Follow on Google News
Phishers abuse LiveChat support tools to steal sensitive data in new SaaS-based tactic
A newly documented phishing campaign is abusing LiveChat-hosted pages to trick victims into handing over personal, financial, and authentication data through what looks like a…
Researchers decrypt Palo Alto Cortex XDR BIOC rules and expose major evasion blind spot
Security researchers say they were able to decrypt Palo Alto Networks Cortex XDR’s preconfigured Behavioral Indicators of Compromise, or BIOC, rules and uncover a major…
New CondiBot variant and ‘Monaco’ cryptominer expand threats to network devices
Two newly documented malware strains show how quickly financially motivated attackers have moved deeper into network infrastructure. Eclypsium says a new CondiBot variant and a…
Stryker confirms destructive cyberattack as Handala-linked incident disrupts global operations
Stryker has confirmed that a March 11 cyberattack caused a global disruption to its Microsoft environment, affecting internal systems used across the company. The medical…
Handala Hack uses RDP, NetBird, and parallel wipers in MOIS-linked destructive intrusions
An Iranian threat actor known as Handala Hack has been carrying out destructive intrusions that rely on remote desktop access, NetBird tunneling, and multiple wiping…
CamelClone spy campaign abuses public file-sharing sites and Rclone in government-focused attacks
A newly documented espionage campaign called Operation CamelClone is targeting government, defense, diplomatic, and strategic-sector entities across Algeria, Mongolia, Ukraine, and Kuwait. Seqrite says the…
RondoDox botnet expands to 174 exploits, using residential IP infrastructure at scale
A fast-growing botnet called RondoDox has expanded into a large exploitation operation that now uses 174 different vulnerabilities and leans on residential IP infrastructure to…
B says that in Egypt, for example, attackers were observed using numbers formatted to resemble local mobile prefixes.
Once the victim taps the link, the phishing page often checks the user agent and shows its full content only on mobile browsers. Attackers also…
IBM finds ‘Slopoly,’ likely AI-generated malware linked to Hive0163 ransomware attack
IBM X-Force says it uncovered a likely AI-generated malware strain called Slopoly during a ransomware incident tied to the financially motivated threat group Hive0163. The…
Qihoo 360 shipped wildcard SSL private key inside public AI installer
Qihoo 360 appears to have bundled a live wildcard TLS private key inside the public installer for its new AI assistant, exposing a certificate for…
November 21, 2025
1 comment 
