Kiteworks Urges Global Server Shutdown Amid Imminent Cyberattack Threat
Secure file-sharing software provider Kiteworks has issued an urgent, worldwide directive to its customers, advising a temporary, six-hour shutdown of their servers on Saturday, September 26th. This unprecedented advisory stems…
Elementor WordPress Flaw Lets Attackers Create Admin Accounts
A critical security vulnerability within the widely-used Elementor website builder plugin for WordPress has been uncovered, potentially allowing unauthenticated attackers to gain administrative control over websites. The flaw, a cross-site…
The Architect of Rydox, a Vast Illicit Digital Marketplace, Pleads Guilty in Landmark Cybercrime Case
A Kosovar national, Ardit Kutleshi, has formally admitted to operating Rydox, a sprawling and sophisticated illegal online marketplace that served as a central hub for the distribution of stolen personal…
Cryptocurrency Exchange Bitget Suffers Major Breach, Suspected North Korean Hackers Embezzle $351.6 Million
Global Cybersecurity Alert Issued as Sophisticated Attack Targets Digital Assets In a significant development that has sent ripples through the cryptocurrency industry, leading digital asset exchange Bitget announced on Thursday…
Carbonato Malware Leverages AI Agents to Hijack Exposed Docker Hosts
A sophisticated new botnet malware, dubbed Carbonato, has emerged, exhibiting alarming worm-like capabilities and a strategic reliance on advanced AI agents to compromise unsecured Docker hosts. Threat actors are exploiting…
MacSync Malware Evolves, Leverages iCloud Calendars for Stealthy Payload Delivery
A sophisticated and evolving strain of MacSync malware, designed to pilfer sensitive information from macOS systems, has adopted a novel and stealthy distribution method: public iCloud calendar events. This development…
Exposed GitLab Project Email Addresses Allow Attackers to Push Code
A critical vulnerability within GitLab, a popular platform for software development and version control, has been brought to light, revealing that private email addresses intended for submitting issues and tasks…
Windows 11 KB5124010 update released with 46 changes and fixes
Microsoft has rolled out the KB5124010 optional non-security preview update for Windows 11 versions 24H2 and 25H2, introducing a substantial package of 46 changes aimed at refining user experience and…
New RemControl Android Banking Malware Leverages AI and Sophisticated Evasion Tactics to Target European and Canadian Users
A sophisticated new Android malware-as-a-service (MaaS) platform, dubbed RemControl, has emerged, employing advanced evasion techniques and a chilling reliance on artificial intelligence to target unsuspecting users across Europe, Canada, and…
Placeholder domain used in dev docs now serves ClickFix attacks
The domain, commonly employed by developers as a stand-in for arbitrary external websites, APIs, or services—akin to the IANA-reserved example.com—has become a potent vector for cyber threats. Unlike example.com, example.net,…
















