Russian Group EncryptHub Exploits MSC EvilTwin Vulnerability to Spread Fickle Stealer Malware

A Russian-linked cybercrime group known as EncryptHub has recently been exposed for using a serious Windows flaw called MSC EvilTwin to deliver malware. Security researchers revealed that the attackers are exploiting the vulnerability, identified as CVE-2025-26633, to spread a data-stealing tool named Fickle Stealer. The vulnerability allows malicious Microsoft Console (.msc) files to run in … Continued

U.S. Sanctions Russian Crypto Exchange Garantex and Successor Grinex, Offers $6 Million Reward for Key Leaders

The U.S. Departments of State and Treasury have jointly intensified their crackdown on illicit cryptocurrency networks by targeting Garantex, a Russian-operated exchange accused of serving as a major hub for money laundering by cybercriminals and organized crime groups. Through the Transnational Organized Crime Rewards Program (TOCRP), the U.S. State Department has announced rewards totaling up … Continued

Cisco Alerts on Critical CVSS 10.0 RADIUS Vulnerability in Secure Firewall Management Center

Cisco has issued urgent patches for a critical vulnerability in its Secure Firewall Management Center (FMC) software, rated the highest possible severity (CVSS score: 10.0). If exploited, the flaw could enable remote attackers to run arbitrary code on vulnerable systems. Tracked as CVE-2025-20265, the issue lies in the RADIUS subsystem of FMC. An unauthenticated attacker … Continued

CISA Flags Two Actively Exploited N-central Vulnerabilities: CVE-2025-8875 and CVE-2025-8876

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities in N-able’s N-central software to its Known Exploited Vulnerabilities (KEV) Catalog. This listing confirms that the flaws are being actively targeted by attackers and require urgent attention from organizations using the platform. N-able N-central is a popular remote monitoring and management (RMM) tool … Continued

Charon Ransomware Targets Middle East with Nation-State Level Tactics

A new ransomware strain called Charon has been making headlines after targeting organizations in the Middle East. The main victims are from the public sector and aviation industry. What makes this attack more dangerous than usual is that the hackers are using techniques normally seen in nation-state cyber espionage groups. This makes the ransomware much … Continued

Manpower Data Breach Exposes Nearly 145,000 Individuals’ Personal Information

Manpower, the international staffing and workforce solutions company, has announced a data breach that may have affected 144,189 people. The company sent formal notifications after completing its investigation, confirming that sensitive personal information might have been accessed by unauthorized parties. The breach involved Manpower and associated staffing operations. It started when staff in Lansing, Michigan, … Continued

Connex Credit Union Data Breach Exposes 172,000 Members’ Personal Information

Connex Credit Union has confirmed that a major cyberattack exposed the personal information of approximately 172,000 individuals. The affected group includes current and former members, along with others connected to the credit union. The organization has called this one of the most serious security incidents in its history. The breach occurred in early June 2025 … Continued

Win-DDoS Flaws Let Attackers Weaponize Public Domain Controllers

Security researchers from SafeBreach Labs have discovered a new set of denial-of-service (DoS) vulnerabilities in Windows, known as Win-DoS and Win-DDoS. These flaws allow attackers to abuse publicly accessible Windows domain controllers to generate massive amounts of traffic, turning them into a large-scale distributed denial-of-service (DDoS) botnet without the need for malware. The team identified … Continued

Newsletter line