Latest

Cybersecurity specialists at eSentire have discovered a new backdoor called ChaosBot, written in Rust, that allows attackers to conduct reconnaissance and execute arbitrary commands on compromised systems. The malware is notable for using Discord as its command-and-control (C2) channel. Researchers first detected ChaosBot in late September 2025 during an incident

GreyNoise analysts have identified a large-scale botnet attacking Remote Desktop Protocol (RDP) services across the United States, leveraging more than 100,000 IP addresses. According to the firm, the campaign began on October 8, 2025 and continues to expand globally. Global Footprint The campaign was first detected following an unusual

Microsoft has overhauled the Internet Explorer (IE) mode in the Edge browser after receiving “credible reports” in August 2025 that threat actors were exploiting the feature to gain unauthorized access to user devices. According to the Microsoft Browser Vulnerability Research team, attackers combined basic social engineering with unpatched zero-day vulnerabilities

Unity Technologies, the video-game software company, has disclosed a data breach involving malicious code on the website of its SpeedTree toolkit, which stole confidential information from hundreds of customers. According to a notice filed with the Maine Attorney General’s Office, malicious code was active on the SpeedTree website’s

Microsoft has warned that the cybercrime group Storm-2657 has been targeting universities across the United States since March 2025, hijacking employee accounts and redirecting payroll funds to attacker-controlled bank accounts. “Storm-2657 is actively attacking U.S. organizations—particularly employees in the higher education sector—to gain access to third-party HR

The FBI has seized another version of the notorious hacker forum BreachForums, taking control of the domain BreachForums[.]hn a site used to leak data from at least 39 organizations affected by the recent Salesforce-related breaches. According to threat actors behind the forum, law enforcement not only took the site

Cisco Talos researchers have warned that Velociraptor, a legitimate digital forensics and incident response (DFIR) tool, is being repurposed by LockBit and Babuk ransomware operators to deploy malware and maintain persistence in compromised networks. Velociraptor is an open-source DFIR utility originally developed by security researcher Mike Cohen and later acquired