CyberNews Phishing Campaign Targets Marketing Pros with Fake Job Interviews, Steals Google Accounts A sophisticated phishing campaign has been uncovered, using over 30 well-known brands to trick marketing professionals into handing over their Google account credentials. The operation is particularly insidious, as it leverages legitimate cloud-based platforms and domain names associated with major companies like Salesforce … Read more
A massive anime piracy operation has been brought to a halt in Vietnam, with authorities arresting seven suspects behind the popular HiAnime streaming service. The move marks a significant victory for the Alliance for Creativity and Entertainment (ACE), a coalition of media and entertainment companies that have been working tirelessly to shut down illicit streaming … Read more
Cybersecurity Threat Actors Abusing Microsoft Teams to Spread Malware Threat actors have been using a sophisticated tactic to trick employees into installing malware on their computers, exploiting a vulnerability in corporate networks. The attackers are impersonating IT support staff via Microsoft Teams voice calls, convincing victims to grant remote access and ultimately downloading the EtherRAT … Read more
Cyber Attackers Pose as Top Brands to Steal Google Accounts, Targeting Marketing Professionals A sophisticated phishing campaign has been uncovered, where attackers are impersonating over 30 well-known brands in fake job interviews to steal Google account credentials from marketing professionals. The operation is notable for its use of legitimate cloud-based platforms and domains associated with … Read more
A 16-year-old flaw in the Linux KVM (Kernel-based Virtual Machine) hypervisor allows guest virtual machines on Intel and AMD x86 systems to escape their containment and gain unauthorized access to the host machine, putting thousands of servers and data centers at risk. This critical vulnerability, tracked as CVE-2022-3430, was discovered by a researcher using an … Read more
A sophisticated Iranian hacking group has been using a novel command and control (C2) framework called Cavern to launch targeted attacks on Israeli organizations, according to a recent analysis by experts. The hackers’ arsenal includes a range of tools designed to evade detection and compromise victims’ systems. The Cavern C2 framework is a bespoke solution … Read more
Sophisticated Malware Framework Delivers Stealthy Payloads via Compromised Websites and Social Engineering A highly complex malware delivery framework has been uncovered by Securonix, exploiting compromised websites and social engineering tactics to infect users with information stealers. Dubbed “Veil#Drop”, this multi-stage framework uses JavaScript launchers, PowerShell download cradles, and Blogspot-hosted payloads to evade traditional antivirus solutions … Read more
Vietnam Cracks Down on Massive Anime Piracy Service, Arresting Seven Suspects Behind HiAnime In a significant blow to online piracy, Vietnamese authorities have arrested and are prosecuting seven individuals suspected of running HiAnime, one of the largest anime piracy streaming services in the world. The platform, which offered a vast library of English-subbed and dubbed … Read more
A Critical Docker Flaw Left Unpatched for Weeks, Exposing Users to Potentially Catastrophic Consequences In a concerning display of vulnerability exploitation, threat actors have begun probing a critical flaw in Gitea, an open-source Git repository manager that runs on top of the Docker platform. The weakness, identified as CVE-2026-20896, was publicly disclosed just 13 days … Read more
A Critical Linux KVM Flaw Puts Millions of Servers at Risk A 16-year-old vulnerability in the Kernel-based Virtual Machine (KVM) software, which is widely used on Linux systems, has been discovered to allow guest virtual machines to escape and compromise their host environments on Intel and AMD x86-based servers. The flaw, designated as CVE-2022-2385, has … Read more