**Liquid Hackers Pull Off Stunning Heist, Return $47 Million in Bitcoin Stolen via Zero-Day Exploit** In a brazen display of cybercrime expertise, the notorious hacking group known as Liquid has returned 3,400 Bitcoins to their victims, stolen through a devastating zero-day exploit that targeted a software vulnerability. The stunning reversal has left security experts scratching … Read more
A sophisticated cyber campaign has been uncovered, targeting Bing search engine users with poisoned results designed to deliver malicious payloads and phishing scams. BengalSEO, a notorious group behind previous attacks on Google’s AdWords platform, is allegedly responsible for this latest scheme, dubbed “MayaBot.” The attack vector leverages Bing’s proprietary search algorithm to inject malware-laced ads … Read more
Adobe has issued a critical patch for Magento, its e-commerce platform, after discovering a zero-day vulnerability being exploited in the wild. The flaw, which was disclosed earlier this week, allows attackers to inject malicious code and deploy a backdoor on affected websites, as well as install a PHP web shell for further unauthorized access. Magento … Read more
A Critical Flaw in FreeIPA Exposes Administrator Credentials, Threatening Enterprise Security FreeIPA, a widely used open-source identity management system, has been found vulnerable to a series of interconnected flaws that can enable anonymous clients to create reusable administrator credentials. This security weakness poses a significant threat to enterprises relying on FreeIPA for authentication and authorization. … Read more
Cybersecurity Researchers Uncover Alarming Trend in Identity Exposure A staggering number of organizations have fallen victim to a sophisticated attack technique that leverages identity exposure to exploit vulnerabilities in their systems. According to recent findings, over 1 billion build manifests – files that contain sensitive information about an organization’s software and infrastructure – have been … Read more
A Zero-Click Worm Exploited WeChat’s Incoming Call Feature, Leaving Millions Vulnerable A disturbing vulnerability in the popular Chinese messaging app WeChat has left millions of users on both iPhone and Android devices exposed to a zero-click worm attack. The exploit, which was revealed earlier this week, takes advantage of WeChat’s incoming call feature to compromise … Read more
A critical issue is unfolding for users of Windows Server 2025, with Microsoft warning that recent changes to memory management are causing application crashes. The problem affects apps that rely on Address Windowing Extensions (AWE), which allows them to access more than 4GB of physical memory within a 32-bit virtual address space. The issue has … Read more
Cyberattackers are now using sophisticated artificial intelligence (AI) frameworks to automate every stage of their attacks, including credential theft on a massive scale. According to a report from the Google Threat Intelligence Group (GTIG), threat actors have moved beyond simple AI-powered coding assistants and are instead integrating multiple AI capabilities into their attack workflows. These … Read more
A sophisticated cyberattack has been uncovered, where a malicious actor manipulated Bing search results to deliver payloads of two notorious malware variants, MayaBot and Tech Support Scams. The campaign, dubbed BengalSEO, exploited vulnerabilities in Microsoft’s search engine optimization (SEO) tools, allowing attackers to inject poisoned links into seemingly legitimate search results. At the heart of … Read more
Adobe’s Magento e-commerce platform has been hit with a zero-day vulnerability that allowed attackers to deploy a backdoor and web shell, compromising user security. This critical issue affects anyone using Magento 2.x up to version 2.3.7-p1, which is used by over 250,000 online stores worldwide. The exploit takes advantage of a previously unknown privilege escalation … Read more