Following its successful debut in 2023, the Cybersecurity Symposium returns as Hong Kong’s leading platform...
A Network FIREWALL in 2024 There is a common misconception that firewalls are expensive, complex...
Digitpol – email, Phonecalls / Telegram / Whatsapp / Facebook / Fraudster – Imposter Alert...
AI poses a major threat to cybersecurity The human vulnerability and social engineering are the...
Digitpol has reiterated its commitment to delivering the best security solutions to different categories of...
Cyber Alerts
- New DroidLock malware locks Android devices and demands a ransom December 10, 2025A new Android malware called DroidLock has emerged with capabilities to lock screens for ransom payments, erase data,
- Scammers are poisoning AI search results to steer you straight into their traps - here's how December 8, 2025AI tools like Google AI Overview and Perplexity Comet are being tricked into suggesting scam support numbers.
- Ransomware gangs turn to Shanya EXE packer to hide EDR killers December 8, 2025Multiple ransomware gangs are using a packer-as-a-service platform named Shanya to help them deploy
- Android Malware FvncBot, SeedSnatcher, and ClayRat Gain Stronger Data Theft Features December 8, 2025Cybersecurity researchers have disclosed details of two new Android malware families dubbed FvncBot and SeedSnatcher, as another upgraded version
- Hackers Launch Widespread Attacks on Palo Alto GlobalProtect Portals from 7,000+ IPs December 6, 2025In an escalating campaign targeting remote access infrastructure, threat actors have initiated active exploitation attempts against Palo Alto Networks
- Hackers are exploiting ArrayOS AG VPN flaw to plant webshells December 4, 2025Threat actors have been exploiting a command injection vulnerability in Array AG Series VPN devices to plant webshells and create
- CISA and NSA Warns of BRICKSTORM Malware Attacking VMware ESXi and Windows Environments December 4, 2025The Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency (NSA), and the Canadian Centre
- Critical RSC Bugs in React and Next.js Allow Unauthenticated Remote Code Execution December 3, 2025A maximum-severity security flaw has been disclosed in React Server Components (RSC) that, if successfully
- Shai-Hulud 2.0 NPM malware attack exposed up to 400,000 dev secrets December 2, 2025The second Shai-Hulud attack last week exposed around 400,000 raw secrets after infecting hundreds of
- Brazil Hit by Banking Trojan Spread via WhatsApp Worm and RelayNFC NFC Relay Fraud December 2, 2025The threat actor known as Water Saci is actively evolving its tactics, switching to a sophisticated, highly layered
- SmartTube YouTube app for Android TV breached to push malicious update December 1, 2025The popular open-source SmartTube YouTube client for Android TV was compromised after an attacker gained access to the
- Zendesk users targeted as Scattered Lapsus$ Hunters spin up fake support sites November 27, 2025Scattered Lapsus$ Hunters may be circling Zendesk users for its latest extortion campaign, with new phishing domains and
- Qilin RaaS Exposed 1 Million Files and 2 TB of Data Linked to Korean MSP Breach November 26, 2025The “Korean Leaks” campaign has emerged as one of the most sophisticated supply chain attacks targeting South Korea
- New ShadowV2 botnet malware used AWS outage as a test opportunity November 26, 2025A new Mirai-based botnet malware named 'ShadowV2' has been observed targeting IoT devices from D-
- Malicious Blender model files deliver StealC infostealing malware November 24, 2025A Russian-linked campaign delivers the StealC V2 information stealer malware through malicious Blender files uploaded to 3D model
- Fresh ClickFix attacks use Windows Update trick-pics to steal credentials November 24, 2025Poisoned PNGs contain malicious code A fresh wave of ClickFix attacks is using fake Windows update screens to trick
- ClickFix attack uses fake Windows Update screen to push malware November 24, 2025New ClickFix attack variants have been observed where threat actors trick users with a realistic-looking Windows Update animation
- W3 Total Cache WordPress plugin vulnerable to PHP command injection November 19, 2025A critical flaw in the W3 Total Cache (W3TC) WordPress plugin can be exploited to run PHP commands
- Threat Actors can Use Xanthorox AI Tool to Generate Different Malicious Code Based on Prompts November 17, 2025Cybersecurity researchers have uncovered a dangerous new tool making waves across darknet forums and criminal communities. Xanthorox, a
- Decades-old ‘Finger’ protocol abused in ClickFix malware attacks November 15, 2025The decades-old "finger" command is making a comeback,, with threat actors using the protocol to