⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Kaspersky reports new components in the CAV3RN espionage framework targeting Israel, including a multi-transport C2 module that uses DNS responses to select between direct HTTPS and a Google Apps Script relay for each transaction. The framework also features a local broker that discovers and loads DLL components, routes messages, and supports runtime upgrades.
Kimwolf v7 is an evolution of the Kimwolf botnet that targets Android IoT devices. It uses HTTP/2 DDoS fingerprinting, Ethereum ENS for C2 resolution, and Tor backup routing.
Joint advisory from US and South Korean agencies warns of Gunra ransomware attacks against government and critical infrastructure organizations worldwide. The ransomware exploits security flaws in internet-facing Fortinet and Schneider Electric appliances to gain initial access, then deploys double extortion tactics.
Detailed analysis of Gunra ransomware reveals exploitation of CVE-2024-5559 and CVE-2025-24472 in Schneider Electric and Fortinet appliances for initial access, followed by double extortion. The group uses Impacket tools for lateral movement, deletes logs, and employs session hijacking and MFA bypass techniques.
Gunra ransomware attacks target critical infrastructure sectors globally, exploiting Fortinet vulnerabilities. It uses a double extortion model combining data exfiltration and encryption.
Fake TikTok Shop websites closely mimic the real feature to trick users into paying for products or entering payment details. These unverified sites use copied branding and trust badges to appear legitimate.