Author: nitya

Cybersecurity researchers have uncovered a new cyber-espionage campaign, named Operation DragonReturn, that is targeting Indian taxpayers, tax professionals, chartered accountants, corporate finance teams, and businesses. The campaign has been linked with medium-to-high confidence to a suspected China-nexus threat cluster based on its infrastructure, attack techniques, and similarities with previously observed espionage operations. The activity was … Continued

Cybersecurity researchers have discovered a new Java-based remote access trojan (RAT) called QuimaRAT that is designed to infect Windows, Linux, and macOS systems. The malware stands out because it is written in Java, allowing attackers to use the same malicious code across multiple operating systems. Researchers found that QuimaRAT is being sold as a Malware-as-a-Service … Continued

The Qilin ransomware group has become the most active ransomware operation in the world, showing how cybercrime is becoming more organized instead of being spread across many small groups. Security researchers found that ransomware activity remains very high, but a few major gangs are now responsible for most attacks. This shift shows that experienced cybercriminal … Continued

Chinese artificial intelligence models are rapidly improving in cybersecurity, raising fresh concerns among security experts around the world. Recent research shows that some Chinese large language models (LLMs) can now match leading U.S. AI systems in specific security tasks such as finding software vulnerabilities. This marks a major shift in the global AI and cybersecurity … Continued

Google has announced a major cybersecurity operation targeting NetNut, one of the world’s largest residential proxy networks. The action was carried out with support from the FBI, Lumen Technologies, and several industry partners. According to Google’s Threat Intelligence Group (GTIG), the operation has significantly reduced NetNut’s ability to use compromised home devices across the world. … Continued

Anthropic has restored access to its Claude Fable 5 AI model after export restrictions were lifted, allowing users around the world to use the model again. The company also introduced updated safety protections designed to block certain high-risk requests more effectively. These changes were added before the model returned to public use. Users on supported … Continued

Security researchers have discovered a new macOS malware called PamStealer that is designed to quietly steal login passwords and sensitive information from Apple devices. The malware pretends to be the popular Maccy clipboard manager and is distributed through fake websites that closely copy the legitimate application. Researchers at Jamf Threat Labs uncovered the campaign and … Continued

A former Member of the European Parliament who helped investigate the misuse of Pegasus spyware has now been confirmed as one of its victims. Security researchers from Citizen Lab revealed that Greek journalist and former lawmaker Stelios Kouloglou was secretly infected with Pegasus while serving on the European Parliament’s PEGA Committee. The committee was created … Continued

FortiBleed, the large-scale campaign targeting Fortinet FortiGate firewalls and VPN gateways, has now been linked to the ransomware groups INC and Lynx, making the threat even more serious. Security researchers found evidence that the stolen credentials are not only being collected but are also being used in real ransomware operations. This marks one of the … Continued

Cybersecurity researchers have uncovered a new malware campaign that specifically targets vulnerability researchers and penetration testers. The malware, named ChocoPoC, is being spread through fake proof-of-concept (PoC) exploit repositories hosted on GitHub. These repositories appear to contain working exploits for newly disclosed security vulnerabilities, making them look trustworthy to professionals who regularly test the latest … Continued