A new malware campaign dubbed PHALTBLYX is targeting the hospitality sector with sophisticated social engineering tactics and advanced evasion techniques. This emerging threat uses convincing phishing emails and fake booking websites to trick users into executing malicious code, potentially leading to significant data breaches and system compromise. The attack chain,…

Cybersecurity researchers have identified a sophisticated malware campaign that exploits a shared commodity loader across multiple threat actor groups. This operation is specifically targeting manufacturing and government organizations in Italy, Finland, and Saudi Arabia, employing precision-engineered attacks designed to pilfer industrial data and compromise sensitive administrative credentials. The campaign highlights…

A sophisticated phishing campaign is actively targeting WordPress administrators with convincing fake domain renewal notices, aiming to steal sensitive credit card information and two-factor authentication codes. These deceptive emails, designed to mimic legitimate WordPress.com renewal reminders, are redirecting unsuspecting users to fraudulent payment portals, where their financial data is then…

A significant cybersecurity threat, identified as CloudEyE, a Malware-as-a-Service (MaaS) downloader and cryptor, has been actively targeting users, primarily in Central and Eastern Europe. In the latter half of 2025, cybersecurity researchers observed a dramatic surge in infections, with indications that over 100,000 users worldwide have been affected by this…

The notorious Scattered Lapsus$ Hunters threat group has resurfaced after a period of dormancy, reemerging with a new Ransomware-as-a-Service (RaaS) platform dubbed ‘ShinySp1d3r’ and an aggressive insider recruitment drive. This marks a significant strategic shift for the collective, known for its disruptive supply chain attacks, as they now pivot towards…

A sophisticated cyberattack, leveraging the stealthy Tuoni command-and-control (C2) malware framework, recently targeted a major U.S. real estate firm. The attack, uncovered by Morphisec Threat Labs, marks a significant shift in attacker tactics, moving away from rapid infiltration towards prolonged, undetected presence within target networks. This new approach involves stealing…

Developers using the @adonisjs/bodyparser npm package are urged to update immediately following the discovery of a critical security vulnerability. This flaw, identified as CVE-2026-21440, could permit remote attackers to write arbitrary files to a server if successfully exploited, posing a significant risk to web applications and API servers built with…

Dozens of global enterprises across critical sectors have fallen victim to a sophisticated cyberattack campaign leveraging leaked cloud credentials sourced from infostealer malware. A threat actor known as “Zestix,” operating under the alias “Sentap,” has systematically gained unauthorized access to cloud storage platforms like ShareFile, Nextcloud, and OwnCloud, compromising approximately…

A critical security vulnerability, designated CVE-2025-68668, has been identified in the popular open-source workflow automation platform, n8n. This flaw could allow an authenticated attacker to execute arbitrary system commands on the host machine running n8n, posing a significant risk to users of the platform. The vulnerability has been rated 9.9…

A sophisticated piece of malware known as GravityRAT, a potent remote access trojan, has been actively targeting government and military entities since 2016. Initially designed exclusively for Windows systems, this threat has evolved significantly, now posing a risk to Windows, Android, and macOS users, spreading through deceptive applications and phishing…

Recent cybersecurity findings reveal a sophisticated threat actor is actively exploiting multiple outdated FortiWeb appliances to deploy the Sliver Command and Control (C2) framework. This attack campaign highlights a growing trend where adversaries leverage open-source offensive tools to gain and maintain persistent access within compromised networks, often bypassing traditional security…

The year 2026 has commenced with a continuation of persistent cybersecurity pressures, as threat actors are stealthily exploiting familiar vulnerabilities to compromise systems. Recent reports highlight a prevailing trend of steady abuse of trust, targeting everyday user actions like clicking on updates, extensions, and messages. This article recaps key security…