This cybersecurity update highlights APT41's sophisticated Google Calendar-based malware, alongside major incidents including the takedown of AvCheck.net, discovery of Kremlin-linked Void Blizzard, and new threats like EDDIESTEALER and Earth Lamia's expanded operations. Critical vulnerabil...
The North Face has suffered its fourth credential stuffing attack since 2020, with the latest breach detected on April 23, 2025. Attackers accessed customer information including names, purchase histories, addresses, emails, birth dates, and phone numbers, though payment data remained secu...
Fortinet researchers discovered a sophisticated cyber attack using malware with deliberately corrupted DOS and PE headers to evade detection. The malware, which operated undetected for weeks, functions as a remote access trojan (RAT) capable of encrypted C2 communication, screenshot captur...
DragonForce ransomware operators compromised an MSP by exploiting vulnerabilities in SimpleHelp remote management tool, enabling attacks on downstream customers. The group has evolved into a ransomware "cartel" with a novel affiliate branding model, potentially collaborating with Scattered...
Safari browser contains a critical security flaw that enables browser-in-the-middle (BitM) attacks through its Fullscreen API. Unlike Firefox and Chrome, which display clear warnings when entering fullscreen mode, Safari only shows a subtle animation that users often miss. Attackers exploi...
