The malicious PyPI package SoopSocks masqueraded as a SOCKS5 proxy but secretly installed a Go-based backdoor with SYSTEM privileges, leaking system data to a Discord webhook.

A critical flaw (CVE-2025-7493) in FreeIPA allows authenticated users to exploit Kerberos alias checks to gain full domain administrator privileges. Patch to v4.12.5 now.

Unit 42 uncovers Phantom Taurus, a new Chinese APT using the fileless NET-STAR backdoor to target SQL databases and IIS servers in global espionage campaigns.

Patchwork APT has launched a new campaign in South Asia, exploiting DLL sideloading and obfuscation to deliver malware that masquerades as VLC media player for deep espionage.

OpenSSL patches three flaws, including CVE-2025-9230 (RCE/DoS risk) and a SM2 timing side-channel (CVE-2025-9231) that could allow private key recovery on ARM64.

Cleafy uncovers Klopatra, a new Android RAT using commercial Virbox obfuscation and native code to target banks in Spain/Italy, allowing invisible remote device control.Export to Sheets

The Datzbro Android Trojan is targeting seniors via fake Facebook groups and AI content. The hybrid malware can remotely control devices and steal banking credentials.

A Grooza cluster smishing campaign is exploiting unauthenticated APIs on 500+ industrial routers (Milesight) to send phishing texts impersonating Belgian and French government services.

Free Link 🎈

Maxon Codes In today’s fast-changing digital era, cyber security is no longer optional — it’s essential. With increasing threats, data…

A cautionary tale about staying secure in public networks.

A System Administrator’s Guide to Keeping Linux Safe in a Modern Threat Landscape

In today’s digital world, all companies, whether small or large, depend on technology. Technology can have weak spots, which are flaws in…

OEM Sponsorship in Cybersecurity Communities: Why It’s the Next Big Play

Phishing has become a high-stakes art of deception: attackers copy logos, copy site copy, and create near-perfect imitations that trick…

TrustedSec released Titanis, a cross-platform C# library (.NET 8) implementing key Windows protocols (SMB2, Kerberos, NTLM, MSRPC) for security testing and research.

Pro-Iranian group Handala claims to have compromised Spacecom's ground stations and leaked 379GB of data, though satellite control systems appear safe.

The unified Semicon Coalition, representing all 27 EU states, demands a revision of the Chips Act and the launch of a Chips Act 2.0 to secure the continent's chip supplies.

OpenAI's GPT-5 provided a key insight that helped mathematicians prove strict limitations for the quantum complexity class QMA, advancing abstract computational theory.

CISA has added the critical Sudo LPE flaw (CVE-2025-32463, CVSS 9.3) to its KEV catalog, mandating federal agencies patch the bug that allows local users to gain root access.

Asahi Group reports a cyberattack that paralyzed its Japanese distribution network and call center, threatening significant financial losses due to supply suspension.