Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE Malware post, april 4, 2025april 7, 2025 Ivanti has disclosed details of a now-patched critical security vulnerability impacting its Connect Secure product that has come under active exploitation in the wild. The vulnerability, tracked as CVE-2025-22457 (CVSS score: 9.0), concerns a case of a stack-based buffer overflow that could be exploited to execute arbitrary code on affected systems. Continue Reading
Six Governments Likely Use Israeli Paragon Spyware to Hack IM Apps and Harvest Data post, maart 20, 2025augustus 21, 2025 The governments of Australia, Canada, Cyprus, Denmark, Israel, and Singapore are likely customers of spyware developed by Israeli company Paragon Solutions, according to a new report from The Citizen Lab. Paragon, founded in 2019 by Ehud Barak and Ehud Schneorson, is the maker of a surveillance tool called Graphite that’s capable of… Continue Reading
Undocumented commands found in Bluetooth chip used by a billion devices post, maart 8, 2025maart 10, 2025 The ubiquitous ESP32 microchip made by Chinese manufacturer Espressif and used by over 1 billion units as of 2023 contains undocumented commands that could be leveraged for attacks. The undocumented commands allow spoofing of trusted devices, unauthorized data access, pivoting to other devices on the network, and potentially establishing long-term persistence. Continue Reading
Over 1,000 WordPress Sites Infected with JavaScript Backdoors Enabling Persistent Attacker Access post, maart 6, 2025maart 10, 2025 Over 1,000 websites powered by WordPress have been infected with a third-party JavaScript code that injects four separate backdoors. “Creating four backdoors facilitates the attackers having multiple points of re-entry should one be detected and removed,” c/side researcher Himanshu Anand said in a Wednesday analysis. The malicious JavaScript code has been found… Continue Reading
Sticky Werewolf Uses Undocumented Implant to Deploy Lumma Stealer in Russia and Belarus post, februari 28, 2025 The threat actor known as Sticky Werewolf has been linked to targeted attacks primarily in Russia and Belarus with the aim of delivering the Lumma Stealer malware by means of a previously undocumented implant. Cybersecurity company Kaspersky is tracking the activity under the name Angry Likho, which it said bears a “strong… Continue Reading
Hackers Exploit Signal’s Linked Devices Feature to Hijack Accounts via Malicious QR Codes post, februari 19, 2025februari 24, 2025 Multiple Russia-aligned threat actors have been observed targeting individuals of interest via the privacy-focused messaging app Signal to gain unauthorized access to their accounts. “The most novel and widely used technique underpinning Russian-aligned attempts to compromise Signal accounts is the abuse of the app’s legitimate ‘linked devices’ feature that enables… Continue Reading
A Hacker Group Within Russia’s Notorious Sandworm Unit Is Breaching Western Networks post, februari 12, 2025juli 3, 2025 Over the last decade, the Kremlin’s most aggressive cyberwar unit, known as Sandworm, has focused its hacking campaigns on tormenting Ukraine, even more so since Russian president Vladimir Putin’s full-scale invasion of Russia’s neighbor. Now Microsoft is warning that a team within that notorious hacking group has shifted its targeting, indiscriminately working… Continue Reading
New Jailbreak Techniques Expose DeepSeek LLM Vulnerabilities, Enabling Malicious Exploits post, januari 31, 2025 Recent revelations have exposed critical vulnerabilities in DeepSeek’s large language models (LLMs), particularly DeepSeek-R1, through advanced jailbreaking techniques. These exploits, including “Bad Likert Judge,” “Crescendo,” and “Deceptive Delight,” have demonstrated the ease with which malicious actors can bypass safety measures to extract harmful outputs or generate malicious code. Continue Reading
PrintNightmare Aftermath: Windows Print Spooler is Better. What’s Next? post, januari 29, 2025januari 30, 2025 While Microsoft has boosted the security of Windows Print Spooler in the three years since the disclosure of the PrintNightmare vulnerability, the service remains a spooky threat that organizations cannot afford to ignore. The 2021 PrintNightmare vulnerability exposed multiple deep-rooted security flaws in Microsoft’s Print Spooler service, a core Windows… Continue Reading
Apple Patches Actively Exploited Zero-Day Affecting iPhones, Macs, and More post, januari 28, 2025januari 30, 2025 Apple has released software updates to address several security flaws across its portfolio, including a zero-day vulnerability that it said has been exploited in the wild. The vulnerability, tracked as CVE-2025-24085, has been described as a use-after-free bug in the Core Media component that could permit a malicious application already installed on a device… Continue Reading