New research from Oasis Security has uncovered a campaign reportedly tied to a suspected Malaysian government operation utilizing concealed command and control infrastructure for several years. This activity indicates an enduring espionage effort characterized by sophisticated methods to disguise backend…
AI-Enhanced Cyber Attack Landscape: Insights from Recent Incidents On December 4, 2025, authorities in Osaka arrested a 17-year-old for executing a cyberattack that extracted personal information from over 7 million users of Kaikatsu Club, Japan’s largest internet cafe chain. This…
Critical Vulnerability Discovered in WhatsApp: An Emerging Threat A recently patched security vulnerability within WhatsApp poses notable risks for Android users. This issue, identified as CVE-2019-11932, is a double-free memory corruption bug that exists not in WhatsApp’s code but within…
Surge in AI-Generated Vulnerability Reports Causes Strain on Bug Bounty Programs In recent developments within the cybersecurity landscape, a significant uptick in low-quality vulnerability reports generated by artificial intelligence has prompted software companies to reassess their bug bounty initiatives. Notably,…
A recent active phishing campaign, identified under the codename VENOMOUS#HELPER, has been reported to be targeting various organizations since at least April 2025. This malicious endeavor involves legitimate Remote Monitoring and Management (RMM) software to facilitate sustained remote access to…
Recent discoveries in the realm of cybersecurity have unveiled a significant vulnerability within Signal Private Messenger, an application renowned for its robust security features. This discovery, made by Natalie Silvanovich of Google Project Zero, delineates a logical flaw affecting the…
Microsoft has revealed a comprehensive credential theft operation that exploited themes related to code of conduct, utilizing legitimate email services to redirect users to domains controlled by attackers and extract authentication tokens. This multi-faceted campaign occurred between April 14 and…
New vBulletin Patch Addresses Critical Security Vulnerabilities vBulletin, a popular forum software utilized by over 100,000 websites, has released a crucial security patch addressing three significant vulnerabilities that could lead to severe security breaches. The company previously patched a zero-day…
As the software industry has evolved over recent decades to enhance product security, the rapid adoption of artificial intelligence (AI) threatens to undermine these advancements. Companies are rapidly implementing self-hosted large language model (LLM) infrastructures, driven by the potential of…
Microsoft Unveils October 2019 Security Updates, Addressing 59 Vulnerabilities Today, Microsoft has initiated the rollout of its October 2019 Patch Tuesday security updates, targeting 59 identified vulnerabilities within its Windows operating systems and affiliated software. Out of these, nine vulnerabilities…
