This bulletin covers the latest developments in cybersecurity, including new threats, legal measures, and technological defenses. It highlights ongoing battles between hackers and security defenders across various sectors and regions. #IntelDataBreach #OWASP #MetaPhishing #RussianDrones…
Category: Cyber Security News
Law enforcement agencies worldwide successfully disrupted key malware families including Rhadamanthys Stealer, Venom RAT, and the Elysium botnet, as part of Operation Endgame. This operation resulted in the arrest of the Venom RAT suspect in Greece, takedown of over a thousand servers, and seizure of numerous domains, significantly impacting cybercriminal infrastructure….
Recent reports highlight that over half of new vulnerabilities are exploited within 48 hours, emphasizing the rapid pace of cyber threats. Attackers leverage automation and AI to swiftly weaponize disclosures, outpacing traditional patching methods. #CISA Known Exploited Vulnerabilities #AI in Exploit Development…
An international law enforcement operation successfully disrupted major cybercriminal tools, including the Rhadamanthys infostealer, VenomRAT, and the Elysium botnet. This coordinated effort led to arrests, domain seizures, and the dismantling of infrastructure responsible for infecting hundreds of thousands of computers globally. #VenomRAT #ElysiumBotnet…
A critical vulnerability in WatchGuard Firebox firewalls has been actively exploited in the wild, prompting CISA to issue urgent patching advice. The bug affects VPN capabilities and has resulted in a high CVSS score of 9.3. #CVE2025-9242 #WatchGuardFirebox #CISA #FirewareOS…
Cybercriminals targeting Oracle E-Business Suite have leaked data from multiple organizations, including the NHS and GlobalLogic, amid a widespread extortion campaign. The Cl0p ransomware group continues to publicly expose victim data, raising concerns over massive breaches and ongoing vulnerabilities. #OracleEBS #Cl0p #NHS #GlobalLogic…
A threat actor has created over 80,000 malicious NPM packages containing a self-replicating worm, flooding the registry with spam and junk packages. This campaign, named Big Red, disguises itself as legitimate software while potentially setting the stage for future malicious payloads. #NPM #IndonesianFoodsWorm…
Cybercriminals are increasingly designing targeted phishing campaigns that imitate trusted institutions, exploiting social trust and economic concerns. These sophisticated attacks, such as impersonations of government agencies and banks, can lead to identity theft and follow-up scams. #Phishing #SocialEngineering…
Cybersecurity researchers have uncovered the IndonesianFoods worm, a large-scale spam campaign flooding the npm registry with fake packages. This persistent attack leverages automated publishing to disrupt the ecosystem and damage trust in open-source platforms. #IndonesianFoodsWorm #npmSpamCampaign…
Law enforcement across multiple countries has dismantled the Rhadamanthys infostealer, VenomRAT, and Elysium botnet infrastructure, disrupting major cybercriminal operations. This coordinated effort resulted in the seizure of hundreds of thousands of infected computers, stolen credentials, and cryptocurrency wallets worth millions of euros. #Rhadamanthys #VenomRAT #ElysiumBotnet #OperationEndgame…
The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has issued a warning for government agencies to urgently patch a critical vulnerability (CVE-2025-9242) in WatchGuard Firebox firewalls. The flaw allows remote attackers to execute malicious code, and despite patches being released, thousands of vulnerable devices remain exposed worldwide. #CISA #WatchGuardFirebox
Cybersecurity researchers have uncovered a large-scale spam campaign called IndonesianFoods, flooding the npm registry with over 67,000 fake packages designed to overwhelm the ecosystem. The campaign employs a worm-like propagation mechanism, exploiting manual script execution to sustain continuous spam uploads, potentially monetizing via the TEA protocol. #IndonesianFoods #npmspam #TEAprotocol…
A critical security flaw has been added to the KEV catalog affecting WatchGuard Fireware OS versions, with active exploitation evidence. Over 54,300 devices remain vulnerable, prompting urgent patch recommendations, especially for U.S. government agencies. #CVE-2025-9242 #WatchGuardFireware…
Google and Mozilla have released updates for Chrome and Firefox to fix several high-severity vulnerabilities, including issues in the V8 JavaScript engine and WebGPU component. These patches enhance browser security by addressing numerous weaknesses, although no exploitation in the wild has been reported yet. #V8JavaScriptEngine #WebGPU #Firefox145 #Chrome142…
The US Treasury has imposed sanctions on Burma’s armed group DKBA and related companies involved in cyber scam activities targeting Americans. The initiative is part of a broader effort to combat organized crime, human trafficking, and cyber fraud networks in Southeast Asia. #DKBA #CyberScam #OFAC #SoutheastAsia…