The Business of Cybercrime: Raj Samani on Access, Ransomware, and What Comes Next

Cybercrime is no longer chaotic, it’s commercial. That’s the central theme of Episode 3 in our Experts on Experts: Commanding Perspectives series, where Craig Adams sits down with Raj Samani, Chief Scientist at Rapid7, for a wide-ranging, no-nonsense conversation on today’s threat economy. They...

XWorm 6.0 Returns with 35+ Plugins and Enhanced Data Theft Capabilities

Cybersecurity researchers have charted the evolution of XWorm malware, turning it into a versatile tool for supporting a wide range of malicious actions on compromised hosts. "XWorm's modular design is built around a core client and an array of specialized components known as plugins," Trellix...

Microsoft Links Storm-1175 to GoAnywhere Exploit Deploying Medusa Ransomware

Microsoft on Monday attributed a threat actor it tracks as Storm-1175 to the exploitation of a critical security flaw in Fortra GoAnywhere software to facilitate the deployment of Medusa ransomware. The vulnerability is CVE-2025-10035 CVSS score: 10.0, a critical deserialization bug that could...

EUVD-2020-27176

Malware in sbrugna...

EUVD-2020-27177

Malware in sbrugna...

EUVD-2020-21336

Malware in sbrugna...

EUVD-2020-5022

Malware in sbrugna...

EUVD-2018-11278

Malware in sbrugna...

EUVD-2020-30271

Malware in sbrugna...

EUVD-2020-30270

Malware in sbrugna...

Investigating active exploitation of CVE-2025-10035 GoAnywhere Managed File Transfer vulnerability

On September 18, 2025, Fortra published a security advisory regarding a critical deserialization vulnerability in GoAnywhere MFT's License Servlet, which is tracked as CVE-2025-10035 and has a CVSS score of 10.0. The vulnerability could allow a threat actor with a validly forged license response...

Defending against database ransomware attacks

How attackers exploit exposed databases for extortion—and the defenses that work...

CVE-2025-61882: Critical 0day in Oracle E-Business Suite exploited in-the-wild

Overview On Saturday, October 4, 2025, Oracle published an advisory and accompanying patch for CVE-2025-61882. This new vulnerability affects the Oracle Concurrent Processing product within Oracle E-Business Suite EBS, and has a CVSS score of 9.8 Critical. Per the vendor advisory, the vulnerabili...

EUVD-2024-48579

Malicious code in bioql PyPI...

EUVD-2025-6964

Malicious code in bioql PyPI...

EUVD-2023-34457

Malicious code in bioql PyPI...

EUVD-2023-35425

Malicious code in bioql PyPI...

EUVD-2025-15660

Malicious code in bioql PyPI...

EUVD-2025-18350

Malicious code in bioql PyPI...

ThreatsDay Bulletin: CarPlay Exploit, BYOVD Tactics, SQL C2 Attacks, iCloud Backdoor Demand & More

From unpatched cars to hijacked clouds, this week's Threatsday headlines remind us of one thing — no corner of technology is safe. Attackers are scanning firewalls for critical flaws, bending vulnerable SQL servers into powerful command centers, and even finding ways to poison Chrome's settings t...