A sophisticated phishing attack is targeting Apple Pay users, employing deceptive emails and phone calls to steal sensitive financial information. This alarming trend, identified by Malwarebytes analysts, leverages urgency and the trust users place in the Apple brand to trick individuals into divulging critical login and payment details. The ultimate…

Cybersecurity researchers have uncovered a significant, widespread cyberattack campaign targeting cloud-native environments, a sophisticated operation designed to establish malicious infrastructure for subsequent criminal activities. The campaign, observed around December 25, 2025, utilizes a worm-driven approach to compromise exposed Docker APIs, Kubernetes clusters, Ray dashboards, and Redis servers. A critical component…

A cunning new supply chain attack is specifically targeting Information Technology (IT) administrators and Open Source Intelligence (OSINT) professionals. This sophisticated campaign is leveraging the trusted platform of GitHub to distribute a stealthy backdoor known as PyStoreRAT. The attackers are employing a high level of planning, using dormant accounts to…

Black Basta ransomware attackers have adopted a new and alarming tactic by embedding a “Bring Your Own Vulnerable Driver” (BYOVD) component directly within their ransomware payload. This strategic shift allows them to bypass modern security defenses more effectively by disabling security software before the encryption process begins. This development was…

Cybercriminals are increasingly exploiting trusted cloud infrastructure, with a recent wave of sophisticated phishing campaigns leveraging free Firebase developer accounts to distribute malicious content. This “living off the cloud” strategy allows attackers to bypass traditional security measures by operating from domains with established reputations, making their phishing pages harder to…

Geutebrück GmbH, a German manufacturer of video management systems, has achieved ISO 27001 certification for its information security management system. The certification validates the company’s commitment to robust data protection and cybersecurity practices across its product development and operational processes. This milestone is expected to bolster customer confidence, particularly for…

OpenClaw, the open-source AI agent framework formerly known as Moltbot and Clawdbot, has announced a significant partnership with Google-owned VirusTotal. This collaboration aims to enhance the security of its skill marketplace, ClawHub, by integrating VirusTotal’s advanced threat intelligence for scanning all uploaded skills. This move is part of a broader…

A significant surge in cyberattacks targeting macOS users has been identified, with a sophisticated malware known as Odyssey Stealer actively expanding its reach globally. This new wave of malicious activity, detected by security researchers, showcases enhanced stealth capabilities and a coordinated effort to compromise Apple computers by systematically pilfering sensitive…

A sophisticated cyber threat is leveraging cracked game installers as a distribution vector for credential theft, a campaign notably employing a stealthy multi-stage execution chain to bypass security controls. Dubbed RenEngine, this malicious loader, discovered embedded within seemingly legitimate Ren’Py game repacks and mods, has impacted an estimated 400,000 victims…

A sophisticated new malware framework, dubbed “DKnife,” has emerged, posing a significant threat to network security by targeting Linux-based routers and edge devices. Attributed to China-nexus threat actors, this malicious toolset allows attackers to establish a persistent foothold within a target’s infrastructure, enabling precise monitoring of data flow and manipulation…

A new banking trojan, identified as FvncBot, is actively targeting Android users, particularly mobile banking customers in Poland. This sophisticated malware, first observed on November 25, 2025, disguises itself as a legitimate security application supposedly from mBank, a prominent Polish financial institution. The primary goal of FvncBot is to infiltrate…

The Department of Homeland Security’s internal watchdog office has initiated an audit into the agency’s privacy practices, focusing on concerns that DHS and its components may be broadly collecting data and infringing on civil liberties through the use of facial recognition and other technologies. This audit began on February 4th,…