Cisco Warns of Active Attacks Exploiting Unpatched 0-Day in AsyncOS Email Security Appliances.
Operation ForumTroll continues: Russian political scientists targeted using plagiarism reports.
CISA has added 3 vulnerabilities to the KEV Catalog
CVE-2025-59374: ASUS Live Update Embedded Malicious Code Vulnerability
CVE-2025-40602: SonicWall SMA1000 Missing Authorization Vulnerability
CVE-2025-20393: Cisco Multiple Products Improper Input Validation Vulnerability
CVE-2025-59374: ASUS Live Update Embedded Malicious Code Vulnerability
CVE-2025-40602: SonicWall SMA1000 Missing Authorization Vulnerability
CVE-2025-20393: Cisco Multiple Products Improper Input Validation Vulnerability
ESET has identified a China-aligned cyber espionage group, LongNosedGoblin, active since 2023 and targeting government networks in Southeast Asia and Japan.
It spreads malware via Windows Group Policy and uses OneDrive and Google Drive as C2, with full backdoors deployed only on select targets.
It spreads malware via Windows Group Policy and uses OneDrive and Google Drive as C2, with full backdoors deployed only on select targets.
HPE patched a CRITICAL CVSS 10.0 flaw in OneView that allows unauthenticated remote code execution.
All versions before 11.00 are affected, with hotfixes for 5.20–10.20.
No active exploits reported, but patching is urgent.
All versions before 11.00 are affected, with hotfixes for 5.20–10.20.
No active exploits reported, but patching is urgent.
North Korea–linked hackers dominated crypto crime in 2025.
They stole $2.02B, more than half of all crypto taken worldwide, per Chainalysis. One breach at Bybit alone accounted for $1.5B, making this the worst year on record for DPRK theft.
They stole $2.02B, more than half of all crypto taken worldwide, per Chainalysis. One breach at Bybit alone accounted for $1.5B, making this the worst year on record for DPRK theft.
React2Shell. Weaxor. GhostPairing. ClickFix. RC4. RuTube. MCP leaks. DDoSia. Modbus. Google Phish. DarkGate. Token spills.
Dozens of stories from one chaotic week. Read the latest ThreatsDay Bulletin — what security teams are tracking now.
Dozens of stories from one chaotic week. Read the latest ThreatsDay Bulletin — what security teams are tracking now.
North Korea–linked Kimsuky has been tied to a new Android malware campaign.
The group is spreading a fresh DocSwap variant through QR codes on fake CJ Logistics sites. Once installed, the app deploys a full RAT with access to messages, calls, files, audio, and camera.
The group is spreading a fresh DocSwap variant through QR codes on fake CJ Logistics sites. Once installed, the app deploys a full RAT with access to messages, calls, files, audio, and camera.
A critical ASUS Live Update vulnerability is now on CISA’s exploited list.
CVSS 9.3, supply chain–based, and tied to ShadowHammer, it embedded malicious code in signed updates for carefully chosen devices.
CVSS 9.3, supply chain–based, and tied to ShadowHammer, it embedded malicious code in signed updates for carefully chosen devices.
CVE-2025-20393 is rated 10.0, with no patch available.
Cisco confirmed active exploitation of an AsyncOS zero-day by a China-linked APT.
Cisco confirmed active exploitation of an AsyncOS zero-day by a China-linked APT.
The Syrian Immigrant's Son Who Shaped Silicon Valley
In the 1980s, as Apple's famous "1984" commercial declared war on a monolithic tech establishment, its co-founder Steve Jobs was becoming the face of American innovation. Few knew a pivotal detail of his origin story: Jobs was the biological son of a Syrian Muslim immigrant.
His father, Abdulfattah "John" Jandali, came to the U.S. from Syria in the 1950s for graduate studies. While Jobs was adopted and raised lovingly by Paul and Clara Jobs in California, his lineage connects one of America's most iconic capitalists to a heritage far from the halls of Silicon Valley.
This fact re-frames the classic American narrative. At the peak of Cold War & complex U.S. relations with the Middle East, the man defining the future of personal computing was, by birth, the son of an immigrant from that very region. It's a potent reminder that genius and legacy have no single passport, and that the threads of the American story are woven from unexpectedly diverse origins.
In the 1980s, as Apple's famous "1984" commercial declared war on a monolithic tech establishment, its co-founder Steve Jobs was becoming the face of American innovation. Few knew a pivotal detail of his origin story: Jobs was the biological son of a Syrian Muslim immigrant.
His father, Abdulfattah "John" Jandali, came to the U.S. from Syria in the 1950s for graduate studies. While Jobs was adopted and raised lovingly by Paul and Clara Jobs in California, his lineage connects one of America's most iconic capitalists to a heritage far from the halls of Silicon Valley.
This fact re-frames the classic American narrative. At the peak of Cold War & complex U.S. relations with the Middle East, the man defining the future of personal computing was, by birth, the son of an immigrant from that very region. It's a potent reminder that genius and legacy have no single passport, and that the threads of the American story are woven from unexpectedly diverse origins.