Fake VPN and Spam Blocker Apps Tied to VexTrio Used in Ad Fraud, Subscription Scams
What’s new: A report by Infoblox reveals that the malicious ad tech group VexTrio has developed fake VPN and spam...
Month: August 2025
Researchers Uncover ECScape Flaw in Amazon ECS Enabling Cross-Task Credential Theft
What’s new: Researchers have identified a vulnerability in Amazon Elastic Container Service (ECS) dubbed "ECScape," which allows low-privileged containers to...
Akira ransomware abuses CPU tuning tool to disable Microsoft Defender
What’s new: Akira ransomware is exploiting the Intel CPU tuning driver 'rwdrv.sys' to disable Microsoft Defender during attacks. This driver...
St. Paul Declares Emergency After Major Cyberattack; AI Malware and Cryptographic Breakthroughs Highlight Evolving Threats
🔐 St. Paul Cyberattack On July 25, 2025, the city of St. Paul, Minnesota was hit by a sophisticated cyberattack...
AI-generated npm package drains Solana wallets (1,500+ installs)
What’s new: Researchers uncovered @kodane/patch-manager, an AI-generated npm package that hid a stealth wallet drainer triggered via postinstall. It created...