Latest

Trend Micro researchers have discovered a new malicious campaign targeting unpatched Cisco devices, using a recently fixed zero-day vulnerability to deploy rootkits that hide deep within network firmware. The flaw, CVE-2025-20352 (CVSS 7.7), affects all supported versions of Cisco IOS and IOS XE, the operating systems powering much of

Google’s Threat Intelligence Group (GTIG) has uncovered a new North Korean cyber campaign that hides malware within blockchain smart contracts — a sophisticated evasion method known as EtherHiding. According to GTIG, the group UNC5342 has used this technique since February 2025 in “Contagious Interview” operations aimed at stealing cryptocurrency from

5CA, a contractor providing customer support services to Discord, has denied responsibility for the recent data breach that exposed user identification documents and partial payment information. Earlier this month, Discord confirmed a cyber incident linked to the compromise of a third-party vendor’s systems on September 20, 2025. The company

Kaspersky Lab has detected a new wave of targeted cyberattacks by the Librarian Likho group—previously known as Librarian Ghouls—against organizations in Russia’s aviation and radio industries. For the first time, the threat actors are using custom-built malware to steal confidential information malware that researchers say was developed

A China-linked cyber-espionage group known as Jewelbug infiltrated the network of a Russian IT services provider, maintaining access for nearly five months, according to a report by the Symantec Threat Hunter Team. The breach marks the first time the group has been observed operating outside Southeast Asia and South America,