Google fixes actively exploited Chrome zero-day vulnerability (CVE-2025-10585)
Google has released a security update for the Chrome stable channel to fix a zero‑day vulnerability (CVE-2025-10585) reported by its Threat Analysis Group (TAG) on…
Month: September 2025
SilentSync RAT Delivered via Two Malicious PyPI Packages Targeting Python Developers
Sep 18, 2025Ravie LakshmananMalware / Supply Chain Attack Cybersecurity researchers have discovered two new malicious packages in the Python Package Index (PyPI) repository that are…
Tiffany Data Breach Impacts Thousands of Customers
High-end jewelry retailer Tiffany and Company is notifying customers in the United States and Canada that their personal information was stolen by hackers. According to…
PureVPN Vulnerability Exposes Users IPv6 Address While Toggling Wi-Fi
PureVPN’s Linux clients leak users’ IPv6 addresses when Wi-Fi reconnections or system resumes occur, and also obliterate host firewall rules without restoring them upon disconnect. …
Insight Partners Confirms Data Breach Exposing Users’ Personal Data
Insight Partners, a global venture capital and private equity firm, has officially confirmed a significant data breach that exposed personal information of individuals connected to…
Fake Empire Podcast Invites Target Crypto Industry with macOS AMOS Stealer
A new phishing campaign is targeting developers and influencers in the crypto industry with fake interview requests that impersonate a popular Web3 podcast. The attackers…
Threat Actor Infests Hotels With New RAT
A threat actor known as RevengeHotels has expanded its arsenal with a new remote access trojan (RAT) in recent attacks targeting the hospitality sector, Kaspersky…
Scaling API Security Without the Complexity: Lessons from Early Adopters
APIs are a blessing and a curse. They’re the backbone of the modern internet. They also expose complex behaviors that are often poorly documented, stitched…
SonicWall Urges Customers to Reset Login Credentials After Configuration Backup Files Exposed
SonicWall has issued an urgent advisory urging all customers to perform an Essential Credential Reset after security researchers discovered that MySonicWall configuration backup files were…
Cybercriminals Have a Weird New Way to Target You With Scam Texts
Because blasters operate outside of traditional mobile networks, the messages they send are not subject to the security measures that have been put in place…
Splunk Publishes Guide to Spot Remote Work Fraud in Organizations
Splunk today unveiled a comprehensive guide designed to empower security teams to detect Remote Employment Fraud (REF) during the critical onboarding phase—when imposters have already…
Investors Pivot Toward Altcoins Amid Bitcoin Slowdown
In the current cycle, Bitcoin has anchored most of the capital inflow. In 2025, 66% of investors selected Bitcoin as their first digital purchase, driven…