Schedule a Demo

Cyber Security

Cyber Security
Cyber Security

SILENTCONNECT Uses VBScript, PowerShell and PEB Masquerading to Deploy ScreenConnect

silentconnect-uses-vbscript,-powershell-and-peb-masquerading-to-deploy-screenconnect

SILENTCONNECT is a newly discovered multi-stage malware loader that has been silently targeting Windows machines since at least March 2025. It uses VBScript, in-memory PowerShell execution, and PEB masquerading to install the ConnectWise ScreenConnect remote monitoring and management tool on victim systems. Once deployed, ScreenConnect gives the attacker full hands-on keyboard control over the compromised […]

CISA Warns of Zimbra Collaboration Suite Vulnerability Exploited in Attacks

cisa-warns-of-zimbra-collaboration-suite-vulnerability-exploited-in-attacks

CISA Warns Zimbra Collaboration Suite Vulnerability Exploit CISA has added a high-severity vulnerability affecting the Zimbra Collaboration Suite (ZCS) to its Known Exploited Vulnerabilities (KEV) catalog. Tracked as CVE-2025-66376, this security flaw is currently facing active exploitation in the wild. Organizations utilizing Zimbra must urgently prioritize remediation to prevent unauthorized access and potential data compromise. […]

WaterPlum Deploys New StoatWaffle Malware in VSCode-Based Supply Chain Campaign

waterplum-deploys-new-stoatwaffle-malware-in-vscode-based-supply-chain-campaign

A North Korea-linked hacking group known as WaterPlum has introduced a dangerous new malware called StoatWaffle, deploying it through compromised Visual Studio Code (VSCode) repositories disguised as legitimate blockchain development projects to silently infiltrate developer machines.​ WaterPlum has been running a campaign known as “Contagious Interview” for some time, drawing victims in through fake job […]

Cisco Firewall 0-day Vulnerability Exploited in the Wild to Deploy Interlock Ransomware

cisco-firewall-0-day-vulnerability-exploited-in-the-wild-to-deploy-interlock-ransomware

An active campaign by the Interlock ransomware group is exploiting a critical zero-day vulnerability (CVE-2026-20131) in Cisco Secure Firewall Management Center (FMC) Software. Cisco disclosed the flaw on March 4, 2026; it allows unauthenticated remote attackers to execute arbitrary Java code as root. Amazon threat intelligence researchers discovered Interlock exploiting this vulnerability 36 days before […]

OpenAI Launches GPT-5.4 Mini and Nano to Provide Answers 2X Faster

openai-launches-gpt-5.4-mini-and-nano-to-provide-answers-2x-faster

OpenAI Launches GPT-5.4 Mini and Nano OpenAI has officially launched GPT-5.4 mini and GPT-5.4 nano, releasing its most capable small models designed to handle high-volume, latency-sensitive workloads. The new mini iteration offers a significant performance upgrade over the previous GPT-5 mini across reasoning, coding, tool use, and multimodal understanding, while running more than twice as […]

Critical FortiClient SQL Injection Vulnerability Enables Arbitrary Database Access

critical-forticlient-sql-injection-vulnerability-enables-arbitrary-database-access

FortiClient SQL Injection vulnerability A critical SQL injection vulnerability in Fortinet’s FortiClient Endpoint Management Server (EMS). Tracked as CVE-2026-21643, this severe flaw carries a CVSS score of 9.1. It allows unauthenticated attackers to execute arbitrary SQL commands and access sensitive database information. The issue specifically affects FortiClient EMS version 7.4.4 when multi-tenant mode is active. […]

Iranian Cyber Ops Maintain US Network Footholds, Target Cameras for Regional Surveillance

iranian-cyber-ops-maintain-us-network-footholds,-target-cameras-for-regional-surveillance

Iran’s cyber operations took a sharp turn in early 2026, with state-linked threat actors quietly embedding themselves inside US and Canadian networks while also targeting internet-connected surveillance cameras across the Middle East for battlefield intelligence. The Iranian APT group MuddyWater, tied to Iran’s Ministry of Intelligence and Security (MOIS), maintained unauthorized access to multiple American […]

AWS Bedrock AgentCore Sandbox Bypass Allows Covert C2 Channels and Data Exfiltration

aws-bedrock-agentcore-sandbox-bypass-allows-covert-c2-channels-and-data-exfiltration

A significant security flaw in AWS Bedrock AgentCore Code Interpreter’s “Sandbox” network mode, a feature advertised by AWS as providing complete network isolation that allows outbound DNS queries, enabling threat actors to establish covert command-and-control (C2) channels and exfiltrate sensitive data. AWS Bedrock AgentCore Code Interpreter is a managed service that allows AI agents and […]

Phishers Abuse LiveChat Support Tools to Steal Sensitive Data in New SaaS-Based Attack Tactic

phishers-abuse-livechat-support-tools-to-steal-sensitive-data-in-new-saas-based-attack-tactic

A newly identified phishing campaign is turning legitimate customer service software into a weapon for stealing sensitive user data. Attackers have been found abusing LiveChat, a widely used Software-as-a-Service (SaaS) platform that businesses rely on for real-time customer support, to carry out convincing phishing operations against unsuspecting victims. The campaign marks a clear shift from […]

Fake Shipment Tracking Scams Surge in MEA, Stealing Banking Data Through Real-Time Phishing

fake-shipment-tracking-scams-surge-in-mea,-stealing-banking-data-through-real-time-phishing

Every day, billions of people rely on postal and courier services to deliver everything from personal letters to online orders. This dependence has grown steadily alongside the global rise of e-commerce. The 2024 Universal Postal Union report found that postal services now serve 7.3 billion people, and Statista recorded roughly 161 billion parcels shipped in […]