⚡ Weekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & MoreThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2025Vulnerability in the wildCVE-2025-14174CVE-2025-43529CVE-2025-6218+43 CVEs60
North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT MalwareThe Hacker News·Dec 10, 07:33 UTC · Dec 10, 2025MalwareCVE-2025-5518260
New Onapsis platform updates enhance visibility and protection across SAP landscapesHelp Net Security·Nov 21, 00:00 UTC · Nov 21, 2025Ransomware60
North Korean Hackers Turn JSON Services into Covert Malware Delivery ChannelsThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2025Malware42
Researchers Expose GhostCall and GhostHire: BlueNoroff's New Malware ChainsThe Hacker News·Oct 30, 09:40 UTC · Oct 30, 2025Malware142
North Korean Hackers Combine BeaverTail and OtterCookie into Advanced JS MalwareThe Hacker News·Oct 19, 06:05 UTC · Oct 19, 2025Malware42
BeaverTail and OtterCookie evolve with a new Javascript moduleCisco Talos·Oct 16, 10:00 UTC · Oct 16, 2025Malware130
From Phishing to Malware: AI Becomes Russia's New Cyber Weapon in War on UkraineThe Hacker News·Oct 9, 09:10 UTC · Oct 9, 2025MalwareCVE-2023-43770CVE-2024-37383CVE-2025-49113+2 CVEs60
ComicForm and SectorJ149 Hackers Deploy Formbook Malware in Eurasian CyberattacksThe Hacker News·Sep 22, 15:40 UTC · Sep 22, 2025Malware30
FileFix Campaign Using Steganography and Multistage PayloadsInfosecurity Magazine·Sep 17, 16:45 UTC · Sep 17, 2025Threat actor in the wild60
New FileFix Variant Delivers StealC Malware Through Multilingual Phishing SiteThe Hacker News·Sep 17, 04:13 UTC · Sep 17, 2025Malware30
DevOps in the cloud and what is putting your data at riskHelp Net Security·Aug 22, 00:00 UTC · Aug 22, 2025Ransomware57
North Korea-linked Supply Chain Attack Targets Developers with 35 Malicious npm PackagesThe Hacker News·Jun 25, 09:20 UTC · Jun 25, 2025Vulnerability42
New Malware Campaign Uses Cloudflare Tunnels to Deliver RATs via Phishing ChainsThe Hacker News·Jun 19, 16:44 UTC · Jun 19, 2025Malware30
Identifying high-risk APIs across thousands of code repositoriesHelp Net Security·Jun 12, 00:00 UTC · Jun 12, 2025Vulnerability55
Fake Bitdefender Site Spreads Trio of Malware ToolsInfosecurity Magazine·May 28, 16:00 UTC · May 28, 2025Malware42
Crooks use a fake antivirus site to spread Venom RAT and a mix of malwareSecurity Affairs·May 28, 09:02 UTC · May 28, 2025Malware30
OtterCookie v4 Adds VM Detection and Chrome, MetaMask Credential Theft CapabilitiesThe Hacker News·May 15, 00:00 UTC · May 15, 2025Data breach57
North Korean Hackers Target Freelance Developers in Job Scam to Deploy MalwareThe Hacker News·Feb 21, 09:33 UTC · Feb 21, 2025Malware42
Hackers pose as employers to steal crypto, login credentialsHelp Net Security·Feb 20, 00:00 UTC · Feb 20, 2025Malware42
North Korea actors use OtterCookie malware in Contagious Interview campaignSecurity Affairs·Dec 28, 07:00 UTC · Dec 28, 2024Malware42
Hackers Exploit Webview2 to Deploy CoinLurker Malware and Evade Security DetectionThe Hacker News·Dec 17, 13:56 UTC · Dec 17, 2024Malware30
Cybercriminals Exploit Popular Game Engine Godot to Distribute CrossThe Hacker News·Dec 10, 04:50 UTC · Dec 10, 2024Malware30
Bitdefender GravityZone XDR enhancements protect business data stored in the cloudHelp Net Security·Dec 5, 00:00 UTC · Dec 5, 2024Threat actor60
Hackers find 15,000 credentials by scanning for git configurationCyberScoop·Oct 30, 14:00 UTC · Oct 30, 2024Exploit / PoC60
Product showcase: Shift API security left with StackHawkHelp Net Security·Oct 30, 00:00 UTC · Oct 30, 2024Vulnerability55
How to secure software in a DevOps worldHelp Net Security·Sep 24, 09:58 UTC · Sep 24, 2024Vulnerability55
Week in review: Tips for starting your cybersecurity career, Patch Tuesday forecastHelp Net Security·Aug 11, 00:00 UTC · Aug 11, 2024VulnerabilityCVE-2024-42219CVE-2024-42218CVE-2024-38856+2 CVEs160
There is no real fix to the security issues recently found in GitHub and other similar softwareCisco Talos·Aug 1, 18:00 UTC · Aug 1, 2024RansomwareCVE-2018-082460
SCW Trust Agent measures developers’ security competencies for code commitsHelp Net Security·Jul 23, 00:00 UTC · Jul 23, 2024Policy & legal30
Developer errors lead to long-term exposure of sensitive data in Git reposHelp Net Security·Jun 26, 00:00 UTC · Jun 26, 2024Vulnerability55
Cyber Criminals Exploit GitHub and FileZilla to Deliver Malware CocktailThe Hacker News·May 21, 11:11 UTC · May 21, 2024Malware42
GitCaught campaign relies on Github and Filezilla to deliver multiple malwareSecurity Affairs·May 20, 14:20 UTC · May 20, 2024Malware30
Russian Actors Weaponize Legitimate Services in MultiInfosecurity Magazine·May 14, 15:00 UTC · May 14, 2024Malware30
Week in review: PoCs allow persistence on Palo Alto firewalls, Okta credential stuffing attacksHelp Net Security·May 5, 00:00 UTC · May 5, 2024Data breach in the wildCVE-2024-3400160
Alleged China-based hackers using ‘Cuttlefish’ malware platform to target TurkeyThe Record·May 2, 19:40 UTC · May 2, 2024Malware42
New Cuttlefish Malware Hijacks Router Connections, Sniffs for Cloud CredentialsThe Hacker News·May 2, 12:13 UTC · May 2, 2024Malware30
New SOHO router malware aims for cloud accounts, internal company resourcesHelp Net Security·May 2, 00:00 UTC · May 2, 2024Malware30