Iran-linked threat group MuddyWater appears to have shifted tactics by using a Russian-speaking malware-as-a-service platform in a fresh campaign tied to Israeli targeting. New research…
Attackers are increasingly abusing GitHub and GitLab as trusted delivery channels for malware and credential phishing. New research from Cofense says this tactic has grown…
A new academic study warns that third-party AI API routers can become a dangerous supply-chain weak point for AI agents. These routers sit between agent…
A mobile espionage campaign has targeted people in the Middle East by disguising spyware as trusted messaging apps such as Signal, ToTok, and Botim. Researchers…
HPE has disclosed a high-severity vulnerability in Aruba Networking Private 5G Core On-Prem that could let attackers steal user credentials through a crafted login link.…
A high-severity flaw in GitHub Copilot Chat let attackers steal sensitive data from private repositories by abusing the assistant’s access to pull requests and repo…
U.S. cybersecurity and national security agencies are warning that Iranian-affiliated threat actors are actively targeting internet-facing Rockwell Automation and Allen-Bradley programmable logic controllers across critical…
A new phishing campaign is abusing Meta’s own Business Manager partner-request system to send convincing emails from facebookmail.com, a legitimate Meta-owned domain. That makes the…
A new Silver Fox malware campaign is using a fake Telegram Chinese language pack installer to deliver ValleyRAT on Windows systems. Public reporting says the…
Google has released Chrome 147 to the stable channel for Windows, Mac, and Linux with a long list of security fixes, including two critical flaws…
November 21, 2025
1 comment 
