CISA Requires Federal Agencies to Patch Critical Vulnerabilities Within 3 Days
rssfeeds-admin The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued Binding Operational Directive (BOD) 26-04,...
Cyber Security News
.webp?ssl=1 "OceanLotus APT Compromises FireAnt MetaKit in Supply-Chain Attack on Stock Investors")
OceanLotus APT Compromises FireAnt MetaKit in Supply-Chain Attack on Stock Investors
A notorious hacking group has been caught targeting stock investors in Vietnam through a supply...
GoFlateLoader Uses Massive PE Overlay to Deliver Lumma, Vidar, and StealC Infostealers
A new malware loader called GoFlateLoader has been quietly spreading across the internet, and what...
.webp?ssl=1 "Critical Langflow Vulnerability Exploited to Execute Malicious Code")
Critical Langflow Vulnerability Exploited to Execute Malicious Code
A critical security vulnerability in Langflow, tracked as CVE-2026-5027, is raising serious concerns after researchers...
.webp?ssl=1 "Hackers Abuse SniperDz PhaaS Ecosystem for Brand Impersonation and Browser Hijacking")
Hackers Abuse SniperDz PhaaS Ecosystem for Brand Impersonation and Browser Hijacking
A sophisticated Phishing-as-a-Service (PhaaS) platform called SniperDz has been quietly enabling a wide range of...
Researcher Hacked Google Using AI and Earned $500,000 Bug Bounty
A security researcher known as brutecat has disclosed how an AI-driven fuzzing pipeline uncovered more...
GitHub to Automatically Disable npm Script Installs Against Attacks
GitHub has announced a security-focused overhaul of npm with the upcoming release of npm v12,...
OceanLotus APT Targets Stock Investors in FireAnt MetaKit Supply-Chain Attack
The Vietnam-aligned threat actor OceanLotus, widely known as APT32, has shifted its operational focus from...
Hackers Abuse SniperDz PhaaS for Brand Impersonation Attacks
Threat actors are leveraging a sophisticated Phishing-as-a-Service (PhaaS) platform named SniperDz to impersonate trusted brands,...
GreatXML BitLocker 0-Day Bypass Exploited Through Defender Offline Scan
A newly disclosed zero-day vulnerability dubbed “GreatXML” allows attackers to completely bypass BitLocker encryption on...