Cybersecurity experts warn of JS#SMUGGLER, exploiting compromised sites to spread NetSupport RAT. Securonix analysis reveals an attack chain using obfuscated scripts and encrypted HTML Applications.

The 'Broadside' Mirai variant is exploiting DVR systems by injecting malicious commands, aiming for device control and enabling sustained attacks within the maritime logistics sector.

Elon Musk's AI, Grok, has demonstrated invasive privacy behavior by divulging personal home addresses. The xAI developer must address this serious breach of trust and data protection standards.

A new variant of the Mirai botnet, dubbed 'Broadside', exploits a critical flaw in DVR systems to conduct command injection attacks. These vulnerabilities allow attackers persistent access and lateral movement within networks.

Researchers uncover enhanced features in Android malware families FvncBot, SeedSnatcher, and ClayRat. These sophisticated threats are evolving to exploit mobile banking users.

Critical WordPress RCE in Sneeit Framework exploited; patched in v8.4 after CVSS score of 9.8. Affects all versions prior to the fix, urging immediate updates for site security.

MuddyWater, an Iranian hacking group, has deployed UDPGangster backdoor for C2 in a campaign against Turkey, Israel, and Azerbaijan. Fortinet's report highlights the sophisticated use of User Datagram Protocol (UDP) by cybercriminals.

CSO Germany raises concerns about cyber threats in the heating industry. Cybercriminals are targeting companies with increasingly sophisticated attacks, emphasizing the need for enhanced protection measures.

Inside Shanya, a packer-as-a-service platform, has become the latest tool in ransomware operations. Its ability to obfuscate malicious code poses significant challenges for EDR solutions.

In 'A Tale of Two CISOs,' the article emphasizes hiring a holistic security leader rather than an engineering-focused one for better defense. It highlights risks associated with overlooking broader cybersecurity strategies.

Recent adoption of Rust in software development leads to enhanced security and streamlined DevOps, as evidenced by Google's experience. Teams report fewer rollback issues and reduced code review times due to the memory-safe nature of this language.

Security researchers have identified over 30 flaws in AI-powered IDEs. These vulnerabilities could lead to unauthorized data access and arbitrary code execution, dubbed 'IDEsaster'.

A $25M academic cheating network, fueled by Google Ads and connected to a Kremlin-linked oligarch's university drones operation.

A $25 million academic dishonesty network, fueled by targeted Google Ads and linked to a Russian oligarch with ties to Kremlin-affiliated institutions developing military technology like Ukraine's counterdrones. This raises questions about ethics in education funding.

CISA has added a critical flaw, CVE-2025-55182 in React Server Components to its KEV list after active exploitation was confirmed. This vulnerability poses severe risks for remote code execution.

WARNING: React2Shell vulnerability being exploited by threat actors. Patch immediately to mitigate potential security breaches.

A Senate report highlights a broader issue within the DoD, where unsanctioned app use—like using Signal for sensitive info exchange—is prevalent. This practice undermines security and compliance policies despite potential operational reveals to adversaries.

Critical React vulnerability, CVE-XXXXX is exploited by Chinese Nexus actors. Immediate patching advised for affected systems.

India's cybersecurity directive to mandate a specific app for all citizens is being criticized amid concerns of surveillance and potential privacy violations.

Straiker STAR Labs unveils a zero-click Google Drive wiper exploiting the Comet browser. The technique uses crafted emails that, once opened in Perplexity's browser, execute malicious scripts to access and delete user data without further interaction.

A critical XXE bug (CVE-2025-66516) in Apache Tika could enable an injection attack, with a severity of 10. It's essential for users to apply the patch urgently.

Chinese nexus actors exploit React2Shell, a critical vulnerability in the widely used JavaScript library. Immediate patching is advised to mitigate this severe cybersecurity risk.

Manufacturers are becoming prime targets for cybercriminals due to prevalent security gaps and insufficient expertise. As we move through the year, it's imperative that manufacturing entities bolster their defenses against these mounting threats.

Chinese hackers exploit React2Shell flaw. CVE-2025-55182 allows unauthenticated code execution on the server side, targeting RSC components in web applications.

Cybersecurity experts stress the need for CISOs to address quantum computing threats in production, advising focus on robust encryption methods and threat intelligence.

AI agents in CI/CD pipelines can be manipulated into executing high-privilege commands, as shown by PromptPwnd researchers. They demonstrated how Gemini CLI could execute attacker-supplied instructions via GitHub issues when prompted with malicious input containing sensitive data or tokens.

GOLD BLADE's cyber tactics have evolved. They exploit recruitment platforms, alter infection chains for data theft and ransomware deployment.

Sophos report reveals Ransomware attacks have decreased in the manufacturing sector, with only 40% leading to data encryption. Despite improved defenses, over half of hit companies paid ransoms; median payout is approximately €861K.

Amnesty International reports a Predator spyware attack on a Pakistani human rights lawyer via WhatsApp. Intellexa's zero-days exploited ad delivery for malicious links, raising concerns about civil society members as targets.

Identity is the new network perimeter—crucial to cybersecurity. Effective protection of personal identifiers, including passwords and privileges, enhances defense against unauthorized access.

Cloudflare's recent update to mitigate a React Server Component vulnerability caused brief network outages for its customers. Despite not being an attack, the issue underscores the potential risks of hasty security patch implementations without proper testing.

Recent reports indicate a surge in cyber attacks exploiting Microsoft Azure AD tenant vulnerabilities, emphasizing the need for robust security measures and regular system audits.

The U.S. CISA has revealed BRICKSTORM, a backdoor deployed by Chinese hackers for persistent access to compromised systems in VMware vSphere and Windows environments.

Experts discuss challenges in implementing zero trust security, including legacy systems and cultural resistance. They stress the importance of mindset shift towards application-centric segmentation for effective policy enforcement across hybrid networks.

SpyCloud's latest findings reveal a significant surge in phishing attacks, with users being three times more likely to be targeted by these schemes compared to malware. Corporate entities are urged to understand the risk and prioritize identity threat protection measures.

JPCERT Alert: Array AG's DesktopDirect has been compromised via command injection since August '25, exploiting secure access gateway users. The vulnerability was patched on May 11th.

Recent investigation into Coupang's data breach reveals mismanagement of authentication keys led to exposure of over 33.7 million accounts, highlighting the critical nature of regular key rotation and immediate token invalidation upon employee departure.

Cybersecurity experts warn of unusual CDN traffic that may indicate attempts to bypass traditional defenses. Investigations reveal headers like 'Cf-Warp-Tag-Id' and others, suggesting actors are probing for weak spots in access control measures.

Cyber defense is evolving with AI triaging security threats more efficiently. Cyber Sentinel's head, Muhammad Ali Paracha, discusses automation at Black Hat Middle East.

New phishing trend: China groups exploit package anxiety and tax refund rumors through SMS lures. They craft convincing fake e-comm sites to steal card data for mobile wallets from Apple/Google Pay.

SMS phishers are now exploiting holiday shopping with fake e-commerce websites, coaxing victims into handing over payment card data. These groups have also begun luring targets under the guise of unclaimed tax refunds and mobile rewards points via SMS.

The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has issued an alert on the 'ongoing' Brickstorm backdoor attacks, where state-sponsored actors linked to China are persistently targeting VMware vSphere environments at government and technology organizations.

CISA releases guidance for AI in OT cybersecurity, emphasizing the importance of robust defense mechanisms to safeguard critical infrastructure.

AI integration in OT poses new security risks, warns NSA. Guidance document outlines concerns such as adversarial AI attacks and data poisoning that could compromise critical infrastructure like energy grids or water systems.

The recent record-breaking DDoS attack of over 30 Tbps serves as a stark warning. It underscores the escalating scale and frequency that businesses must acknowledge to defend themselves effectively.

Silver Fox executes a sophisticated phishing scheme in China, imitating Russian groups. The campaign involves deceptive Microsoft Teams files to install ValleyRAT malware on victims' systems.

ULM provides a means to map threat flows, offering dynamic intelligence integration for CISOs. The ULM framework helps unify disparate data sources into coherent risk narratives and operationalizes linkage-based defense strategies.

ServiceNow's $1 billion acquisition of NHI Provider Veza introduces advanced non-human identity access control into its platform, enhancing governance with a robust AI Control Tower.

ServiceNow's acquisition of NHI Provider Veza for $1 billion aims to bolster its governance portfolio with non-human identity access control capabilities, integrating these features into ServiceNow’s AI Control Tower.

Cybercriminals are currently deploying phishing emails impersonating Momberger – Lack & Technik to coax customers into fraudulent payments. The company urges all clients not to open attachments or click on links and has reinforced their cybersecurity defenses.