APT36 Targets Indian Government with Golang-Based DeskRAT Malware Campaign

Oct 24, 2025Ravie LakshmananCyber Espionage / Malware A Pakistan-nexus threat actor has been observed targeting Indian government entities as part of spear-phishing attacks designed to deliver a Golang-based malware known as DeskRAT. The activity, observed in August and September 2025 by Sekoia, has been attributed to Transparent Tribe (aka APT36), a state-sponsored hacking group known […]

Continue Reading

The Cybersecurity Perception Gap: Why Executives and Practitioners See Risk Differently

Oct 24, 2025The Hacker NewsCyber Resilience / Data Protection Does your organization suffer from a cybersecurity perception gap? Findings from the Bitdefender 2025 Cybersecurity Assessment suggest the answer is probably “yes” — and many leaders may not even realize it. This disconnect matters. Small differences in perception today can evolve into major blind spots tomorrow. […]

Continue Reading

3,000 YouTube Videos Exposed as Malware Traps in Massive Ghost Network Operation

Oct 24, 2025Ravie LakshmananMalware / Hacking News A malicious network of YouTube accounts has been observed publishing and promoting videos that lead to malware downloads, essentially abusing the popularity and trust associated with the video hosting platform for propagating malicious payloads. Active since 2021, the network has published more than 3,000 malicious videos to date, […]

Continue Reading

‘Privacy Friendly’ Universe Browser Behaves Like Malware With Keylogging and Disabled Security Tools, Warn Researchers

Cybersecurity researchers have discovered a potential threat linked to a “privacy friendly” browser. Dubbed the Universe Browser, it is said to route its connections through servers in China and quietly installs several programs that covertly run in the background. The cybersecurity firm discovered that it was linked to a network of illegal gaming websites and […]

Continue Reading

Microsoft Patches Windows 11 Bug After Update Disabled Mouse, Keyboard Input in Recovery Mode

After installing the October update (KB5066835), USB keyboards and mice, and other input devices were not working in the Windows Recovery Environment (WinRE). To fix the bug, Microsoft has announced a new out-of-band (OOB) update with builds 26200.6901 and 26100.6901. The emergency update is distributed automatically via Windows Update, but interested users can downlo…

Continue Reading

Self-Spreading ‘GlassWorm’ Infects VS Code Extensions in Widespread Supply Chain Attack

Oct 24, 2025Ravie LakshmananDevOps / Malware Cybersecurity researchers have discovered a self-propagating worm that spreads via Visual Studio Code (VS Code) extensions on the Open VSX Registry and the Microsoft Extension Marketplace, underscoring how developers have become a prime target for attacks. The sophisticated threat, codenamed GlassWorm by Koi Security, is the second such supply […]

Continue Reading