The Exploit Post

Sign in Subscribe

Red Dog Security

Microsoft Edge Will Block Malicious Third-Party Extensions

Microsoft Edge Will Block Malicious Third-Party Extensions

Microsoft has announced a new security feature for its Edge browser that will block malicious extensions installed outside the official store. Sideloading: A Security Loophole In Edge, developers can install extensions locally—known as sideloading—to test them before submitting to the official Microsoft Edge Add-ons store. This requires enabling

Hackers Deploy Brickstorm Malware Against U.S. Technology and Legal Organizations

Hackers Deploy Brickstorm Malware Against U.S. Technology and Legal Organizations

Google specialists report that suspected Chinese hackers have used the Brickstorm malware in espionage operations targeting American organizations in the technology and legal sectors. The attackers remained hidden in victim networks for roughly 400 days before being discovered. The Malware: Brickstorm Brickstorm is a backdoor written in Go, first observed

PyPI Users Warned Again About Phishing Attacks

PyPI Users Warned Again About Phishing Attacks

The Python Software Foundation (PSF) has issued a fresh warning about an ongoing phishing campaign targeting developers who use the Python Package Index (PyPI). Attackers are impersonating PyPI with a look-alike domain to steal login credentials. Recurring Campaign This latest wave continues a series of attacks first observed in July

Two Malicious Packages Found in Rust Crates.io Repository

Two Malicious Packages Found in Rust Crates.io Repository

Two malicious packages with a combined total of roughly 8,500 downloads have been discovered in the official Rust repository. The malware scanned developers’ systems to steal private cryptocurrency keys and other sensitive data. Discovery and Impact Rust packages, known as crates, are distributed through Crates.io—the equivalent of

Hacktivist Group BO Team Uses New Backdoor Against Russian Organizations

In early September 2025, researchers at Kaspersky Lab uncovered a new campaign by the hacktivist group BO Team, which has been targeting Russian organizations across multiple sectors. The attackers have updated their toolkit and are now deploying a rewritten version of the BrockenDoor backdoor. Background on BO Team BO Team—

Two Million Cisco Devices Threatened by Actively Exploited 0-Day Vulnerability

Two Million Cisco Devices Threatened by Actively Exploited 0-Day Vulnerability

Cisco has warned that a critical zero-day vulnerability (CVE-2025-20352) affecting IOS and IOS XE is being actively exploited. The flaw could allow remote denial-of-service (DoS) attacks or arbitrary code execution on a wide range of the company’s networking devices. Widespread Exposure According to Cisco, the vulnerability is present in

ShadowV2 Botnet Uses Misconfigured Docker Containers for DDoS Attacks

ShadowV2 Botnet Uses Misconfigured Docker Containers for DDoS Attacks

Darktrace researchers have uncovered a new distributed denial-of-service (DDoS) botnet that exploits misconfigured Docker containers. Instead of operating like a conventional botnet, ShadowV2 sells access to infected systems, allowing clients to launch their own attacks. A New Take on DDoS-as-a-Service ShadowV2 breaks from the traditional model of for-hire DDoS services.