Rokarolla Android Malware Disables Google Play Protect to Gain Full Device Control
Security researchers have identified Rokarolla, a sophisticated Android malware that disables Google Play Protect and abuses accessibility services to gain extensive control over infected devices. Once deployed, the malware can facilitate remote access, steal sensitive information, and bypass built-in Android security protections.
UNC3753 Exploits Screen-Sharing Sessions and RMM Tools to Steal Sensitive Legal Data
UNC3753 is targeting legal organizations by exploiting screen-sharing sessions and RMM software to steal sensitive data. The campaign demonstrates the growing use of legitimate remote access tools in modern cyber espionage and data theft operations.
PRC-Linked Threat Actors Target REDCap Servers to Spy on U.S. Medical Research Organizations
PRC-linked hackers are targeting REDCap servers to conduct cyber espionage against U.S. medical research organizations. The campaign underscores the increasing risks facing healthcare, research, and academic sectors as threat actors seek access to valuable scientific and medical data.
Critical LiteSpeed cPanel Plugin Vulnerability Enables Root Privilege Escalation Attacks
CISA has warned of active exploitation targeting a critical LiteSpeed cPanel plugin vulnerability that enables root privilege escalation. Security teams are urged to patch affected systems immediately to prevent unauthorized access and potential server compromise.
New Sniper Dz Scam Operation Exploits MENA Users with Fraudulent Facebook Offers
A new Sniper Dz scam campaign is targeting users across the Middle East and North Africa (MENA) through fraudulent Facebook offers and deceptive browser alerts. Researchers warn that the operation uses social engineering tactics to lure victims into financial scams, credential theft, and other online fraud activities.
FHN 
