China-Linked Hackers Launch Targeted Espionage Campaign on African IT Infrastructure The China-linked cyber espionage group tracked as APT41 has been attributed to a new campaign targeting government IT services in …
The Clear Linux OS team has announced the shutdown of the project, marking the end of its 10-year existence in the open-source ecosystem. Clear Linux is a Linux distribution developed …
Ring is warning that a backend update bug is responsible for customers seeing a surge in unauthorized devices logged into their account on May 28th. On May 28th, many Ring …
ExpressVPN has fixed a flaw in its Windows client that caused Remote Desktop Protocol (RDP) traffic to bypass the virtual private network (VPN) tunnel, exposing the users' real IP addresses. …
PoisonSeed Hackers Bypass FIDO Keys Using QR Phishing and Cross-Device Sign-In Abuse Cybersecurity researchers have disclosed a novel attack technique that allows threat actors to downgrade Fast IDentity Online (FIDO) …
- Cyber SecurityTechnology
Microsoft releases emergency patches for SharePoint RCE flaws exploited in attacks
Microsoft has released emergency SharePoint security updates for two zero-day vulnerabilities tracked as CVE-2025-53770 and CVE-2025-53771 that have compromised services worldwide in “ToolShell” attacks. In May, during the Berlin Pwn2Own …
- Cyber Security
EncryptHub Targets Web3 Developers Using Fake AI Platforms to Deploy Fickle Stealer Malware
EncryptHub Targets Web3 Developers Using Fake AI Platforms to Deploy Fickle Stealer Malware The financially motivated threat actor known as EncryptHub (aka LARVA-208 and Water Gamayun) has been attributed to …
- Cyber Security
Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Global Organizations
Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Global Organizations A critical security vulnerability in Microsoft SharePoint Server has been weaponized as part of an “active, large-scale” exploitation campaign. The …
- Cyber Security
Malware Injected into 5 npm Packages After Maintainer Tokens Stolen in Phishing Attack
Malware Injected into 5 npm Packages After Maintainer Tokens Stolen in Phishing Attack Cybersecurity researchers have alerted to a supply chain attack that has targeted popular npm packages via a …
