CyberNews A sophisticated spear-phishing campaign, attributed to a group known as SideCopy, has been discovered targeting Indian academia with a custom-made malware tool called ReverseRAT. This operation marks an expansion of the group’s activities, previously focused on India’s government and private sector institutions. SideCopy’s ReverseRAT malware allows the attackers to gain remote access to compromised systems, … Read more
A malicious npm package called indexed-btree has been removed from the official registry after it was found to be hiding its loader in runtime code. This sneaky tactic allowed the package to evade detection by security tools and inject malware into unsuspecting developers’ projects. The npm package, which had over 1,200 weekly downloads at the … Read more
Microsoft’s SharePoint platform has been plagued by a critical flaw that initially went undetected, allowing attackers to exploit authenticated remote code execution (RCE) capabilities. The issue, which was first listed as a spoofing vulnerability, has significant implications for organizations relying on the platform for collaboration and document management. The bug, tracked as CVE-2026-1234, resides in … Read more
A Critical Vulnerability in Linux Kernel Exposes ARM64 KVM Guests to Host Memory Attacks A newly discovered flaw in the Linux kernel has left thousands of users vulnerable to a potentially devastating attack. The vulnerability, which affects systems running on ARM64 architecture with Kernel-based Virtual Machine (KVM) enabled, allows malicious code executed within a virtual … Read more
As we mark the second anniversary of DORA, a critical security framework designed to help organizations fortify their defenses against sophisticated cyber threats, a growing body of evidence suggests that many Security Operations Centers (SOCs) are still struggling to see the attack in real-time. A new wave of research has uncovered 11 compelling case studies, … Read more
WordPress has just patched a critical vulnerability that could have allowed attackers to take control of websites without needing a login. Dubbed “Click2Shell,” this flaw was discovered by pwn.ai and affects all versions of WordPress from 4.7 upwards. The issue is with the way WordPress handles theme previews, which can be exploited using specially crafted … Read more
A high-severity vulnerability in Zyxel switches has been exploited to steal sensitive data from nearly 1,000 devices worldwide. The US Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch the flaw immediately, highlighting the significant risks it poses to the federal enterprise. The vulnerability, tracked as CVE-2026-7273, was first disclosed in June … Read more
A new zero-day exploit targeting Windows Defender has been released, allowing malicious actors to block antivirus updates and leave users vulnerable to attacks. The exploit, dubbed BigDiskBuster, was created by Abdelhamid Naceri, a security researcher who has been at odds with Microsoft over their alleged unfair termination last year. Naceri’s tool works on all supported … Read more
A New Wave of Attacks Taps Into Academic Networks via Sophisticated Spear-Phishing Campaigns SideCopy, a threat actor known for targeting Indian organizations with tailored attacks, has expanded its scope to academic institutions in India. The group’s latest campaign utilizes a sophisticated reverse RAT (Remote Access Trojan) called ReverseRAT to infiltrate and compromise sensitive networks within … Read more
A malicious npm package, indexed-btree, has been removed from the public registry after being used in a supply chain attack that exposed sensitive data. The package was downloaded over 1.5 million times before its removal, putting many developers and organizations at risk of identity exposure. Indexed-btree masqueraded as a legitimate database indexing library, but it … Read more