Fake IT Support Calls Used to Deploy Havoc Malware in Targeted Cyber Attacks Security researchers have uncovered a new cyberattack campaign in which attackers pose as IT support staff to trick victims into granting remote access to their systems. Once…
Security researchers have uncovered several malicious packages on the Packagist PHP repository that pretend to be useful Laravel development tools but actually install a dangerous remote access trojan (RAT). The infected packages were designed to look like legitimate utilities for…
A powerful new edition of the notorious LockBit ransomware is spreading across corporate networks, posing a serious threat to organizations around the globe. Dubbed LockBit 5.0, the updated strain expands its reach by attacking multiple operating systems, including Windows, Linux,…
Security researchers have uncovered a new social engineering campaign aimed at macOS users that delivers credential-stealing malware through a highly refined version of the ClickFix technique. The operation, dubbed “Matryoshka,” uses multiple layers of hidden code to slip past security…
Security researchers are warning of widespread exploitation targeting a severe remote code execution vulnerability in Ivanti Endpoint Manager Mobile (EPMM). The flaw, identified as CVE-2026-1281, allows attackers to take control of vulnerable systems without authentication and is already being used…
A newly identified cyber espionage group has launched coordinated attacks against Ukrainian institutions using a previously undocumented malware strain known as CANFAIL, according to security researchers. The activity appears to focus on critical sectors tied to national security and infrastructure.…
Microsoft security researchers have uncovered an advanced evolution of the ClickFix social engineering technique, revealing how attackers are now using DNS requests to secretly pull malicious payloads onto victims’ computers. The new approach reduces reliance on typical web downloads, making…
Google has issued urgent security updates for its Chrome browser after confirming that a newly discovered vulnerability is already being used in real-world attacks. The flaw, identified as CVE-2026-2441, carries a high severity rating and could allow attackers to execute…
Rapid technological progress is transforming how societies function, from government services to everyday communication. But as countries digitize more of their infrastructure, new vulnerabilities emerge alongside the benefits. Lithuania, widely known for its advanced e-government systems, is now confronting that…
Ivanti has released emergency security updates for two critical vulnerabilities affecting Ivanti Endpoint Manager Mobile (EPMM) after confirming the flaws have been exploited in real-world zero-day attacks. One of the vulnerabilities has also been added to the CISA Known Exploited…
