Red Dog Security

CrowdStrike confirmed last month that its security team identified and terminated an employee who transmitted screenshots of the company's internal systems to hackers. The screenshots appeared in the Telegram channel operated by Scattered Lapsus$ Hunters, a collective comprised of members from Scattered Spider, LAPSUS$, and ShinyHunters. The leaked

Security researchers from Push Security report that the Sneaky2FA phishing platform has added browser-in-the-browser attack capabilities. This technique creates fake login windows that steal both credentials and active sessions from victims. Sneaky2FA ranks among the most widely used PhaaS (phishing-as-a-service) platforms in cybercriminal circles. Along with Tycoon2FA and Mamba2FA, this

Microsoft has announced that it will integrate the popular tool Sysmon directly into Windows 11 and Windows Server 2025 in 2026. The announcement was made by Mark Russinovich, creator of Sysinternals. Sysmon Overview Sysmon (System Monitor) is a free Microsoft Sysinternals tool for monitoring and blocking suspicious activity on Windows.

Analysts from Oligo Security have uncovered a large-scale campaign dubbed ShadowRay 2.0. Attackers are exploiting a two-year-old RCE vulnerability in the open-source Ray framework, using it to turn AI clusters into a self-propagating botnet. Ray Framework Background Ray, created by Anyscale, is commonly used for developing and deploying large-scale

D-Link Warns of RCE Vulnerabilities in Older DIR-878 Routers D-Link has issued a warning about three separate remote code execution (RCE) vulnerabilities in the DIR-878 router. The issues affect all models and hardware revisions of these routers. However, the devices have been unsupported since 2021, so patches will not be

Specialists at ThreatFabric have discovered a new banking Trojan named Sturnus. The malware can intercept messages from end-to-end encrypted messengers (Signal, WhatsApp, Telegram) and gain full control over devices via VNC. Technical Architecture Researchers explain that Sturnus uses an advanced communication scheme with its command-and-control (C&C) servers: a