**RAT with gRPC Streaming Threatens Organizations Globally** A new Remote Access Trojan (RAT) called MODBEACON has been spotted in the wild, leveraging advanced technologies like gRPC streaming to evade detection and maintain encrypted command and control (C2) traffic. This sophisticated malware variant is a significant threat to organizations worldwide, putting sensitive data at risk of … Read more
Researchers have uncovered a sophisticated attack chain that leverages three previously unknown vulnerabilities in WhatsApp, allowing hackers to remotely execute malicious code on targeted devices with complete control over the host system. Dubbed “OpenClaw,” this alarming discovery highlights the escalating threat landscape of AI-driven attacks. The OpenClaw exploit chain hinges on a combination of three … Read more
A Novel Form of Cyberattack Exploits Wallet Cards with Unpatchable Flaws A disturbing trend has been spotted in the world of cybersecurity, where hackers are using a novel form of attack to reset passwords on vulnerable wallet cards. The affected cards, produced by Tangem, rely on a unique combination of software and hardware to store … Read more
A Massive Backdoor Campaign Exposed: Thousands of WordPress Sites Compromised Through WP-SHELLSTORM In a shocking revelation, an exposed hacker server has uncovered a massive backdoor campaign targeting thousands of WordPress sites worldwide. The malware, known as WP-SHELLSTORM, has been quietly infecting websites for months, leaving their owners vulnerable to cyber attacks and data breaches. WP-SHELLSTORM … Read more
Cybersecurity experts at Lumen Technologies have made significant strides in rebuilding their exposure management systems, reducing the number of vulnerable assets from 17,000 to just over 1.1 million. This massive overhaul was necessitated by the increasing sophistication of AI-powered vulnerability discovery tools, which can identify vulnerabilities that human security teams may miss. To put this … Read more
A Critical Flaw in XQUIC Puts HTTP/3 Servers at Risk of Remote Crashes A severe vulnerability, dubbed XRING, has been discovered in the XQUIC protocol, which is used by some HTTP/3 servers. The flaw allows remote clients to crash these servers with a single malicious packet, putting sensitive online services and data at risk. What’s … Read more
A New and Highly Sophisticated RAT Exploits gRPC Streaming for Stealthy C2 Traffic A sophisticated new malware variant known as MODBEACON RAT has been discovered, leveraging the gRPC streaming protocol to facilitate encrypted command and control (C2) communication between compromised systems. This latest threat poses a significant challenge to cybersecurity experts, who must now contend … Read more
A newly uncovered WhatsApp-to-host attack chain, leveraging three previously unknown vulnerabilities in OpenClaw software, poses a significant threat to users and organizations worldwide. The exploit allows attackers to remotely execute malicious code on unsuspecting hosts, making it a potentially devastating tool for cybercriminals. The vulnerabilities, identified by cybersecurity researcher Alex Pilkington, reside within the OpenClaw … Read more
A new phishing tactic has been discovered, where hackers are impersonating Microsoft’s Entra Passkey enrollment process to gain unauthorized access to Microsoft 365 accounts. This cunning approach leverages the trust users have in legitimate company services, making it a particularly effective and insidious form of social engineering. The attack begins when an unsuspecting user receives … Read more
A study of 281 free Android VPN apps has revealed alarming security lapses, including traffic leaks, unencrypted data transmission, and tracking capabilities that put users’ sensitive information at risk. The investigation, conducted by researchers from a leading cybersecurity firm, shed light on the vulnerabilities inherent in these popular mobile apps. The researchers analyzed a range … Read more