A sophisticatedcryptocurrency scams campaign is targeting users across Asia, with a particular focus on Japan, exhibiting alarming losses reaching up to ¥10 million per victim. This operation uniquely merges malvertising with ‘pig butchering’ social engineering tactics, creating a potent and highly effective attack vector for cybercriminals. The modus operandi begins…

North Korean threat actors are orchestrating a sophisticated malware campaign dubbed “Contagious Interview,” targeting IT professionals in the cryptocurrency, Web3, and artificial intelligence sectors. This operation deploys remote access backdoors and fake MetaMask wallet extensions with the express intent of stealing digital assets from unsuspecting victims. The attackers cunningly disguise…

A sophisticated social engineering campaign is targeting macOS developers by leveraging fake Homebrew installation pages to deploy Cuckoo Stealer, a potent credential-harvesting malware. This attack, identified by cybersecurity researchers, exploits the trust developers place in legitimate software workflows, specifically the widely used package manager Homebrew. The campaign employs the “ClickFix”…

A sophisticated cyberattack campaign employing a deceptive “ClickFix” social engineering tactic has emerged, leading to widespread enterprise-wide malware infections. This advanced threat vector tricks users into executing malicious code by presenting a fake technical verification prompt, as demonstrated by a recent incident where a large Polish organization suffered a significant…

Two critical zero-day vulnerabilities in Ivanti Endpoint Manager Mobile (EPMM) have been actively exploited in the wild, posing a significant threat to corporate networks globally. These vulnerabilities, identified as CVE-2026-1281 and CVE-2026-1340, allow unauthenticated attackers to execute arbitrary code remotely on targeted servers without requiring any credentials or user interaction.…

A critical security flaw discovered in the Grandstream GXP1600 series of VoIP phones, tracked as CVE-2026-2329, has the potential to allow attackers unauthorized root access and remote code execution. This vulnerability, rated with a severe CVSS score of 9.3 out of 10, affects millions of enterprise and small business communication…

A sophisticated phishing campaign is currently targeting users of the popular cryptocurrency wallet, MetaMask. Attackers are employing deceptive tactics by sending emails that contain forged security incident reports. These fabricated documents aim to create a sense of urgency and fear, manipulating recipients into clicking malicious links and compromising their MetaMask…

A new variant of the SysUpdate malware has been identified, posing a significant threat to Linux systems with its advanced and encrypted command-and-control (C2) traffic. Discovered during a Digital Forensics and Incident Response (DFIR) engagement, this sophisticated Linux malware utilizes an unknown, obfuscated packer, making traditional analysis methods difficult. The…

Multiple security vulnerabilities have been identified in four widely-used Microsoft Visual Studio Code (VS Code) extensions, according to cybersecurity researchers. These flaws, if exploited, could enable malicious actors to steal sensitive local files and execute arbitrary code remotely on a developer’s machine, posing a significant threat to software development environments.…

A new and sophisticated malware campaign, dubbed ‘CRESCENTHARVEST’, has been identified, leveraging the ongoing geopolitical unrest in Iran to target dissidents and protest supporters. This cyberespionage operation employs social engineering tactics to deploy a dual-purpose threat capable of functioning as both a remote access trojan (RAT) and an advanced information…

A new and sophisticated malware loader, dubbed “Foxveil,” has emerged, actively exploiting legitimate cloud platforms like Cloudflare, Netlify, and Discord to evade detection. First observed in August 2025 and since evolving into two distinct variants, Foxveil represents a significant concern for cybersecurity professionals as it leverages trusted infrastructure for malicious…

Notepad++ has rolled out a critical security update, version 8.9.2, to address vulnerabilities that allowed a sophisticated Chinese threat actor to compromise its software update mechanism. This attack enabled the malicious actors to selectively distribute malware to targeted users, highlighting a significant risk to application security. The update introduces a…