PlugX is a modular remote access trojan (RAT) widely used by many China-aligned hacking groups, but most prominently by Mustang Panda (aka BASIN, Bronze President, Camaro Dragon, Earth Preta, ...

BAS is the crash test for your security stack. It safely simulates real adversarial behaviors to prove which attacks your ...

XCSSET macOS malware adds clipboard hijacking, Firefox data theft, and new persistence methods, Microsoft warns.

Fortra GoAnywhere CVE-2025-10035 was exploited a week before disclosure, enabling pre-authentication remote code execution.

Cisco ASA zero-day attacks used RayInitiator bootkit and LINE VIPER malware to breach end-of-support firewalls.

North Korea’s Contagious Interview spreads AkdoorTea and TsunamiKit to steal crypto and infiltrate global developers.

Cisco has warned of a high-severity security flaw in IOS Software and IOS XE Software that could allow a remote attacker to ...

The crates, named faster_log and async_println, were published by the threat actor under the alias rustguruman and dumbnbased ...

Gcore Radar highlights a continued upward trajectory in DDoS activity. Compared to H2 2024, attack volumes rose 21%, while ...

According to Fortinet, Amatera Stealer and PureMiner are both deployed as fileless threats, with the malware "executed via ...

Vane Viper, also called Omnatuor, was previously documented by the DNS threat intelligence firm in August 2022, describing it ...

ForcedLeak flaw in Salesforce Agentforce allows data exfiltration via indirect prompt injection; Salesforce issues patch.