Author: nitya

The United States and several international cybersecurity agencies have issued a new joint warning about ongoing cyber threats linked to Russian intelligence services. The advisory says these threat actors are actively targeting critical infrastructure organizations by exploiting vulnerable and poorly secured network devices. Officials are urging organizations to strengthen their cyber defenses immediately to reduce … Continued

A serious cybersecurity issue has been discovered in two popular Joomla extensions, iCagenda and Balbooa Forms. Security researchers confirmed that both vulnerabilities were being actively exploited by attackers before official fixes were released, making them true zero-day vulnerabilities. Because these extensions are widely used on Joomla websites, thousands of websites could have been exposed to … Continued

A new cybersecurity study has raised serious concerns about the security of many free Android VPN apps available on the Google Play Store. Researchers developed a testing framework called MVPNalyzer to examine how these apps actually handle user traffic and privacy. After analyzing 281 popular Android VPN apps, they found that many failed to provide … Continued

Security researchers have uncovered a new remote access trojan (RAT) called MODBEACON, a highly modular malware believed to be used by a Silver Fox-linked Ghost malware distributor. The malware was discovered during investigations into targeted attacks against organizations in Asia. Unlike common malware that spreads widely, MODBEACON appears to be deployed only against selected victims, … Continued

Police agencies from around the world have carried out one of the biggest anti-fraud operations ever, leading to the arrest of more than 5,800 suspects involved in cyber-enabled financial crimes. The coordinated crackdown targeted criminal networks operating across multiple countries and focused on disrupting large-scale fraud activities. Authorities also seized large amounts of illegal assets … Continued

Cybersecurity researchers have discovered a new ransomware operation called GodDamn that uses an advanced technique to disable security software before encrypting files. According to researchers, this ransomware is not entirely new but is believed to be the latest version of the Beast ransomware family, which itself evolved from the Monster ransomware first seen in 2022. … Continued

A newly discovered cyberattack technique called HalluSquatting has revealed a serious security risk for developers who rely on AI coding assistants. Security researchers found that attackers can take advantage of AI-generated mistakes by creating fake software packages with names that AI models invent but do not actually exist. If developers trust these suggestions without checking … Continued

A newly disclosed Linux kernel vulnerability named GhostLock (CVE-2026-43499) has raised serious security concerns after researchers revealed that it had remained hidden in the operating system for nearly 15 years. The flaw affects most major Linux distributions and allows a local attacker to gain full root privileges on an unpatched system. Security researchers also confirmed … Continued

A newly released court filing has revealed that a unique Windows device identifier played an important role in helping the FBI identify and trace an alleged member of the Scattered Spider cybercrime group. Investigators said Microsoft provided technical information that helped connect the suspect’s Windows device to online activity. The case has drawn attention because … Continued

A newly disclosed Linux kernel vulnerability, named Januscape and tracked as CVE-2026-53359, has raised serious concerns for organizations that use virtual machines. The flaw exists in the Linux Kernel-based Virtual Machine (KVM) hypervisor and affects both Intel and AMD x86 systems. Researchers say the vulnerability has remained hidden in the Linux kernel for nearly 16 … Continued