Technology ❯ Cybersecurity

Threat Actors

Exploitation Techniques Advanced Persistent Threats Ransomware Nation-State Actors Hacking Groups Social Engineering State-Sponsored Attacks Malware Attack Techniques Scattered Spider

Mustang Panda Uses Signed Kernel Rootkit to Stealth-Load New ToneShell Backdoor

Kaspersky says a signed Windows mini‑filter let the China‑linked group conceal an upgraded ToneShell at the kernel level.

Fake GitHub Exploits Are Installing Webrat, Security Firms Warn

China-Linked Hackers Exploit Cisco Email Zero-Day With No Patch as CISA Flags Active Threat

React2Shell Attacks Escalate as Microsoft Confirms Hundreds of Compromised Systems

Fortinet SSO Bypass Actively Exploited as CISA Sets Dec. 23 Fix Deadline

Apple, Google Rush Patches as CISA Flags WebKit Zero‑Day Exploits

CISA Adds Actively Exploited Sierra Wireless and Chrome Vulnerabilities to KEV Catalog

Hamas-Linked Ashen Lepus Revamps Espionage Toolkit, Extends Targeting Across Middle East

Unpatched Gogs Zero-Day Is Under Active Exploitation, 700+ Servers Compromised

React Issues New RSC Patches as React2Shell Attacks Escalate and EtherRAT Surfaces

React2Shell Exploited in the Wild as China-Linked Groups Target Unpatched React Server Components

React2Shell Exploited at Scale as CISA Sets Dec. 26 Patch Deadline and Breaches Mount

Microsoft Quietly Alters Windows to Expose Full .LNK Targets After Years of Real‑World Abuse

Researchers Expose Albiriox, an Android MaaS Enabling Live On‑Device Financial Fraud

Salesforce Revokes Gainsight Tokens as Breach Scope Disputed

‘HashJack’ Exposes AI Browser Weakness as Microsoft and Perplexity Patch, Google Declines

Fake Windows Update Screens Drive Ongoing ClickFix Malware Wave

Russian-Linked StealC V2 Campaign Weaponizes Blender Files on 3D Marketplaces

WhatsApp Worm in Brazil Delivers 'Eternidade Stealer' to Target Banking and Crypto

Sneaky 2FA Phishing Kit Adds BitB Pop-Ups to Steal Microsoft Credentials