The North Korean state-sponsored threat actor group, identified as TA444 (also known as BlueNoroff, Sapphire Sleet, and others), has unleashed a sophisticated malware campaign targeting […]
Author: cyberbytes
Over 100,000 WordPress Sites Exposed to Privilege Escalation via MCP AI Engine
The Wordfence Threat Intelligence team identified a severe security flaw in the AI Engine plugin, a widely used tool installed on over 100,000 WordPress websites. […]
New Android Malware Surge Hits Devices via Overlays, Virtualization Fraud and NFC Theft
Cybersecurity researchers have exposed the inner workings of an Android malware called AntiDot that has compromised over 3,775 devices as part of 273 unique campaigns. […]
Gamers Targeted! Fake Minecraft Mods Enable Attackers to Take Control of Your System
Minecraft, the wildly popular sandbox game with over 200 million monthly active players, has become the latest hunting ground for cybercriminals. Check Point Research recently […]
Silver Fox APT Uses Weaponized Medical Software to Deploy Remote Access Tools and Disable AV
The China-based advanced persistent threat (APT) group Silver Fox, also known as Void Arachne or The Great Thief of Valley, has been identified as the […]
Phishing campaign abuses Cloudflare Tunnels to sneak malware past firewalls
Another threat group has started abusing the Cloudflare Tunnel service to get phishing emails into targeted organizations without activating conventional defenses. Dubbed Serpentine#Cloud by the […]
US States with Notable Consumer Data Privacy Laws
Privacy issues have garnered significant attention from the state despite not typically being at the forefront of discussions regarding data regulation. The states included in […]
Foreign aircraft, domestic risks
Disclaimer: The content presented in this article is based exclusively on publicly available, unclassified information and open-source research. It does not draw upon any classified […]
Paragon Commercial Spyware Infects Prominent Journalists
An unnamed customer of Paragon’s Graphite product used the commercial spyware to target at least two prominent European journalists in recent months. ​The original article […]
Hackers Deploy Amatera Stealer Using Advanced Web Injection and Anti-Analysis Techniques
Proofpoint has uncovered a rebranded and significantly enhanced information stealer named Amatera Stealer, derived from the previously known ACR Stealer. Identified in early 2025, this […]