A Russia-linked threat group known as APT28 has launched a new wave of targeted attacks against Ukraine and its international partners, deploying a previously unknown malware framework called PRISMEX. Security researchers report that the campaign has been active since at…
Cybersecurity researchers have uncovered a previously unknown zero-day vulnerability in Adobe Reader that attackers have been actively exploiting through specially crafted PDF files since late 2025. The issue, analyzed by EXPMON researcher Haifei Li, involves a highly advanced PDF-based exploit…
A newly identified threat group, tracked as UAT-10362, has been linked to targeted spear-phishing attacks against organizations in Taiwan, including non-governmental organizations (NGOs) and likely academic institutions. The campaign introduces a previously unseen Lua-based malware named LucidRook. According to research…
INTERPOL Dismantles Major Cybercrime Infrastructure in Global Operation INTERPOL has announced the disruption of a massive cybercrime network after authorities shut down more than 45,000 malicious IP addresses and servers linked to phishing attacks, malware distribution, and ransomware operations. The…
Meta Plans to Remove End-to-End Encryption From Instagram Chats Meta has confirmed that end-to-end encryption (E2EE) for Instagram direct messages will be discontinued after May 8, 2026, marking a shift in how the platform handles private messaging security. In a…
Suspected Chinese Cyber Espionage Operation Targets Southeast Asian Military Organizations Cybersecurity researchers have uncovered a long-running cyber espionage campaign believed to be linked to China that has been quietly targeting military institutions across Southeast Asia since at least 2020. The…
GlassWorm Attack Evolves, Targeting Developers Through VS Code Extension Supply Chain Cybersecurity researchers have uncovered a new phase of the GlassWorm malware campaign, revealing a more advanced method of spreading malicious code through the Open VSX extension registry used by…
China Warns About Security Risks in OpenClaw Autonomous AI Agent China’s national cybersecurity authority has raised concerns about potential security issues linked to OpenClaw, an open-source autonomous AI agent previously known as Clawdbot and Moltbot. The alert came from the…
⚠️ New Cyber Espionage Operation Targets Organizations Across MENA Security analysts have uncovered a fresh wave of cyberattacks attributed to the Iran-aligned hacking group commonly tracked as MuddyWater. The campaign, dubbed Operation Olalampo, is primarily focused on organizations and individuals…
⚠️ Massive Supply-Chain Attack Targets Developers via Malicious npm Packages Security researchers have uncovered an active software supply-chain campaign spreading through the npm ecosystem that behaves like a self-propagating worm. The operation relies on at least 19 malicious packages designed…
