Category
General
- 27
- stories
- SEP 17
- latest
New SparroWocky Backdoor Targets Latin America
Active since at least August 2025, the malware represents a functional pivot from the threat actor’s existing SparrowDoor backdoor.
DENNIS FISHER · SEP 17 · 3 min
All General
Phreaks and Geeks: Joybubbles and the Pre-History of Hacking
The proto hacker whose innate ability, curiosity, and absolute joy in the act of discovery is conveyed so artfully in the new documentary Joybubbles.
Dennis Fisher · 4 min
Google Disrupts IPIDEA Residential Proxy Network
Google researchers observed more than 550 individual threat groups using IPIDEA exit nodes during a one-week period earlier this month.
Dennis Fisher · 3 min
A New Chinese APT Takes the Stage
Active since at least 2022, UAT-7290 demonstrates a significant capacity for conducting deep-seated espionage while simultaneously functioning as an initial access group.
Dennis Fisher · 2 min
IBM Warns of Critical Auth Bypass Bug in API Connect
IBM published updates for the affected versions of API Connect on Jan. 2., and urged organizations to update affected versions as soon as possible.
Dennis Fisher · 1 min
Serious MongoDB Flaw CVE-2025-14847 Under Exploitation
MongoDB disclosed the vulnerability (CVE-2025-14847) on Dec. 19 and a few days later, a public exploit for it appeared online.
Dennis Fisher · 1 min
Broad Exploit Activity Targets React2Shell Flaw
The vulnerability was disclosed publicly on Dec. 3 and researchers and threat intelligence teams immediately began seeing opportunistic and targeted exploitation attempts.
Dennis Fisher · 3 min
Google Wants to Snuff Out ‘Lighthouse’ Phishing Kit
Google is taking legal action “designed to dismantle the core infrastructure” of the Lighthouse phishing-as-a-service operation.
Lindsey O'Donnell-Welch · 2 min
Google Chrome to Enable HTTPS Default Browsing
In October 2026, Google will change the default settings in Chrome to include its existing “Always Use Secure Connections” feature.
Lindsey O'Donnell-Welch · 2 min
Data Connects Scanning Surges for Cisco, Fortinet, PAN Devices
Researchers say that all three campaigns are being driven at least in part by one threat actor.
Dennis Fisher · 1 min
VMware Patches Bug Exploited By State Actors
The vulnerability (CVE-2025-41244) is easily exploitable, although it requires existing privileges on the target product.
Dennis Fisher · 2 minMicrosoft Releases New Agentic AI Tools
The foundation of the new offerings is MIcrosoft Sentinel, the company’s security platform, that now includes the availability of the massive Sentinel data lake.
Dennis Fisher · 1 min
Two British Teens Charged Over Scattered Spider Hacks
Two British teenagers have been arrested by UK authorities for their alleged ties to the Scattered Spider cybercriminal collective.
Lindsey O'Donnell-Welch · 3 min
Microsoft, Cloudflare Disrupt RaccoonO365 Phishing Kit Service
Microsoft and Cloudflare this week announced that they paired up to disrupt RaccoonO365, a phishing-as-a-service cybercriminal enterprise.
Lindsey O'Donnell-Welch · 3 min
Decipher is Everyone
We’re optimists, and that’s reflected in the mission statement we coined when we first launched in 2018: Security without fear.
Dennis Fisher · 2 min
Citrix CVE-2025-7775 Under Active Attack
The vulnerability (CVE-2025-7775) is a buffer overflow that can lead to remote code execution and attackers were already targeting it before the public disclosure.
Dennis Fisher · 2 min
CISA, Microsoft Warn of Exchange CVE-2025-53786 Risk
CISA has issued an emergency directive regarding the recently disclosed and somewhat weird vulnerability in Microsoft Exchange hybrid deployments (CVE-2025-53786), ordering all civilian federal agencies to address the flaw by Aug. 11.
Dennis Fisher · 2 min
New PXA Stealer Campaign Hits Victims Worldwide
A group of attackers with ties to the Vietnamese cybercrime underground ecosystem are running a significant campaign across many different countries that is delivering the PXA Stealer malware and uses novel sideloading and anti-analysis techniques to slip past defensive measures. The campaign has targeted victims in more than 60 countries and the attackers have harvested…
Dennis Fisher · 2 min
