Attackers are using transitive dependencies to turn benign developer tools into malware. 🛡️ Supply-Chain Alert · GlassWorm campaign targets developers […]
GlassWorm supply-chain campaign weaponizes 72 Open VSX extensions. 🛡️ Read More »
One of the world leading medical device makers is struggling to restore core business operations. 🛑 Disruption Alert · Stryker
Stryker operational systems remain offline five days after Iran-linked attack. 🛑 Read More »
Google is closing a long-standing loophole used by mobile credential stealers. 📱 Security Hardening · Android 17 to restrict Accessibility
Google moves to block malware abuse of Accessibility APIs in Android 17. 📱 Read More »
Your remote workers are being targeted by SEO-poisoned search results. 🐚 Phishing Alert · Storm-2561 using fake VPN sites to
Fake enterprise VPN sites are stealing corporate credentials at scale. 🐚 Read More »
A major coordinated effort has disrupted global phishing and ransomware infrastructure. 🔓 Global Disruption · 45‚000 malicious IPs sinkholed and
Operation Synergia III dismantles 45‚000 malicious IP addresses. 🔓 Read More »
Your trusted web SDKs are being weaponized against your users. 🛡️ Supply-Chain Alert · AppsFlyer Web SDK hijacked to distribute
AppsFlyer Web SDK hijacked in major supply-chain crypto attack. 🛡️ Read More »
Identity-based wiper attacks are crippling critical infrastructure today. 🛑 Disruption Alert · Handala group weaponizes Microsoft Intune against Stryker. In
Identity-based wiper attacks are crippling critical infrastructure today. 🛑 Read More »
Your automation platform is an active RCE gateway for attackers. ⚙️ CVE-2025-68613 · Severity 9.9 · CISA KEV Addition for
Your automation platform is now an active RCE gateway for attackers. ⚙️ Read More »
Final remediation deadline for critical Roundcube Webmail RCE today. 🔓 Remediation Alert · @[CISA](urn:li:organization:13010360) KEV deadline for CVE-2025-49113 (Severity 9.9).
Final remediation deadline for critical Roundcube Webmail RCE today. 🔓 Read More »
Fake enterprise VPN clients are being used to siphon corporate credentials. 🐚 Phishing Alert · Storm-2561 distributing malicious @[Cisco](urn:li:organization:1063), @[Ivanti](urn:li:organization:36124),
Fake enterprise VPN clients are being used to siphon corporate credentials. 🐚 Read More »
