LAC’s Cyber Emergency Center has identified a sophisticated cyberespionage campaign targeting Japanese shipping and transportation companies. The operation, orchestrated by a China-based threat actor in…
A massive, years-long international police operation has successfully taken down a huge cryptocurrency fraud and money laundering network in Europe. The entire investigation was a…
Throughout 2025, enterprise software providers have launched and spoken of agentic AI, claiming it will revolutionise the operating model of organisations. With agents available in…
American IT software company Ivanti warned customers today to patch a newly disclosed vulnerability in its Endpoint Manager (EPM) solution that could allow attackers to…
A sophisticated cyber campaign is exploiting search engine optimization (SEO) to distribute a malicious installer disguised as Microsoft Teams, targeting unsuspecting organizations. This campaign, active…
Security researchers have uncovered critical vulnerabilities in the Model Context Protocol (MCP) sampling feature that enable malicious servers to execute stealthy prompt injection attacks, drain…
Riyadh Air has collaborated with IBM Consulting to deliver what the pair claim is the world’s first airline that is artificial intelligence (AI) native. Launched…
Dive Brief: Two-thirds of organizations across the globe are planning to increase their investment in cyber risk prevention over the next 12 months, according to…
The GOLD BLADE threat group has shifted from pure espionage to a hybrid model that combines data theft with targeted ransomware attacks using a custom…
ActiveScan++, a widely used extension for the popular penetration testing tool Burp Suite, has released a significant upgrade. The scanner now includes specific detection capabilities…
Dec 09, 2025Ravie LakshmananCybersecurity / Malware Four distinct threat activity clusters have been observed leveraging a malware loader known as CastleLoader, strengthening the previous assessment…
A new malware implant called EtherRAT, deployed in a recent React2Shell attack, runs five separate Linux persistence mechanisms and leverages Ethereum smart contracts for communication…
