Cybersecurity is an ever-evolving field, with new threats and vulnerabilities emerging every week. For security and IT teams, the challenge lies in staying informed and prioritizing the most critical risks. This digest aims to provide a clear, concise briefing to …
Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & More Read More »
A series of cyber attacks have been detected targeting the energy sector in Kazakhstan, with a suspected Russian threat actor behind the malicious activities. Dubbed Operation BarrelFire, the attacks are linked to a new threat group known as Noisy Bear …
Noisy Bear Targets Kazakhstan Energy Sector With BarrelFire Phishing Campaign Read More »
î ‚ Sep 06, 2025 î „ Ravie Lakshmanan Software Security / Cryptocurrency A recent discovery in the npm package registry has unveiled four malicious packages designed to steal cryptocurrency wallet credentials from Ethereum developers. The packages, uploaded under the username “flashbotts,” …
Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys Read More »
î ‚Sep 05, 2025î „Ravie LakshmananVulnerability / Enterprise Security A critical security vulnerability impacting SAP S/4HANA, an Enterprise Resource Planning (ERP) software, has come under active exploitation in the wild. The command injection vulnerability, tracked as CVE-2025-42957 (CVSS score: 9.9), was fixed …
SAP S/4HANA Critical Vulnerability CVE-2025-42957 Exploited in the Wild Read More »
î ‚Sep 04, 2025î „Ravie LakshmananArtificial Intelligence / Malware Cybersecurity experts have identified a new method that cybercriminals are using to evade the malvertising safeguards of a popular social media platform and disseminate harmful links through its AI assistant Grok. The discovery …
î ‚Sep 03, 2025î „Ravie LakshmananArtificial Intelligence / Vulnerability Threat actors are making use of a newly launched artificial intelligence (AI) offensive security tool named HexStrike AI to exploit recently uncovered security vulnerabilities. HexStrike AI, as per its official website, is designed …
172 As the use of AI tools for image generation and processing becomes more widespread, ensuring robust security measures is crucial. Researchers have uncovered a new attack method that leverages AI for data exfiltration through images. This attack combines the …
Prompt Injection With Image Scaling Attacks Threatens AI System Read More »
Enterprises are facing a growing set of cyber challenges as they shift their operations to the browser. More than 80% of security incidents now originate from web applications accessed via Chrome, Edge, Firefox, and other browsers. One adversary, Scattered Spider, …
A recent cyber attack has brought attention to the misuse of legitimate software for malicious purposes. In this incident, threat actors utilized an open-source endpoint monitoring and digital forensic tool known as Velociraptor to download and execute Visual Studio Code, …
î ‚Aug 30, 2025î „Ravie LakshmananZero-Day / Vulnerability WhatsApp recently patched a security vulnerability in its iOS and macOS messaging apps that could have been exploited in the wild alongside a known Apple flaw in targeted zero-day attacks. The vulnerability, known as …
WhatsApp Issues Emergency Update for Zero-Click Exploit Targeting iOS and macOS Devices Read More »
