Ivanti EPMM Hit by Two Actively Exploited 0day Vulnerabilities
Ivanti EPMM users urgently need to patch against actively exploited 0day vulnerabilities (CVE-2025-4427, CVE-2025-4428) that enable pre-authenticated remote…
Pro-Ukraine Group Targets Russian Developers with Python Backdoor
ReversingLabs discovers dbgpkg, a fake Python debugger that secretly backdoors systems to steal data. Researchers suspect a pro-Ukraine…
Hackers Now Targeting US Retailers After UK Attacks, Google
Hackers from the Scattered Spider group, known for UK retail attacks, are now targeting US retailers, Google cybersecurity…
Fileless Remcos RAT Attack Evades Antivirus Using PowerShell Scripts
A new wave of attacks uses PowerShell and LNK files to secretly install Remcos RAT, enabling full remote…
North Korean Hackers Stole $88M by Posing as US Tech Workers
Flashpoint uncovers how North Korean hackers used fake identities to secure remote IT jobs in the US, siphoning…
‘Admin’ and ‘123456’ Still Among Most Used Passwords in FTP Attacks
Weak passwords continue to be a major vulnerability for FTP servers. Specops’ latest report highlights the most frequent…
Apple to Pay $95 Million in Siri Snooping Lawsuit – Here’s How to Apply
Did Siri record you? Apple is paying $95 million over Siri snooping allegations. Find out if you’re eligible…
Job Seekers Targeted as Scammers Pose as Government Agencies on WhatsApp
Scammers impersonate government agencies on WhatsApp to target job seekers with fake offers, phishing sites, and identity theft…
PrepHero-Linked Database Exposed Data of 3M Students and Coaches
A security lapse on PrepHero, a college recruiting platform, exposed millions of unencrypted records, including sensitive personal details…
iClicker Website Hacked with Fake CAPTCHA in ClickFix Attack
Popular student engagement platform iClicker’s website was compromised with a ClickFix attack. A fake “I’m not a robot”…