Only days ago, a message on the BreachForums extortion site threatened to leak one billion records allegedly stolen from the Salesforce systems of 39 of the largest companies in the world, including Disney, Toyota, Adidas, McDonalds, IKEA, and Home Depot.… Read More "FBI seizes BreachForums servers as threatened Salesforce data release deadline approaches"
Memory Integrity Enforcement aims to severely complicate the exploitation of memory corruption vulnerabilities, particularly buffer overflows and use-after-free memory bugs. It makes use of the CPU Arm Memory Tagging Extension (MTE) specification published in 2019 and the subsequent Enhanced Memory… Read More "Apple bumps RCE bug bounties to $2M to counter commercial spyware vendors"
Apple on Friday announced significant updates to its bug bounty program and the company is now offering up to $2 million for complex exploit chains. Since the launch of its public bug bounty program in 2020, Apple has awarded a… Read More "Apple Bug Bounty Update: Top Payout $2 Million, $35 Million Paid to Date"
Oct 10, 2025Ravie LakshmananCybercrime / Malware Cybersecurity researchers have flagged a new set of 175 malicious packages on the npm registry that have been used to facilitate credential harvesting attacks as part of an unusual campaign. The packages have been… Read More "175 Malicious npm Packages with 26,000 Downloads Used in Credential Phishing Campaign"
“These files can provide threat actors with critical information such as user, group, and domain settings, DNS and log settings, and certificates,” he adds. Arctic Wolf has previously observed threat actors, including nation-state and ransomware groups, exfiltrating firewall configuration files… Read More "SonicWall data breach affects all cloud backup customers"
Juniper Networks has announced patches for nearly 220 vulnerabilities in Junos OS, Junos Space, and Security Director, including nine critical-severity flaws affecting Junos Space. More than 200 security defects were resolved in Junos Space and Junos Space Security Director, Juniper’s… Read More "Juniper Networks Patches Critical Junos Space Vulnerabilities"
Oct 10, 2025Ravie LakshmananSaaS Security / Threat Intelligence A threat actor known as Storm-2657 has been observed hijacking employee accounts with the end goal of diverting salary payments to attacker-controlled accounts. “Storm-2657 is actively targeting a range of U.S.-based organizations,… Read More "Microsoft Warns of ‘Payroll Pirates’ Hijacking HR SaaS Accounts to Steal Employee Salaries"
Three exploitation campaigns targeting Cisco and Palo Alto Networks firewalls and Fortinet VPNs originate from IPs on the same subnets, GreyNoise has discovered. The threat intelligence firm initially warned of scanning attempts targeting Cisco ASA devices in early September, roughly… Read More "Cisco, Fortinet, Palo Alto Networks Devices Targeted in Coordinated Campaign"
Oct 10, 2025Ravie LakshmananRansomware / Data Theft Cybersecurity researchers have disclosed details of an active malware campaign called Stealit that has leveraged Node.js’ Single Executable Application (SEA) feature as a way to distribute its payloads. According to Fortinet FortiGuard Labs,… Read More "Stealit Malware Abuses Node.js Single Executable Feature via Game and VPN Installers"
“Velociraptor played a significant role in this campaign, ensuring the actors maintained stealthy persistent access while deploying LockBit and Babuk ransomware,” Talos researchers added. “The addition of this tool in the ransomware playbook is in line with findings from Talos’… Read More "Open-source DFIR Velociraptor was abused in expanding ransomware efforts"
