A sophisticated phishing campaign exploits Webflow CDN-hosted fake PDF documents to steal credit card information from users searching for online documents. The multi-step attack uses legitimate security features like Cloudflare Turnstile CAPTCHA to appear trustworthy, ultimately tricking ...
North Korean state-sponsored hacking group Kimsuky (APT43) launches DEEP#DRIVE campaign targeting South Korean business, government, and cryptocurrency sectors. The sophisticated cyber espionage operation uses Korean-language phishing emails with malicious documents, multi-stage PowerShell...
A Chinese cyber group traditionally known for espionage has expanded into ransomware operations, as revealed in a November 2024 attack using RA World ransomware. The group, linked to Mustang Panda, targeted multiple organizations throughout 2024-2025 using PlugX malware and DLL side-loadin...
Palo Alto Networks patches critical authentication bypass vulnerability (CVE-2025-0108) in PAN-OS software, affecting multiple versions. The high-severity flaw (CVSS 7.8) allows unauthenticated attackers to bypass management interface authentication. Updates released for PAN-OS versions 10...
A sophisticated cyber espionage campaign by threat actor REF7707 targeted a South American Foreign Ministry, along with telecommunications and educational institutions in Southeast Asia. The attack utilized custom malware components PATHLOADER and FINALDRAFT, featuring advanced capabilitie...
