WinRAR has addressed a directory traversal vulnerability tracked as CVE-2025-6218 that, under certain circumstances, allows malware to be executed after extracting a malicious archive. […] Go to Source Author: Bill Toulas
Category Archives: Security
A recent vulnerability in Citrix NetScaler ADC and Gateway is dubbed “CitrixBleed 2,” after its similarity to an older exploited flaw that allowed unauthenticated attackers to hijack authentication session cookies from vulnerable devices. […] Go to Source Author: Bill Toulas
The French police have reportedly arrested five operators of the BreachForum cybercrime forum, a website used by cybercriminals to leak and sell stolen data that exposed the sensitive information of millions. […] Go to Source Author: Bill Toulas
SonicWall is warning customers that threat actors are distributing a trojanized version of its NetExtender SSL VPN client used to steal VPN credentials. […] Go to Source Author: Bill Toulas
Trezor is alerting users about a phishing campaign that abuses its automated support system to send deceptive emails from its official platform. […] Go to Source Author: Bill Toulas
A cybersecurity researcher has developed FileFix, a variant of the ClickFix social engineering attack that tricks users into executing malicious commands via the File Explorer address bar in Windows. […] Go to Source Author: Ionut Ilascu
Legacy pentests give you a snapshot. Attackers see a live stream. Sprocket’s Continuous Penetration Testing (CPT) mimics real-world attackers—daily, not annually—so you can fix what matters, faster. Learn why CPT is the future. […] Go to Source Author: Sponsored by Sprocket Security
The U.S. House of Representatives has banned the installation and use of WhatsApp on government-issued devices belonging to congressional staff, citing concerns over how the app encrypts and secures data. […] Go to Source Author: Bill Toulas
The Russian state-sponsored threat group APT28 is using Signal chats to target government targets in Ukraine with two previously undocumented malware families named BeardShell and SlimAgent. […] Go to Source Author: Bill Toulas
A new mobile crypto-stealing malware called SparkKitty was found in apps on Google Play and the Apple App Store, targeting Android and iOS devices. […] Go to Source Author: Bill Toulas