Experts spotted a series of malvertising campaigns using fake installers of popular apps and games...
Multiple vulnerabilities were identified in Cisco Products. A remote attacker could exploit some of these...
Multiple vulnerabilities were identified in Netgear Products. A remote attacker could exploit this vulnerability to trigger remote code execution,...
Multiple vulnerabilities were identified in Google Chrome. A remote attacker could exploit some of these...
The Hong Kong Monetary Authority (HKMA) wishes to alert members of the public to a...
Enterprise software provider Zoho on Friday warned that a newly patched critical flaw in its...
The FBI has released a new notice about the Cuba ransomware, explaining that the group...
The Hong Kong Monetary Authority (HKMA) received enquiries from the members of the public about...
The Hong Kong Monetary Authority (HKMA), as representative of the Hong Kong Special Administrative Region...
Cyber Alerts
- Gootloader Malware Resurfaces in Google Ads for Legal Docs April 1, 2025Attackers target a familiar industry, law professionals, by hiding the infostealer in ads delivered via Google-based
- Google makes end-to-end encrypted Gmail easy for all – even Outlook users March 31, 2025The UK government must be thrilled Google will soon offer end-to-end encrypted (E2EE)
- Phishing platform 'Lucid' behind wave of iOS, Android SMS attacks March 31, 2025A phishing-as-a-service (PhaaS) platform named 'Lucid' has been targeting 169
- Hackers abuse WordPress MU-Plugins to hide malicious code March 31, 2025Hackers are utilizing the WordPress mu-plugins ("Must-Use Plugins") directory to stealthily run malicious code
- RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell Features March 29, 2025The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has shed light on a new malware
- Oracle customers confirm data stolen in alleged cloud breach is valid March 26, 2025Despite Oracle denying a breach of its Oracle Cloud federated SSO login servers and the theft of account data
- Browser-in-the-Browser attacks target CS2 players' Steam accounts March 24, 2025A new phishing campaign targets Counter-Strike 2 players utilizing Browser-in-the-Browser (BitB
- FBI warnings are true—fake file converters do push malware March 22, 2025The FBI is warning that fake online document converters are being used to steal people's information and,
- UK urges critical orgs to adopt quantum cryptography by 2035 March 20, 2025The UK's National Cyber Security Centre (NCSC) has published specific timelines on migrating to post-
- WhatsApp patched zero-click flaw exploited in Paragon spyware attacks March 19, 2025WhatsApp has patched a zero-click, zero-day vulnerability used to install Paragon's Graphite spyware
- New Windows zero-day exploited by 11 state hacking groups since 2017 March 18, 2025At least 11 state-backed hacking groups from North Korea, Iran, Russia, and China have been
- Malicious Android 'Vapor' apps on Google Play installed 60 million times March 18, 2025Over 300 malicious Android applications downloaded 60 million items from Google Play acted as adware or attempted to steal credentials
- Medusa Ransomware Strikes 300+ Targets: FBI & CISA Urge Immediate Action to #StopRansomware March 17, 2025Medusa ransomware now operates as a RaaS model, recruiting affiliates from criminal forums to launch attacks, encrypt data
- Malicious Adobe, DocuSign OAuth apps target Microsoft 365 accounts March 15, 2025Cybercriminals are promoting malicious Microsoft OAuth apps that masquerade as Adobe and DocuSign apps to deliver malware and steal Microsoft
- ClickFix: How to Infect Your PC in Three Easy Steps March 14, 2025A clever malware deployment scheme first spotted in targeted attacks last year has now gone mainstream. In this scam
- Microsoft Warns of ClickFix Phishing Campaign Targeting Hospitality Sector via Fake Booking[.]com Emails March 12, 2025Microsoft has shed light on an ongoing phishing campaign that targeted the hospitality sector by impersonating online travel agency Booking
- ClickFix attack delivers infostealers, RATs in fake Booking.com emails March 12, 2025Microsoft is warning that an ongoing phishing campaign impersonating Booking.com is using ClickFix social engineering attacks to infect
- Apple patches 0-day exploited in “extremely sophisticated attack” March 11, 2025-day exploited by maliciously crafted Web content to break out of security sandbox.
- The Badbox botnet is back, powered by up to a million backdoored Androids March 7, 2025Best not to buy cheap hardware and use third-party app stores if you want to stay clear of
- 'EncryptHub' OPSEC Failures Reveal TTPs & Big Plans March 6, 2025Is EncryptHub the most prolific cybercriminal in recent history? Or, as new information suggests, a bumbling amateur