New ZeroDayRAT Mobile Spyware Enables Real-Time Surveillance and Data Theft
Cybersecurity researchers have uncovered a new mobile spyware platform called ZeroDayRAT, which is being marketed on Telegram…
83% of Ivanti EPMM Exploits Linked to Single IP on Bulletproof Hosting Infrastructure
A recent analysis by threat intelligence firm GreyNoise reveals that 83% of exploitation attempts targeting a newly…
New Chrome Zero-Day (CVE-2026-2441) Under Active Attack — Patch Released
Google has released an urgent security update for its Chrome browser to patch a high-severity zero-day vulnerability,…
The CTEM Divide: Why 84% of Security Programs Are Falling Behind
A 2026 market intelligence study of 128 enterprise security decision-makers reveals a significant divide in cybersecurity effectiveness,…
ThreatsDay Bulletin: AI Prompt RCE, Claude 0-Click, RenEngine Loader, Auto 0-Days & 25+ Stories
This week’s cybersecurity landscape highlights a strategic shift among attackers, who are increasingly relying on established methods…
Lazarus Campaign Plants Malicious Packages in npm and PyPI Ecosystems
Cybersecurity researchers have identified a new malicious campaign targeting the npm and PyPI ecosystems, attributed to the…
Google Reports State-Backed Hackers Using Gemini AI for Recon and Attack Support
Google has reported that state-backed hackers, specifically the North Korea-linked threat actor UNC2970, are leveraging its generative…
Researchers Observe In-the-Wild Exploitation of BeyondTrust CVSS 9.9 Vulnerability
Threat actors have begun exploiting a critical vulnerability in BeyondTrust’s Remote Support (RS) and Privileged Remote Access…
Microsoft Discloses DNS-Based ClickFix Attack Using Nslookup for Malware Staging
Microsoft has revealed a new variant of the ClickFix social engineering attack, where cybercriminals deceive users into…
npm’s Update to Harden Their Supply Chain, and Points to Consider
In December 2025, npm implemented a significant authentication overhaul in response to the Sha1-Hulud incident, aiming to…