A North Korean–linked group has, for the first time, adopted EtherHiding — a technique that conceals malicious code inside smart contracts on public blockchains and swaps payloads on the fly. Google’s Threat Intelligence Team...
In October 2025, researchers at Kaspersky Lab uncovered a malicious package on the popular npm registry named https-proxy-utils, masquerading as a legitimate proxy utility. The trojanized module was engineered to deploy AdaptixC2 on compromised...
Microsoft has begun testing a new Copilot Actions feature in Windows 11. This experimental mode, available to Windows Insider participants in Copilot Labs, enables artificial intelligence to perform operations with local files and applications....
Researchers at VUSec have unveiled Training Solo, a study that calls into question the very foundations of defenses against Spectre-v2 attacks. Where isolation of prediction domains was long believed to eliminate the possibility of...
Gladinet has released a security update for its enterprise CentreStack solution that remedies a local file inclusion (LFI) vulnerability, CVE-2025-11371 (CVSS 6.2). Attackers have been actively exploiting this flaw as a zero-day since late...
An advertisement has surfaced on the dark web offering three terabytes of data allegedly stolen from two major Russian SMS aggregators. The individual behind the post, using the pseudonym ByteToBreach, claims that the leak...
In recent weeks, a surge of phishing campaigns has emerged in which attackers impersonate popular password managers — LastPass, Bitwarden, and 1Password. Their objective is to deceive users into revealing their master password, the...
Microsoft has released its Digital Defense Report 2025, documenting a sharp surge in attacks targeting digital identities, the misuse of artificial intelligence in cybercrime, and the heightened activity of state-sponsored threat groups. According to...
Microsoft has unveiled a new tool designed to assess the effectiveness of artificial intelligence in cybersecurity. The platform, named ExCyTIn-Bench, recreates conditions closely resembling those of a threat monitoring center, enabling evaluations of how...
The October security updates for Windows 11 unexpectedly disrupted local HTTP/2 connections, causing applications to malfunction when attempting to communicate with services running on “127.0.0.1.” The issue surfaced immediately after installing the cumulative update...
The U.S. cybersecurity agency CISA has added a critical, actively exploited flaw in Adobe Experience Manager to its Known Exploited Vulnerabilities catalog: a configuration vulnerability, CVE-2025-54253, rated as a CVSS 10, which permits arbitrary...
Satellite communication channels used by government agencies, military organizations, corporations, and mobile operators have become the source of a massive global data leak. Researchers from the University of California, San Diego and the University...
