Application Security

7-Zip Targeted by Malicious Website Users Turned Into Unwitting Proxy Nodes
Application Security
7-Zip Targeted by Malicious Website: Users Turned Into Unwitting Proxy Nodes
Cybercriminals have crafted a counterfeit 7-Zip website, installing a trojanized version of the archiving tool that hijacks user computers as residential proxy nodes. This tactic ...
Microsoft Investigates Admin Center Access Issues in Microsoft 365
Application Security
Microsoft Investigates Admin Center Access Issues in Microsoft 365
Microsoft is addressing access issues impacting administrators of Microsoft 365 business and enterprise subscriptions. Some admins report being unable to access the admin center, with ...
OpenClaw Agentic AI Attacked by Information-Stealing Malware
Application Security
OpenClaw Agentic AI Attacked by Information-Stealing Malware
Cybersecurity professionals must consider the impact of information-stealing malware targeting OpenClaw's AI framework. The malware reportedly focusses on files containing sensitive data such as API ...
Microsoft Configuration Manager SQL Injection Alert
Application Security
Microsoft Configuration Manager SQL Injection Alert
A SQL injection flaw in Microsoft Configuration Manager patched in October 2024 is currently exploited, posing a significant risk to unpatched systems, including businesses and ...
Integration of Criminal IP with IBM QRadar Enhancing IP Threat Intelligence
Application Security
Integration of Criminal IP with IBM QRadar: Enhancing IP Threat Intelligence
Security operations centers (SOC) can enhance their threat detection capabilities with the integration of IP-based intelligence from Criminal IP into IBM's QRadar. This integration offers ...
Ivanti Endpoint Manager Mobile Critical Vulnerabilities Exploited by a Single Threat Actor
Application Security
Ivanti Endpoint Manager Mobile Critical Vulnerabilities Exploited by a Single Threat Actor
Cybersecurity experts have identified a single threat actor responsible for exploiting critical vulnerabilities in Ivanti Endpoint Manager Mobile. These vulnerabilities, CVE-2026-21962 and CVE-2026-24061, are actively ...
Dangerous Chrome Extensions Leak Personal Data and Track Users
Application Security
Dangerous Chrome Extensions Leak Personal Data and Track Users
A recent investigation revealed that over 300 Chrome extensions, collectively downloaded more than 37 million times, are involved in leaking or stealing user data. These ...
Google Groups Exploited in Lumma Stealer Malware Campaign
Application Security
Google Groups Exploited in Lumma Stealer Malware Campaign
Attackers are using Google Groups to distribute Lumma Stealer malware, targeting credentials across Windows and Linux platforms. They exploit Google services, deploying trojanized "Ninja Browser" ...
Texas-Based Financial Services Provider Marquis Cites SonicWall Breach for Ransomware Incident
Application Security
Texas-Based Financial Services Provider Marquis Cites SonicWall Breach for Ransomware Incident
Marquis Software Solutions suffered a ransomware attack in August 2025, impacting multiple banks. Rolling out explanations, the company attributes this compromise to a security flaw ...
The DockerDash Vulnerability Understanding Its Impact on Docker Desktop and CLI
Application Security
The DockerDash Vulnerability: Understanding Its Impact on Docker Desktop and CLI
Researchers recently identified a critical flaw named DockerDash in Ask Gordon. This AI assistant, integrated into Docker Desktop and CLI, exposed users to risks of ...