A China-aligned threat actor known as TA415 has been attributed to spear-phishing campaigns targeting the U.S. government, think tanks, and academic organizations utilizing U.S.-China economic-themed […]
Category: Cyber Security News
_Charlotte_Allen_Alamy.jpg?width=1280&auto=webp&quality=80&disable=upscale)
AI-Powered Sign-up Fraud Is Scaling Fast
The AI era means attackers are smarter, faster, and hitting you where you least expect it — your sign-up funnel. The original article found on […]
MuddyWater Deploys Custom Multi-Stage Malware Hidden Behind Cloudflare
Since early 2025, cybersecurity analysts have witnessed a marked evolution in the tactics and tooling of MuddyWater, the Iranian state-sponsored Advanced Persistent Threat (APT) group. […]
Microsoft OneDrive Auto-Sync Flaw Leaks Enterprise Secrets from SharePoint Online
A new report from Entro Labs reveals that one in five exposed secrets in large organizations can be traced back to SharePoint. Rather than a […]
BeaverTail Malware Delivered Through Malicious Repositories Targets Retailers
Tech Note – BeaverTail variant distributed via malicious repositories and ClickFix lure17 September 2025 – Oliver Smith, GitLab Threat Intelligence We have identified infrastructure distributing […]
Microsoft and Cloudflare execute ‘rugpull’ on massive phishing empire
Microsoft and Cloudflare executed a coordinated “rugpull” against one of the world’s most sophisticated phishing operations, seizing 338 websites and dismantling infrastructure that generated potentially […]
China-Aligned TA415 Exploits Google Sheets & Calendar for C2
China-aligned TA415 hackers have adopted Google Sheets and Google Calendar as covert command-and-control (C2) channels in a sustained espionage campaign targeting U.S. government, academic, and […]
New Magecart Attack Injects Malicious JavaScript to Steal Payment Data
A new Magecart-style campaign has emerged that leverages malicious JavaScript injections to skim payment data from online checkout forms. The threat surfaced after security researcher […]
Apple patches critical zero-day in ImageIO amid reports of targeted exploits
Apple has rolled out two new updates to patch a zero-day vulnerability in the ImageIO framework, which may have already been exploited in attacks against […]
Hackerangriff auf HEM expert
Von dem Cyberangriff auf den Elektrohändler HEM expert sind alle zehn Filialen betroffen. HEM expert Mössingen HEM expert hat kürzlich ein Rundschreiben an seine Kunden […]