ThreatsDay Bulletin: 0-Days, LinkedIn Spies, Crypto Crimes, IoT Flaws and New Malware Waves
Nov 20, 2025Ravie LakshmananCybersecurity / Hacking News This week has been crazy in the world of hacking and online security....
been
EdgeStepper Implant Reroutes DNS Queries to Deploy Malware via Hijacked Software Updates
Nov 19, 2025Ravie LakshmananCyber Espionage / MalwareThe threat actor known as PlushDaemon has been observed using a previously undocumented Go-based...
4 U.S. Citizens, Ukrainian Plead Guilty in N. Korea IT Worker Scheme
There’s been extensive changes in cybersecurity policy in the shift from the Biden to Trump Administration, but one area...
A Polycrisis of AI Cyberattacks is Approaching. Are You Breach Ready Yet?
Unless you have been living under a rock in the past few days, you would have seen that cybersecurity...
DoorDash Hit by Cybersecurity Breach, Millions of Users Potentially Exposed
Image: mohdizzuanbinroslan/Envato Food delivery operator DoorDash has been hit by another data breach, with millions of users across the US,...
Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT
The threat actor known as Dragon Breath has been observed making use of a multi-stage loader codenamed RONINGLOADER to deliver...
RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet
Nov 15, 2025Ravie LakshmananMalware / Vulnerability The botnet malware known as RondoDox has been observed targeting unpatched XWiki instances against...
Iranian Hackers Launch ‘SpearSpecter’ Spy Operation on Defense & Government Targets
The Iranian state-sponsored threat actor known as APT42 has been observed targeting individuals and organizations that are of interest to...
Sophos named a Leader in the KuppingerCole 2025 Leadership Compass for Email Security
Click to enlarge We’re excited to announce that Sophos has been named a Leader across all four evaluation categories —...
The Mosaic Effect: Why AI Is Breaking Enterprise Access Control
Security has always been a puzzle of fragments. For decades, analysts have warned about the mosaic effect: The risk...
From Log4j to IIS, China’s Hackers Turn Legacy Bugs into Global Espionage Tools
A China-linked threat actor has been attributed to a cyber attack targeting an U.S. non-profit organization with an aim to...
The Louvre Used Its Own Name as a Password. Here’s What to Learn From It
If you’ve been watching the news, you’ve probably seen the headlines out of Paris: one of the most audacious heists...
Trojanized ESET Installers Drop Kalambur Backdoor in Phishing Attacks on Ukraine
Nov 06, 2025Ravie LakshmananMalware / Vulnerability A previously unknown threat activity cluster has been observed impersonating Slovak cybersecurity company ESET...
Bitdefender Named a Representative Vendor in the 2025 Gartner® Market Guide for Managed Detection and Response
Nov 06, 2025The Hacker NewsUnited States Bitdefender has once again been recognized as a Representative Vendor in the Gartner® Market...
Europol and Eurojust Dismantle €600 Million Crypto Fraud Network in Global Sweep
Nov 04, 2025Ravie LakshmananCybercrime / Money Laundering Nine people have been arrested in connection with a coordinated law enforcement operation...
