CISA has revealed a sophisticated Chinese espionage campaign targeting Ivanti Endpoint Manager Mobile systems through two critical zero-day vulnerabilities (CVE-2025-4427 and CVE-2025-4428). The attacks exploited authentication bypass and code injection flaws to deploy advanced malware tha...
CISA has uncovered a sophisticated cyberattack targeting Ivanti Endpoint Manager Mobile systems, where threat actors exploited two critical vulnerabilities (CVE-2025-4427 and CVE-2025-4428) to deploy advanced malware backdoors. The May 2025 attack involved chaining an authentication bypass...
Google Cloud's Mandiant reports significantly reduced activity from the Scattered Spider cybercrime group following UK arrests, but warns organizations to use this reprieve to strengthen defenses. The group previously targeted VMware ESXi hypervisors in retail, airline, and transportation ...
INTERPOL's Operation Secure dismantled over 20,000 malicious domains and IP addresses linked to 69 information-stealing malware variants across 26 Asia-Pacific countries from January to April 2025. The coordinated effort resulted in 32 arrests, seizure of 41 servers containing 100GB of cri...
A massive brute-force campaign targeting Apache Tomcat Manager interfaces has been detected, with 295 malicious IP addresses attempting to breach exposed servers globally. The coordinated attack, which spiked on June 5, 2025, primarily originated from the US, UK, Germany, Netherlands, and ...
