Viber Exploited: Russia-Aligned Hackers Intensify Intelligence Operations Against Ukraine

Russia-aligned threat actor UAC-0184 has intensified its cyber espionage operations, actively targeting Ukrainian military and government entities by exploiting the Viber messaging platform to disseminate …

Read more

Modified Shai-Hulud Worm Surfaces on npm Registry, Escalating Supply Chain Risks

Cybersecurity researchers recently disclosed the detection of a modified Shai-Hulud worm strain actively testing a payload within the npm registry, specifically embedded in the “@vietmoney/react-big-calendar” …

Read more

Critical Authentication Bypass Flaw Exposes IBM API Connect Systems

IBM has recently disclosed a critical security flaw, tracked as CVE-2025-13915, within its API Connect authentication system, allowing remote attackers to bypass established security mechanisms …

Read more

Critical Exposure: Over 10,000 Fortinet Firewalls Remain Vulnerable to Five-Year-Old 2FA Bypass

Over 10,000 Internet-exposed Fortinet firewalls are currently susceptible to active exploitation of a five-year-old two-factor authentication (2FA) bypass vulnerability, posing a significant and persistent security …

Read more

Cyber Deception: ShinyHunters Claims Resecurity Breach, Firm Cries Honeypot

The notorious ShinyHunters hacking collective recently alleged a successful breach of cybersecurity firm Resecurity’s internal systems, claiming to have exfiltrated a significant volume of proprietary …

Read more

React2Shell Vulnerabilities: Critical Infrastructure Under Immediate Threat from Rapid Exploitation

Threat actors are swiftly leveraging newly disclosed React2Shell (RSC) vulnerabilities, integrating them into scanning and reconnaissance routines to target critical infrastructure globally, specifically sectors involved …

Read more