Google Seals Major Android Security Flaws: 120 Vulnerabilities Patched, Including Two Active Zero-Days
Google has urgently released its September 2025 Android Security Update, addressing a staggering 120 vulnerabilities across the platform. Most alarmingly, two…
AI Tool Meant for Red Teaming Is Repurposed for Attack: HexStrike AI Weaponized to Exploit Citrix Vulnerabilities in Just One Week
In a stunning twist, HexStrike AI—a platform originally designed to empower red teaming and security professionals—has been harnessed by malicious…
Android Droppers Evolve: Not Just Banking Trojans Anymore
Cybersecurity researchers have identified a significant pivot in Android malware tactics: dropper applications—previously mainly used to deliver sophisticated banking trojans—are…
WhatsApp Releases Urgent Patch for “Zero-Click” Exploit Targeting iOS and macOS Devices
On August 30, 2025, WhatsApp issued an emergency patch for a high‑severity vulnerability tracked as CVE‑2025‑55177 in its iOS and…
Amazon Thwarts APT29’s Watering-Hole Campaign for Microsoft Authentication
Amazon has revealed that its threat intelligence team recently disrupted a sophisticated—or, as described, opportunistic—watering‑hole campaign orchestrated by the Russian…
Scattered Spider Hacker Sentenced to 10 Years
A 20‑year‑old member of the notorious cybercrime collective Scattered Spider has been sentenced to 10 years in prison and ordered…
Apple Patches Zero-Day Vulnerability in iOS, iPadOS, and macOS
Apple has released emergency security updates to fix CVE-2025-43300, a zero-day vulnerability actively exploited in highly targeted attacks against select…
XenoRAT Malware Campaign Strikes Multiple Embassies in South Korea
A sophisticated state‑sponsored espionage campaign has been targeting foreign embassies in Seoul, deploying the remote access trojan XenoRAT via malicious…
New “PipeMagic” Malware Abuses Patched Windows Flaw to Fuel RansomExx Campaigns
Cybersecurity firms have today revealed a heightened wave of attacks exploiting a now‑patched Windows vulnerability to deploy the modular PipeMagic…
Critical Vulnerabilities in Axis Surveillance Servers Put Thousands at Risk
Cybersecurity researchers have uncovered a cluster of serious vulnerabilities in Axis Communications’ surveillance infrastructure, affecting both server and client components.…