Cybersecurity News - Page 81

The campaign involves password-protected archives containing malicious JavaScript, VBScript, and LNK files.

The group’s attacks begin with spear-phishing campaigns targeting high-profile individuals in organizations

XE Group has leveraged at least two zero-day vulnerabilities in the VeraCore supply chain management software.

Once the backdoored package is installed, it grants the attacker remote access to the victim's system.

More than 1,500 Zyxel CPE Series devices remain exposed to the internet.

The threat has been used as part of the Lunar Peek campaign, targeting Linux-based network appliances.

The skimming malware was likely introduced through vulnerable components within the Magento e-commerce platform.

Potential targets are lured into the trap by receiving a link to communicate with an ‘interviewer’ via video call.

CVE-2025-0411 allows malicious actors to bypass the Windows Mark-of-the-Web (MotW) security feature.

Coyote is capable of keylogging, capturing screenshots, and displaying phishing overlays to steal user credentials.