HybridPetya is the fourth publicly known real or proof-of-concept bootkit with UEFI Secure Boot bypass functionality 16 Sep 2025 ESET researchers have uncovered a new ransomware strain that they have named HybridPetya. While resembling the infamous Petya/NotPetya malware, it comes… Read More "A Petya/NotPetya copycat comes with a twist"
A newly identified malware strain designed to interact with operational technology (OT) systems has been analyzed by security researchers, revealing capabilities aimed at water treatment and desalination infrastructure. The malware, named ZionSiphon and discovered by Darktrace, combines traditional endpoint compromise… Read More "ZionSiphon Malware Targets Water Infrastructure Systems"
Serial-to-IP converters are affected by potentially serious vulnerabilities that can expose operational technology (OT), healthcare, and other types of systems to remote attacks. Serial-to-IP converters, also known as serial device servers, are hardware devices that bridge legacy serial equipment to… Read More "Serial-to-IP Converter Flaws Expose OT and Healthcare Systems to Hacking"
Lead-Formulare kapern Agentforce Im Fall von Salesforce Agentforce konnten die Forscher von Capsule maliziöse Instruktionen in ein öffentlich zugängliches Lead-Formular einbetten, die im Anschluss über einen „Agent Flow“ mit E-Mail-Funktionen ausgeführt wurden. Weist ein interner Benutzer einen Agentforce-Agenten später an,… Read More "Copilot & Agentforce offen für Prompt-Injection-Tricks"
Long known to be a sweet spot for cybercriminals, small businesses are more likely to be victimized by ransomware than large enterprises 18 Sep 2025 • , 5 min. read Think your business is too small to be singled out… Read More "How SMBs can fight back against ransomware"
Two phishing campaigns, each using a different stealthy infection technique, are targeting organizations in attacks which aim to deliver data stealing malware to devices running on Microsoft Windows. The goal of the campaigns is to install Formbook, a notorious form… Read More "Formbook Malware Campaign Uses Multiple Obfuscation Techniques"
Bluesky, the decentralized microblogging social media platform, reported service outages last week due to a distributed denial-of-service (DDoS) attack aimed at its systems. The DDoS attack appears to have started late on April 15 (Pacific Time) and continued into the… Read More "Bluesky Disrupted by Sophisticated DDoS Attack"
Ravie LakshmananApr 20, 2026Cybersecurity / Hacking Monday’s recap shows the same pattern in different places. A third-party tool becomes a way in, then leads to internal access. A trusted download path is briefly swapped to deliver malware. Browser extensions act… Read More "Vercel Hack, Push Fraud, QEMU Abused, New Android RATs Emerge & More"
Frontend cloud platform Vercel, the creator of Next.js and Turbo.js, has warned about a data breach after a compromised third-party AI application abused OAuth to access its internal systems. A Vercel employee used the third party app, identified as Context.ai… Read More "Hackers exploit Vercel’s trust in AI integration"
In this blogpost, we uncover the first known cases of collaboration between Gamaredon and Turla, in Ukraine. Key points of this blogpost: In February 2025, we discovered that the Gamaredon tool PteroGraphin was used to restart Turla’s Kazuar backdoor on… Read More "Gamaredon X Turla collab"
