Latest

Researchers at Sekoia have mapped the internal structure of the PolarEdge botnet, a modular backdoor campaign that consolidates infected networking and NAS devices into a distributed botnet. First described in February 2025, PolarEdge has since been linked to attacks against Cisco, ASUS, QNAP, and Synology hardware; however, the operators’ ultimate

Microsoft has fixed what experts are calling the most severe ASP.NET vulnerability in history—a critical flaw rated 9.9 out of 10 on the CVSS scale. The vulnerability, tracked as CVE-2025-55315, affects the ASP.NET Core Kestrel web server and stems from an HTTP request smuggling weakness. The

Koi Security researchers have uncovered a large-scale supply chain attack targeting both OpenVSX and the Visual Studio Code Marketplace. The attackers are distributing self-replicating malware known as GlassWorm, which has already been installed roughly 35,800 times. Infected Extensions Researchers identified twelve compromised extensions — eleven hosted on OpenVSX and one

Microsoft has confirmed that its October security update disables USB input devices in the Windows Recovery Environment (WinRE), rendering wired mice and keyboards unusable during system recovery. What Happened The issue stems from the October 2025 cumulative update KB5066835, which introduces a bug that prevents USB peripherals from functioning inside

Hackers have stolen personal data belonging to more than 17.6 million people after breaching the systems of the U.S.-based financial technology company Prosper. The compromised information includes names, home addresses, dates of birth, email addresses, Social Security numbers, identification documents, and employment-related details. Prosper’s Role in

Researchers have identified 131 extensions in the official Chrome Web Store that automate actions on WhatsApp Web and were used to send mass spam to Brazilian users. The cluster shares a single codebase, identical design patterns, and common infrastructure, and it currently accounts for roughly 20,905 active users, according

Researchers from Seqrite Labs have uncovered a new malicious campaign believed to target the Russian automotive industry and e-commerce platforms. The attackers are deploying a previously unknown .NET-based backdoor named CAPI to conduct data theft and system reconnaissance. Infection Vector: Phishing with a Tax-Themed Decoy According to the researchers, the