Attackers exploited another Gladinet Triofox zero-day (CVE-2025-12480)
11
Nov
2025

Attackers exploited another Gladinet Triofox zero-day (CVE-2025-12480)

Attackers have exploited a now-fixed vulnerability (CVE-2025-12480) in the Gladinet Triofox secure file sharing and remote access platform while it…

iPhone displaying Apple logo
11
Nov
2025

Stolen iPhones are locked tight, until scammers phish your Apple ID credentials

One of the reassuring things about owning an iPhone was knowing you could lock it if it got lost or…

Android Trojan 'Fantasy Hub' Malware Service Turns Telegram Into a Hub for Hackers
11
Nov
2025

Android Trojan ‘Fantasy Hub’ Malware Service Turns Telegram Into a Hub for Hackers

Cybersecurity researchers have disclosed details of a new Android remote access trojan (RAT) called Fantasy Hub that’s sold on Russian-speaking…

National Highways to get more out of its data through single platform
11
Nov
2025

National Highways to get more out of its data through single platform

National Highways has penned an extension to its IT services contract with CGI for an additional five years as part…

Zoom Workplace for Windows Vulnerability Allow Users to Escalate Privilege
11
Nov
2025

Zoom Workplace for Windows Vulnerability Allow Users to Escalate Privilege

A security vulnerability has been discovered in Zoom Workplace VDI Client for Windows that could allow attackers to gain elevated…

WinRAR Vulnerability Exploited by APT-C-08 to Target Government Agencies
11
Nov
2025

WinRAR Vulnerability Exploited by APT-C-08 to Target Government Agencies

The notorious APT-C-08 hacking group, also known as BITTER, has been observed weaponizing a critical WinRAR directory traversal vulnerability (CVE-2025-6218) to…

GNU Coreutils 9.9 brings fixes and updates across essential tools
11
Nov
2025

GNU Coreutils 9.9 brings fixes and updates across essential tools

GNU Coreutils is the backbone of many enterprise Linux environments. It provides the basic file, shell, and text utilities that…

ugly phishing attempt
11
Nov
2025

How credentials get stolen in seconds, even with a script-kiddie-level phish

This attempt to phish credentials caught our attention, mostly because of its front-end simplicity. Even though this is a script-kiddie-level…

Researchers Detect Malicious npm Package Targeting GitHub-Owned Repositories
11
Nov
2025

Researchers Detect Malicious npm Package Targeting GitHub-Owned Repositories

Nov 11, 2025Ravie LakshmananSoftware Supply Chain / Malware Cybersecurity researchers have discovered a malicious npm package named “@acitons/artifact” that typosquats…

Who is really accountable for the online safety gap?
11
Nov
2025

Who is really accountable for the online safety gap?

One in five people in the UK say they will only act on a message if it comes from a…

WatchGuard Firebox Firewall Vulnerability Let Attackers Gain Unauthorized SSH Access
11
Nov
2025

WatchGuard Firebox Firewall Vulnerability Let Attackers Gain Unauthorized SSH Access

A critical vulnerability in WatchGuard Firebox firewalls could allow attackers to gain complete administrative access to the devices without any…

SAP Releases Security Update to Fix Critical Code Execution and Injection Flaws
11
Nov
2025

SAP Releases Security Update to Fix Critical Code Execution and Injection Flaws

SAP has released a significant security update addressing 18 new vulnerabilities across its enterprise software portfolio, including several critical flaws…