A sophisticated new ransomware group named “Wailer” has emerged, specializing in targeting Managed Service Providers (MSPs). Wailer uses a wormable […]
New “Wailer” Ransomware Targets MSPs, Demands $20 Million Payday Read More »
A new, highly effective phishing technique known as “Zero-Point” has emerged, successfully bypassing Microsoft 365’s Advanced Threat Protection (ATP). Attackers
New Phishing Campaign Evades M365 Defenses Using ‘Zero-Point’ Images Read More »
The exploitation of the Kubernetes “KubeDoom” privilege escalation flaw (CVE-2025-10202) has fully integrated into the Ransomware-as-a-Service (RaaS) economy. Affiliates of
Kubernetes “KubeDoom” Exploits Shift to Ransomware-as-a-Service Read More »
CISA has escalated its warning regarding the unpatched vulnerability in Cisco Adaptive Security Appliance (ASA) firewalls, confirming mass exploitation by
CISA Alert: Iranian APTs Exploiting Unpatched Cisco ASA Flaw at Scale Read More »
The exploitation of the Kubernetes “KubeDoom” privilege escalation flaw (CVE-2025-10202) has reached critical levels, with multiple ransomware and crypto-mining groups
Global Campaign Targets Kubernetes Clusters with “KubeDoom” RCE Read More »
T-Max Communications, a major global telecommunications provider, has disclosed a data breach exposing the personal information of approximately 15 million
Global Telecom Giant “T-Max” Discloses Data Breach Affecting 15 Million Users Read More »
Researchers have confirmed a new variant of the “Morris II” AI worm that now targets enterprise code repositories (like GitHub
New “Morris II” AI Worm Targets Enterprise Code Repositories Read More »
CISA has issued an urgent bulletin confirming that Iranian state-sponsored actors (APT42) are actively exploiting a known, but widely unpatched,
CISA Alert: Iranian APT Exploiting Unpatched Cisco ASA Devices Read More »
Microsoft has released out-of-band updates to patch three zero-day vulnerabilities, two affecting Exchange Server (remote escalation) and one in the
Microsoft Patches 3 Zero-Days in Exchange and Edge Browser Read More »
A new, highly sophisticated supply chain attack named “GhostClick” is targeting JavaScript developers via malicious npm packages. The packages install
New “GhostClick” Campaign Targets Developers with Malicious npm Packages Read More »
