Cybersecurity researchers have discovered a massive campaign infecting hundreds of thousands of legitimate websites with obfuscated malicious JavaScript code using the JSFireTruck technique. Between March and April 2025, over 269,000 web pages were compromised, redirecting search engine vi...
Ransomware groups are actively exploiting critical vulnerabilities in unpatched SimpleHelp RMM software versions 5.5.7 and earlier, prompting CISA to issue urgent warnings as attacks compromise multiple organizations including utility billing customers. The campaign features sophisticated ...
Crocodilus, a sophisticated Android banking trojan, has expanded beyond its initial European targets to affect users globally. Originally targeting Spain and Turkey, it now threatens Argentina, Brazil, India, Indonesia, and the United States. The malware disguises itself as legitimate apps...
Google will stop trusting digital certificates from Chunghwa Telecom and Netlock starting with Chrome 139 in August 2025, citing compliance failures and unmet commitments. Only certificates issued after July 31, 2025 will be affected. Chrome users will see security warnings when visiting s...
CISA has issued an alert about active exploitation of several critical vulnerabilities, including a remote code execution flaw in ConnectWise ScreenConnect (CVE-2025-3935) patched on April 24. The agency also warned about four other actively exploited vulnerabilities affecting ASUS routers...
