Recent security assessments have uncovered two significant vulnerabilities in TP-Link’s VIGI Network Video Recorder (NVR) systems, identified as CVE-2025-7723 and CVE-2025-7724. These flaws affect the […]
Day: July 25, 2025
Elephant APT Group Targets Defense Industry Using VLC Player and Encrypted Shellcode
The Dropping Elephant advanced persistent threat (APT) group, also known as Patchwork or Quilted Tiger, has initiated a sophisticated cyber-espionage campaign targeting Turkish defense contractors, […]
Hacker Compromises Amazon’s AI Coding Assistant, Injecting Destructive Commands
In a significant security breach, a hacker successfully infiltrated Amazon’s AI-powered coding assistant, Q, by injecting malicious code designed to erase users’ local files and […]
Hive0156 Intensifies Cyber Attacks on Ukrainian Government and Military with Remcos RAT Deployment
In recent developments, the Russian-aligned cyber threat group known as Hive0156 has escalated its cyber espionage activities against Ukrainian government and military entities. Employing sophisticated […]
Global Law Enforcement Seizes BlackSuit Ransomware’s Dark Web Infrastructure
In a significant victory against cybercrime, international law enforcement agencies have successfully dismantled the dark web infrastructure of the notorious BlackSuit ransomware group. This coordinated […]
Critical SharePoint Zero-Day Vulnerabilities Exploited to Deploy Warlock Ransomware
Microsoft has recently issued urgent warnings regarding the active exploitation of critical zero-day vulnerabilities in its SharePoint Server software. These vulnerabilities, identified as CVE-2025-53770 and […]
CastleLoader Malware Exploits Cloudflare-Themed ClickFix Technique to Compromise Windows Systems
In 2025, cybersecurity researchers identified a rapidly evolving malware loader named CastleLoader, which has been actively used to infiltrate Windows computers. This malware employs sophisticated […]
Fire Ant Hackers Exploit VMware ESXi and vCenter Vulnerabilities to Infiltrate Organizations
A sophisticated cyber-espionage campaign, identified as Fire Ant, has been actively targeting VMware virtualization infrastructures since early 2025. This threat actor employs advanced techniques to […]
Cybercriminals Exploit YouTube and Discord to Distribute Credential-Stealing Malware
A newly uncovered cyberattack campaign is exploiting the enthusiasm of gamers for unique indie titles to distribute credential-stealing malware. Cybercriminals are promoting fictitious games such […]
Cybercriminals Exploit Fake Android Banking Apps to Steal User Credentials
In recent months, cybercriminals have intensified their efforts to exploit India’s growing reliance on mobile banking by distributing counterfeit Android applications that closely resemble legitimate […]