A China-linked cyber-espionage campaign targeted organizations in Qatar almost immediately after the latest Middle East conflict escalated. Public reporting says the operation used war-themed lure…
A malicious npm package has surfaced under the name @openclaw-ai/openclawai, and researchers say it impersonates an OpenClaw installer while stealing passwords, browser data, SSH keys,…
Researchers have built a system called ScamAgent that can carry out realistic, multi-turn scam conversations with very little human input. The project, described in an…
Yes, attackers are using Microsoft Teams messages and Windows Quick Assist to fool employees into handing over control of their PCs. BlueVoyant says the latest…
Cybersecurity researchers have uncovered a phishing campaign using a fake website that imitates the popular macOS utility CleanMyMac. The malicious site distributes a macOS information-stealing…
A data-stealing malware called BoryptGrab is spreading through fake GitHub repositories that impersonate legitimate software downloads. Security researchers warn that the campaign targets Windows users…
Iran-linked cyber threat actors have intensified operations against U.S. organizations, raising concerns across the cybersecurity community. Security researchers say the advanced persistent threat group known…
A large phishing campaign distributing VIP Keylogger malware is targeting organizations and individuals worldwide. Security researchers warn that the threat uses fileless techniques, steganography, and…
Signal has confirmed that a wave of targeted phishing campaigns has led to account takeovers affecting some high-profile users, including journalists and government officials. The…
A Vietnam-linked cybercrime ecosystem has been tied to large-scale fake account registration campaigns targeting online platforms and service providers worldwide. Okta Threat Intelligence says a…
November 21, 2025
1 comment 
