📔 PhantomCaptcha Campaign Targets Ukraine Relief Organizations 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
SentinelLABS Researchers have uncovered a new phishing campaign, PhantomCaptcha, targeting aid organizations supporting Ukraine.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
PhantomCaptcha Campaign Targets Ukraine Relief Organizations
SentinelLABS Researchers have uncovered a new phishing campaign, PhantomCaptcha, targeting aid organizations supporting Ukraine
📔 MuddyWater Uses Compromised Mailboxes in Global Phishing Campaign 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
GroupIB has uncovered a phishing campaign by Iranlinked MuddyWater, exploiting compromised emails for foreign intelligence.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
MuddyWater Uses Compromised Mailboxes in Global Phishing Campaign
Group-IB has uncovered a phishing campaign by Iran-linked MuddyWater, exploiting compromised emails for foreign intelligence
♟️ Canada Fines Cybercrime Friendly Cryptomus $176M ♟️
📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
Financial regulators in Canada this week levied 176 million in fines against Cryptomus, a digital payments platform that supports dozens of Russian cryptocurrency exchanges and websites hawking cybercrime services. The penalties for violating Canada's anti moneylaundering laws come ten months after KrebsOnSecurity noted that Cryptomus's Vancouver street address was home to dozens of foreign currency dealers, money transfer businesses, and cryptocurrency exchanges none of which were physically located there.📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
Krebs on Security
Canada Fines Cybercrime Friendly Cryptomus $176M
Financial regulators in Canada this week levied $176 million in fines against Cryptomus, a digital payments platform that supports dozens of Russian cryptocurrency exchanges and websites hawking cybercrime services. The penalties for violating Canada's anti…
🖋️ Iran-Linked MuddyWater Targets 100+ Organisations in Global Espionage Campaign 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
The Iranian nationstate group known as MuddyWater has been attributed to a new campaign that has leveraged a compromised email account to distribute a backdoor called Phoenix to various organizations across the Middle East and North Africa MENA region, including over 100 government entities. The end goal of the campaign is to infiltrate highvalue targets and facilitate intelligence gathering.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Ukraine Aid Groups Targeted Through Fake Zoom Meetings and Weaponized PDF Files 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers have disclosed details of a coordinated spearphishing campaign dubbed PhantomCaptcha targeting organizations associated with Ukraine's war relief efforts to deliver a remote access trojan that uses a WebSocket for commandandcontrol C2. The activity, which took place on October 8, 2025, targeted individual members of the International Red Cross, Norwegian Refugee.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Over 250 Magento Stores Hit Overnight as Hackers Exploit New Adobe Commerce Flaw 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Ecommerce security company Sansec has warned that threat actors have begun to exploit a recently disclosed security vulnerability in Adobe Commerce and Magento Open Source platforms, with more than 250 attack attempts recorded against multiple stores over the past 24 hours. The vulnerability in question is CVE202554236 CVSS score 9.1, a critical improper input validation flaw that could be.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Critical Lanscope Endpoint Manager Bug Exploited in Ongoing Cyberattacks, CISA Confirms 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a critical security flaw impacting Motex Lanscope Endpoint Manager to its Known Exploited Vulnerabilities KEV catalog, stating it has been actively exploited in the wild. The vulnerability, CVE202561932 CVSS v4 score 9.3, impacts onpremises versions of Lanscope Endpoint Manager, specifically Client.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📢 What is memory forensics? 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
Once used to recover encrypted data, memory forensics is now a core tool in the fight against rootkits.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
IT Pro
What is memory forensics?
Once used to recover encrypted data, memory forensics is now a core tool in the fight against rootkits
📢 Warning issued over critical flaws spotted in TP-Link routers 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
Researchers have spotted a pair of flaws in TPLink routers, including a variation of a previously patched vulnerability.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
IT Pro
Warning issued over critical flaws spotted in TP-Link routers
Researchers have spotted a pair of flaws in TP-Link routers, including a variation of a previously patched vulnerability
🦿 Master IT Fundamentals with This CompTIA Certification Prep Bundle 🦿
📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
Prepare for a successful IT career with lifetime access to expertled courses covering CompTIA A, Network, Security, and Cloud certification prep. The post Master IT Fundamentals with This CompTIA Certification Prep Bundle appeared first on TechRepublic.📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
TechRepublic
Master IT Fundamentals with This CompTIA Certification Prep Bundle
Prepare for a successful IT career with lifetime access to expert-led courses covering CompTIA A+, Network+, Security+, and Cloud+ certification prep.
🖋️ Why Organizations Are Abandoning Static Secrets for Managed Identities 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
As machine identities explode across cloud environments, enterprises report dramatic productivity gains from eliminating static credentials. And only legacy systems remain the weak link. For decades, organizations have relied on static secrets, such as API keys, passwords, and tokens, as unique identifiers for workloads. While this approach provides clear traceability, it creates what security.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
👍1
🖋️ “Jingle Thief” Hackers Exploit Cloud Infrastructure to Steal Millions in Gift Cards 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers have shed light on a cybercriminal group called Jingle Thief that has been observed targeting cloud environments associated with organizations in the retail and consumer services sectors for gift card fraud. "Jingle Thief attackers use phishing and smishing to steal credentials, to compromise organizations that issue gift cards," Palo Alto Networks Unit 42 researchers.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 Major Vulnerabilities Found in TP-Link VPN Routers 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Forescout researchers discovered critical and highseverity vulnerabilities in several TPLink VPN routers.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Major Vulnerabilities Found in TP-Link VPN Routers
Forescout researchers discovered critical and high-severity vulnerabilities in several TP-Link VPN routers
📔 Lumma Stealer Vacuum Filled by Upgraded Vidar 2.0 Infostealer, Researchers Say 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Trend Micro believe security teams should anticipate increased Vidar 2.0 prevalence in campaigns through Q4 2025.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Lumma Stealer Vacuum Filled by Upgraded Vidar 2.0 Infostealer, Researchers Say
Trend Micro believe security teams should anticipate increased Vidar 2.0 prevalence in campaigns through Q4 2025
🖋️ Secure AI at Scale and Speed — Learn the Framework in this Free Webinar 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
AI is everywhereand your company wants in. Faster products, smarter systems, fewer bottlenecks. But if you're in security, that excitement often comes with a sinking feeling. Because while everyone else is racing ahead, you're left trying to manage a growing web of AI agents you didnt create, cant fully see, and werent designed to control. Join our upcoming webinar and learn how to make AI.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ ThreatsDay Bulletin: $176M Crypto Fine, Hacking Formula 1, Chromium Vulns, AI Hijack & More 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Criminals dont need to be clever all the time they just follow the easiest path in trick users, exploit stale components, or abuse trusted systems like OAuth and package registries. If your stack or habits make any of those easy, youre already a target. This weeks ThreatsDay highlights show exactly how those weak points are being exploited from overlooked.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 Lazarus Group’s Operation DreamJob Targets European Defense Firms 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Cyberattacks by North Koreas Lazarus Group target European defense firms in drone development.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Lazarus Group’s Operation DreamJob Targets European Defense Firms
Cyber-attacks by North Korea’s Lazarus Group target European defense firms in drone development
🌊 Fortinet Alternatives 2025: When Your All‑in‑One Starts Fraying Edges 🌊
📖 Read more.
🔗 Via "UnderDefense"
----------
👁️ Seen on @cibsecurity
Fortinet covers a lot, until scale makes policy sprawl, thin SSE depth, and murky investigations slow you down, or TLSDLP licensing bumps your costs. If roaming users, SaaS access, and The post Fortinet Alternatives 2025 When Your AllinOne Starts Fraying Edges appeared first on UnderDefense.📖 Read more.
🔗 Via "UnderDefense"
----------
👁️ Seen on @cibsecurity
UnderDefense
Fortinet Alternatives 2025: Top 9 Competitors & How to Switch
Choosing a Fortinet alternative in 2025? See leading competitors, pros/cons, fit by use case, and a step-by-step PoC/migration checklist.
🌊 Red Canary Alternatives (2025): 8 Serious Options & When They Win 🌊
📖 Read more.
🔗 Via "UnderDefense"
----------
👁️ Seen on @cibsecurity
Red Canary is widely respected for telemetryfirst MDR and crisp analyst narrative. But not every program wants a pure bringyourownEDR MDR on top posture, and your edges, cloud mix, The post Red Canary Alternatives 2025 8 Serious Options When They Win appeared first on UnderDefense.📖 Read more.
🔗 Via "UnderDefense"
----------
👁️ Seen on @cibsecurity
UnderDefense
Red Canary Alternatives 2025: Top 9 MDR Competitors
Choosing a Red Canary alternative? See leading MDR options, pros/cons, fit by use case, plus a practical PoC/migration checklist.
🌊 Zscaler Alternatives (2025): 9 Serious Options & When They Win 🌊
📖 Read more.
🔗 Via "UnderDefense"
----------
👁️ Seen on @cibsecurity
Zscaler owns the roaminguser SaaS access story. But not every program wants allin SSE, or your edges just dont look like the demo. This guide lays out the nine The post Zscaler Alternatives 2025 9 Serious Options When They Win appeared first on UnderDefense.📖 Read more.
🔗 Via "UnderDefense"
----------
👁️ Seen on @cibsecurity
UnderDefense
Zscaler Alternatives 2025: Top 9 Competitors & Use Cases
Explore 9 Zscaler alternatives for 2025: strengths, gaps, Zero Trust/ZTNA, DLP, SD-WAN/SASE fit. Plus a step-by-step PoC/migration checklist.
❤1
📔 Pakistani-Linked Hacker Group Targets Indian Government 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
A cyberespionage campaign by Pakistans TransparentTribe has been identified, targeting Indian government systems using DeskRAT.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Pakistani-Linked Hacker Group Targets Indian Government
A cyber-espionage campaign by Pakistan’s TransparentTribe has been identified, targeting Indian government systems using DeskRAT
❤1