A mysterious new hacking group known as SmudgedSerpent has been found targeting U.S. policy experts and academics who focus on Iran-related issues. The campaign took place between June and August 2025, a period marked by increasing tension between Iran and Israel. Cybersecurity researchers believe this was a deliberate espionage attempt linked to the ongoing regional … Continued
The United States government has announced new sanctions against ten North Korean individuals and companies accused of laundering about $12.7 million through cryptocurrency and fraudulent IT-worker schemes. According to the U.S. Department of the Treasury, these funds came from cyber thefts and online fraud operations connected to North Korea’s state-controlled financial networks. In this action, … Continued
A new cyber espionage campaign known as Operation SkyCloak is targeting military and defense organizations in Russia and Belarus. Security researchers have discovered that the attackers are using phishing emails with fake military documents to deliver malicious files. The campaign appears to be focused on stealing sensitive information and maintaining long-term access to defense systems. … Continued
Google’s artificial intelligence system, called Big Sleep, has recently discovered five new security flaws in Apple’s WebKit engine. WebKit is the main technology that powers the Safari browser and several apps on Apple devices that display web content. These newly found flaws were serious and could be exploited by attackers if left unpatched. As soon … Continued
Researchers have discovered two new Android malware strains named BankBot-YNRK and DeliveryRAT that are actively stealing users’ financial and personal information. These trojans were found disguised as legitimate applications and are spreading through deceptive downloads and fake app packages targeting Android devices. BankBot-YNRK is a mobile banking trojan that hides inside apps pretending to be … Continued
Researchers have identified a new backdoor named HttpTroy used in a targeted cyberattack against a victim in South Korea. Security analysts link the campaign to the APT group Kimsuky, which has been associated with North Korea and known for focused espionage operations. The attackers delivered the malware through a realistic-looking VPN invoice. The invoice was … Continued
The Eclipse Foundation has announced that it has revoked a small number of access tokens used in its Open VSX Registry after a security firm discovered they had been leaked. These tokens were used by developers to publish or update extensions, and if misused, they could have allowed attackers to upload malicious versions. The Foundation … Continued
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about a new VMware zero-day vulnerability, tracked as CVE-2025-41244. The flaw has been added to CISA’s Known Exploited Vulnerabilities (KEV) list, which means it is being actively used in real-world attacks. Security experts say this vulnerability needs immediate attention from all organizations using … Continued
A major data breach has occurred at Ravin Academy, a cybersecurity training centre established in 2019 in Tehran and linked to Iran’s Ministry of Intelligence and Security (MOIS). The academy confirmed the incident through a statement on its official Telegram channel on October 22, saying that one of its online platforms was attacked and that … Continued
Security researchers recently discovered that ten malicious npm packages were uploaded to the public npm registry. These packages were designed to look like legitimate ones but had slightly altered names, a trick known as typosquatting. The goal was to make developers accidentally install them, allowing attackers to secretly execute malicious code during the installation process … Continued
