Chinese Hackers Murky, Genesis, and Glacial Panda Escalate Cloud and Telecom Espionage 
CISA Issues Draft Software Bill of Materials Guide for Public Comment 
Linux Malware Delivered via Malicious RAR Filenames Evades Antivirus Detection 
GeoServer Exploits, PolarEdge, and Gayfemboy Push Cybercrime Beyond Traditional Botnets 
Fake Mac fixes trick users into installing new Shamos infostealer 
Colt Telecom attack claimed by WarLock ransomware, data up for sale
What’s new: Colt Technology Services, a UK-based telecommunications company, is experiencing a cyberattack attributed to the WarLock ransomware gang. The...
ERMAC V3.0 Banking Trojan Source Code Leak Exposes Full Malware Infrastructure
What’s new: The source code for the ERMAC 3.0 banking trojan has been leaked, revealing its full malware infrastructure. This...
Russian Group EncryptHub Exploits MSC EvilTwin Vulnerability to Deploy Fickle Stealer Malware
What’s new: The Russian hacking group EncryptHub is exploiting the CVE-2025-26633 vulnerability, known as MSC EvilTwin, to deploy Fickle Stealer...
Taiwan Web Servers Breached by UAT-7237 Using Customized Open-Source Hacking Tools
What’s new: A Chinese-speaking advanced persistent threat (APT) group, identified as UAT-7237, has breached web servers in Taiwan using customized...
Mobile Phishers Target Brokerage Accounts in ‘Ramp and Dump’ Cashout Scheme
What’s new: Cybercriminals are increasingly targeting brokerage accounts using sophisticated phishing kits to execute a 'ramp and dump' scheme. This...