17644 matches found
Introducing the Microsoft Defender Experts Suite: Elevate your security with expert-led services
Security teams are being pushed to their limits as AI‑powered cyberattacks grow in speed, scale, and sophistication—and only 14% of organizations surveyed by the World Economic Forum report they feel confident they have the right people and skills needed to meet their cybersecurity objectives.1 A...
WordPress Prowess theme <= 1.8.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Prowess versions = 1.8.1...
CVE-2022-50795
creationtimestamp| type| source ---|---|--- 2025-12-31 21:03:02+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mbcrah5zgi2t...
CVE-2022-50787
creationtimestamp| type| source ---|---|--- 2025-12-31 21:02:57+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mbcragijbo22...
Silver Fox Targets Indian Users With Tax-Themed Emails Delivering ValleyRAT Malware
The threat actor known as Silver Fox has turned its focus to India, using income tax-themed lures in phishing campaigns to distribute a modular remote access trojan called ValleyRAT aka Winos 4.0. "This sophisticated attack leverages a complex kill chain involving DLL hijacking and the modular...
Mustang Panda Uses Signed Kernel-Mode Rootkit to Load TONESHELL Backdoor
The Chinese hacking group known as Mustang Panda aka HoneyMyte has leveraged a previously undocumented kernel-mode rootkit driver to deliver a new variant of backdoor dubbed TONESHELL in a cyber attack detected in mid-2025 targeting an unspecified entity in Asia. The findings come from Kaspersky,...
The HoneyMyte APT evolves with a kernel-mode rootkit and a ToneShell backdoor
Overview of the attacks In mid-2025, we identified a malicious driver file on computer systems in Asia. The driver file is signed with an old, stolen, or leaked digital certificate and registers as a mini-filter driver on infected machines. Its end-goal is to inject a backdoor Trojan into the...
Get Executives on board with managing Cyber Risk
Learn how the 2025 Trend Micro Defenders Survey Report helps paint a clear picture of how security teams are looking to work with executive leaders to manage cyber risk...
Agentic AI for Cyber Resilience: A New Security Paradigm and Its System-Theoretic Foundations
Cybersecurity is being fundamentally reshaped by foundation-model-based artificial intelligence. Large language models now enable autonomous planning, tool orchestration, and strategic adaptation at scale, challenging security architectures built on static rules, perimeter defenses, and...
SCyTAG: Scalable Cyber-Twin for Threat-Assessment Based on Attack Graphs
Understanding the risks associated with an enterprise environment is the first step toward improving its security. Organizations employ various methods to assess and prioritize the risks identified in cyber threat intelligence CTI reports that may be relevant to their operations. Some methodologi...
CVE-2025-59888
creationtimestamp| type| source ---|---|--- 2025-12-26 08:27:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mauuptskow2e 2026-01-08 06:00:27+00:00| seen| Telegram/lQcdBef0ddCEr-SQONddf6xx1nvvcuOFtQ3u17iyDftrdRI 2026-01-13 03:15:58+00:00| seen|...
Uncertainty in Security: Managing Cyber Senescence
My main worry, and the core of my research, is that our cybersecurity ecosystem is slowly but surely aging and getting old and that aging is becoming an operational risk. This is happening not only because of growing complexity, but more importantly because of accumulation of controls and measure...
CVE-2025-14961
creationtimestamp| type| source ---|---|--- 2025-12-20 07:27:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115750707517759993...
ICE Seeks Cyber Upgrade to Better Surveil and Investigate Its Employees
The agency plans to renew a sweeping cybersecurity contract that includes expanded employee monitoring as the government escalates leak investigations and casts internal dissent as a threat...
Iranian APT ‘Prince of Persia’ Resurfaces With New Tools and Targets
SafeBreach reports the resurgence of the Iranian APT group Prince of Persia Infy. Discover how these state-sponsored hackers are now using Telegram bots and Thunder and Lightning malware to target victims globally across Europe, India, and Canada...
CVE-2025-66387
creationtimestamp| type| source ---|---|--- 2025-12-18 15:53:17+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mabjurziqm2b 2025-12-19 02:02:55+00:00| seen| https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3macluqbbh6v2...
PT-2025-52309
3/ CVE-2023-1423 highlights vulnerabilities exploited by AI-driven phishing, emphasizing the need for updated defenses. CyberSecurity Hacking...
Hybrid Ensemble Method for Detecting Cyber-Attacks in Water Distribution Systems Using the BATADAL Dataset
The cybersecurity of Industrial Control Systems that manage critical infrastructure such as Water Distribution Systems has become increasingly important as digital connectivity expands. BATADAL benchmark data is a good source of testing intrusion detection techniques, but it presents several...