Cybersecurity researchers have uncovered details about a stealth-focused botnet known as Masjesu, a growing threat built to launch distributed denial-of-service (DDoS) attacks while staying under the radar. First appearing around 2023, Masjesu has been promoted on Telegram as a paid…
Cybersecurity researchers have uncovered a previously unknown zero-day vulnerability in Adobe Reader that attackers have been actively exploiting through specially crafted PDF files since late 2025. The issue, analyzed by EXPMON researcher Haifei Li, involves a highly advanced PDF-based exploit…
CISA Adds VMware Aria Operations Flaw to Exploited Vulnerabilities List The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about a newly discovered security flaw affecting Broadcom VMware Aria Operations, adding the vulnerability to its Known Exploited…
Google has revealed that it worked alongside industry partners to dismantle the infrastructure of a suspected China-linked cyber espionage group known as UNC2814. The group is believed to have compromised at least 53 organizations in 42 countries, with additional suspected…
⚠️ Massive Supply-Chain Attack Targets Developers via Malicious npm Packages Security researchers have uncovered an active software supply-chain campaign spreading through the npm ecosystem that behaves like a self-propagating worm. The operation relies on at least 19 malicious packages designed…
Cybercriminals are exploiting excitement around the Milano Cortina 2026 Winter Olympics by launching dozens of fraudulent online stores designed to steal shoppers’ money, payment details, and personal information. Security researchers warn that the campaign specifically targets fans searching for official…
Security researchers have uncovered a new ransomware strain known as Reynolds that takes defense evasion a step further by embedding a vulnerable driver directly inside its payload. This approach allows the malware to disable endpoint security tools before encryption begins,…
This week’s security updates weren’t defined by one major “headline hack.” Instead, they revealed something more dangerous in the long run: small missteps and quiet shifts that attackers are learning to exploit over and over. Most of the stories have…
A newly disclosed vulnerability in the GNU InetUtils telnet daemon (telnetd) has raised serious concerns after remaining unnoticed for almost 11 years. The flaw is tracked as CVE-2026-24061 and carries a CVSS score of 9.8 (Critical). It impacts GNU InetUtils…
In today’s cybersecurity landscape, the gap between routine maintenance and a full-blown security incident is shrinking fast. Systems that once felt stable are now under constant strain as organizations roll out new AI features, automated workflows, and connected services. Each…
