-mode rootkit, targeting Asian government networks and evading security ...
This weekly recap brings those stories together in one place. No overload, no noise. Read on to see what shaped the threat ...
Researchers uncovered 27 malicious npm packages used over five months to host phishing pages that steal credentials from ...
A critical MongoDB flaw, CVE-2025-14847, is under active exploitation, allowing unauthenticated data leaks from 87,000+ ...
AI-driven attacks leaked 23.77 million secrets in 2024, revealing that NIST, ISO, and CIS frameworks lack coverage for ...
High-severity CVE-2025-14847 allows unauthenticated attackers to read uninitialized heap memory in MongoDB due to a zlib ...
Trust Wallet says a security incident in its Chrome extension v2.68 caused about $7M in crypto losses and urges users to ...
China-linked Evasive Panda used DNS poisoning to deliver the MgBot backdoor in targeted espionage attacks from 2022 to 2024.
A critical LangChain Core vulnerability (CVE-2025-68664, CVSS 9.3) allows secret theft and prompt injection through unsafe ...