Google mandates a 16KB memory page size for all Android apps by Nov. 1, 2025, to improve performance. .NET MAUI 9 now natively supports the new standard.

The TamperedChef malware campaign uses trojanized apps and digitally signed binaries to steal browser data. Attackers use SEO poisoning to trick users into downloading.

A phishing campaign is impersonating Ukrainian police via malicious SVG files to deliver Amatera Stealer and PureMiner, a stealthy cryptominer, to victims.

A new DarkCloud infostealer variant uses VB6 obfuscation and anti-analysis techniques to steal credentials and crypto wallets from MetaMask, Exodus, and more.

A new report shows LAPSUS$, Scattered Spider, and ShinyHunters have formed a collaborative alliance, sharing tactics like social engineering and MFA bypass to launch global attacks.

Akira ransomware is exploiting stolen SonicWall VPN credentials, even with MFA enabled, to gain access and deploy its payload within as little as 55 minutes.

A Chinese APT, RedNovember, is using backdoors like Pantegana and SparkRAT to expand its global espionage, targeting U.S. defense, aerospace, and tech firms.

Huntress details a multi-stage attack that uses DLL sideloading and obfuscated Python to deliver PureRAT, a commercial-grade remote access trojan linked to PXA Stealer.

A new XCSSET variant targets macOS developers by infecting Xcode projects. It now steals Firefox data, hijacks clipboards for crypto theft, and enhances its persistence.

A new Morte botnet campaign is exploiting command injection flaws to hijack SOHO routers and enterprise apps. The Loader-as-a-Service model saw a 230% spike this summer.

Russia-linked APT COLDRIVER is using a new multi-stage malware campaign (BAITSWITCH/SIMPLEFIX) with a ClickFix lure to target journalists and activists for espionage.

Summary

When Fancy Tools Fail, Sometimes Text Processing Is Enough

TOPICS

Deepfake scams, AI malware, and business email compromise are no longer sci-fi — they’re draining small businesses today.

Forensic Deep Dive: Unraveling the Lockdown Intrusion at TechNova Systems

An AI-assisted pipeline that reduces 8,000+ templates into focused, actionable scans — faster and cleaner AppSec testing.

AI in Cybersecurity: A Double-Edge Sword

This study adopted a purely simulation-based methodology to investigate and improve the efficiency of privacy amplification techniques…

Honeypots are a fascinating way to study real-world attack behavior. By intentionally deploying a vulnerable system and monitoring it, you…