Humanoid Robots are Walking Trojan Horses — And They’re Already in the Workplace
A new study reveals severe security flaws in the Unitree G1 humanoid robot, exposing risks from Bluetooth backdoors to hidden...
Month: October 2025
Survey Surfaces Extent to Which Cybersecurity Teams Are Drowning in Alerts
A new Illumio survey shows 67% of security teams face 2,000+ daily alerts, fueling fatigue and missed threats. AI/ML seen...
Closing the Gaps: Protecting Your Pipeline from Open Source Malware
Open source software is the backbone of modern development, powering everything from business applications to AI-driven systems. But with that...
Confucius Hackers Hit Pakistan With New WooperStealer and Anondoor Malware
Oct 02, 2025Ravie LakshmananMalware / Cyber Espionage The threat actor known as Confucius has been attributed to a new phishing...
Alert: Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown
Oct 02, 2025Ravie LakshmananPython / Malware Cybersecurity researchers have flagged a malicious package on the Python Package Index (PyPI) repository...
Microsoft Launches Security Store to Unify AI-Powered Defense Tools
Microsoft Security Store Source: Microsoft Microsoft has introduced its Security Store, a new commercial marketplace for security solutions and AI...
DeepSeek AI Models Are Easier to Hack Than US Rivals, Warn Researchers
Image: Solen Feyissa/Unsplash China’s DeepSeek AI has come under fire after a U.S. government-backed evaluation found the models struggling on...
Google Mandiant: Emails Sent to Corporate Execs Claiming Oracle Data Theft
Corporate executives at multiple organizations are receiving malicious emails from threat actors saying they are associated with the Cl0p ransomware...
Cybercrime group claims to have breached Red Hat ‘s private GitHub repositories
Cybercrime group claims to have breached Red Hat ‘s private GitHub repositories Pierluigi Paganini October 02, 2025 The cybercrime group...
Automating Pentest Delivery: 7 Key Workflows for Maximum Impact
Penetration testing is critical to uncovering real-world security weaknesses. With the shift into continuous testing and validation, it is time...
ThreatsDay Bulletin: CarPlay Exploit, BYOVD Tactics, SQL C2 Attacks, iCloud Backdoor Demand & More
Oct 02, 2025Ravie LakshmananThreat Intelligence / Cyber Attacks From unpatched cars to hijacked clouds, this week's Threatsday headlines remind us...
Google Mandiant Probes New Oracle Extortion Wave Possibly Linked to Cl0p Ransomware
Oct 02, 2025Ravie LakshmananRansomware / Threat Intelligence Google Mandiant and Google Threat Intelligence Group (GTIG) have disclosed that they are...
How to Close Threat Detection Gaps: Your SOC’s Action Plan
Running a SOC often feels like drowning in alerts. Every morning, dashboards light up with thousands of signals; some urgent,...
Warning: Beware of Android Spyware Disguised as Signal Encryption Plugin and ToTok Pro
Cybersecurity researchers have discovered two Android spyware campaigns dubbed ProSpy and ToSpy that impersonate apps like Signal and ToTok to...
China-linked APT Phantom Taurus uses Net-Star malware in espionage campaigns against key sectors
China-linked APT Phantom Taurus uses Net-Star malware in espionage campaigns against key sectors Pierluigi Paganini October 02, 2025 China-linked APT...
