EtherRAT Attack Targets Enterprise Admins
A newly identified campaign called EtherRAT is targeting enterprise environments by combining SEO manipulation, GitHub abuse, and blockchain-based infrastructure. Instead of going after random users, attackers are focusing on IT [...]
Android Spyware Platform Enables Resale
A newly uncovered Android spyware platform is changing how surveillance malware spreads. Instead of being a single tool, it works like a service that anyone can subscribe to, customize, and [...]
Lazarus Delivers “Mach-O Man” macOS Malware via ClickFix
The Lazarus Group is actively using ClickFix-style social engineering to deploy a new macOS malware framework called “Mach-O Man.” Instead of exploiting vulnerabilities, the attack relies on user interaction, making [...]
SonicWall Flaw Allows Access Bypass and Firewall Crash
SonicWall has disclosed multiple security issues in its SonicOS software that could impact firewall security and availability. These vulnerabilities, revealed in a recent advisory, could allow attackers to bypass access [...]
WhatsApp Tests Safer Cloud Backup for Messages
WhatsApp is developing a new cloud backup system that shifts away from relying entirely on third-party services like Google Drive and iCloud. The idea is to bring backup storage under [...]