Researchers Expose SVG and PureRAT Phishing Threats Targeting Ukraine and Vietnam

Sep 26, 2025Ravie LakshmananMalware / Cryptocurrency A new campaign has been observed impersonating Ukrainian government agencies in phishing attacks to deliver CountLoader, which is then used to drop Amatera Stealer and PureMiner. “The phishing emails contain malicious Scalable Vector Graphics (SVG) files designed to trick recipients into opening harmful attachments,” Fortinet FortiGuard Labs researcher Yurren […]

Continue Reading

Bird-Inspired Robot With Innovative Wing Design Achieves Self-Takeoff and Controlled Flight

Researchers in China have unveiled RoboFalcon 2.0, a bird-inspired robot with flapping, sweeping, and folding wing motions. Unlike earlier versions, it can achieve self-takeoff and maintain flight at low speeds. Tested in wind tunnels and real-world trials, the design showed improved control and reduced strain on lift. While limitations remain, such as hovering abilit…

Continue Reading

New COLDRIVER Malware Campaign Joins BO Team and Bearlyfy in Russia-Focused Cyberattacks

The Russian advanced persistent threat (APT) group known as COLDRIVER has been attributed to a fresh round of ClickFix-style attacks designed to deliver two new “lightweight” malware families tracked as BAITSWITCH and SIMPLEFIX. Zscaler ThreatLabz, which detected the new multi-stage ClickFix campaign earlier this month, described BAITSWITCH as a downloader that ultimately drops SIMPLEFIX, a […]

Continue Reading

Fortra GoAnywhere CVSS 10 Flaw Exploited as 0-Day a Week Before Public Disclosure

Sep 26, 2025Ravie LakshmananVulnerability / Threat Intelligence Cybersecurity company watchTowr Labs has disclosed that it has “credible evidence” of active exploitation of the recently disclosed security flaw in Fortra GoAnywhere Managed File Transfer (MFT) software as early as September 10, 2025, a whole week before it was publicly disclosed. “This is not ‘just’ a CVSS […]

Continue Reading

New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module

Sep 26, 2025Ravie LakshmananMalware / Browser Security Cybersecurity researchers have discovered an updated version of a known Apple macOS malware called XCSSET that has been observed in limited attacks. “This new variant of XCSSET brings key changes related to browser targeting, clipboard hijacking, and persistence mechanisms,” the Microsoft Threat Intelligence team said in a Thursday […]

Continue Reading

Crash Tests for Security: Why BAS Is Proof of Defense, Not Assumptions

Sep 26, 2025The Hacker NewsSecurity Validation / Enterprise Security Car makers don’t trust blueprints. They smash prototypes into walls. Again and again. In controlled conditions. Because design specs don’t prove survival. Crash tests do. They separate theory from reality. Cybersecurity is no different. Dashboards overflow with “critical” exposure alerts. Compliance reports tick every box. But […]

Continue Reading

Amazon Sale 2025: Smartphones Under Rs 30,000 From iQOO, Samsung and More During the Great Indian Festival Sale

Amazon Great Indian Festival Sale 2025 is live in India, bringing major discounts on smartphones and more. While earlier we highlighted deals on budget models under Rs. 10,000 and premium phones under Rs. 50,000, we now shift the spotlight to mid-range devices priced below Rs. 30,000. Popular brands like Samsung, Xiaomi, OnePlus, and Realme are […]

Continue Reading