Yanuki
Cybersecurity / Cyber Attacks
Cybersecurity researchers have uncovered a sophisticated campaign named JS#SMUGGLER that leverages compromised websites to distribute the NetSupport RAT (Remote Access Trojan). This multi-stage attack grants cybercriminals extensive control...
Cybersecurity / Threat Intelligence
A joint investigation has uncovered North Korea's Lazarus Group's infiltration scheme using remote IT workers. Researchers captured operators live, revealing their tactics on controlled sandbox environments, highlighting a sophisticated met...
Security / Data Breach
A significant data breach has impacted over 200 companies using Salesforce, stemming from a vulnerability in apps published by Gainsight, a customer support platform provider. This supply chain attack highlights the increasing risks associa...
Vulnerabilities / Exploits
A remote code execution (RCE) vulnerability in 7-Zip, identified as CVE-2025-11001, is actively being exploited in the wild. This flaw allows attackers to execute arbitrary code on affected systems. It is crucial to update 7-Zip to version...
Security / Malware
The software development ecosystem is facing increased threats from malicious actors. Recent incidents involve a VS Code extension with ransomware capabilities and NPM packages distributing information-stealing malware, highlighting the imp...
Cyber Attacks / Vulnerabilities
This article summarizes two critical cybersecurity updates: a phishing campaign targeting Ukrainian entities and newly discovered vulnerabilities in Cisco firewalls. Stay informed to protect your systems and data.
Security / Data Breach
SonicWall has officially attributed the September security breach, which led to the unauthorized exposure of firewall configuration backup files, to state-sponsored threat actors. The company's investigation, conducted with Mandiant, conclu...
AI / Model Security
Recent research highlights significant vulnerabilities in AI chatbots, demonstrating that even non-technical users can bypass safety measures and elicit biased or unintended responses. This exposes potential risks in various applications of...
Security / Malware
Microsoft researchers have uncovered a new backdoor, dubbed SesameOp, that leverages the OpenAI Assistants API for command-and-control (C2) communications. This innovative approach allows threat actors to stealthily communicate and orchestr...
Cybersecurity / Vulnerabilities
Cybersecurity researchers have uncovered two significant threats: the SleepyDuck malware targeting Solidity developers via a malicious VS Code extension, and ongoing BADCANDY attacks exploiting a critical vulnerability in Cisco IOS XE devic...
Security / Vulnerability
Cybersecurity experts are warning of ongoing attacks targeting unpatched Cisco IOS XE devices. Attackers are using the BADCANDY malware to gain control of vulnerable systems, and they are even able to detect and re-exploit devices after the...
Security / Endpoint Security
ThreatLocker has released Defense Against Configurations (DAC) for macOS, aiming to proactively identify and address common misconfigurations that attackers often exploit. This new security layer helps organizations secure their macOS envir...
