Latest news

Tactical reality behind the India-Pakistan hacktivist surge
Hacktivism

Tactical reality behind the India-Pakistan hacktivist surge

12 May 2025 securebulletin.com

In May 2025, a wave of hacktivist activity targeting Indian digital infrastructure sparked widespread alarm in media and social networks,...
Read more 0
From PDF invoice to geo-fenced RAT delivery campaign
Phishing

From PDF invoice to geo-fenced RAT delivery campaign

10 May 2025 securebulletin.com

A recent campaign targeting Southern European organizations demonstrates advanced evasion techniques combining social engineering, trusted platforms, and geolocation filtering. The...
Read more 0
Emerging DOGE Big Balls ransomware campaign leverages multi-stage tooling and BYOVD exploits
Ransomware

Emerging DOGE Big Balls ransomware campaign leverages multi-stage tooling and BYOVD exploits

10 May 2025 securebulletin.com

A recent analysis of newly discovered payloads linked to the DOGE Big Balls ransomware operation reveals a complex infection chain...
Read more 0
Malicious npm packages hijack macOS Cursor AI IDE
Vulnerability

Malicious npm packages hijack macOS Cursor AI IDE

9 May 2025 securebulletin.com

The Socket Threat Research Team has uncovered a sophisticated supply chain attack targeting macOS developers using the Cursor AI code...
Read more 0
Stealthy Linux backdoor leveraging residential proxies and NHAS reverse SSH
Vulnerability

Stealthy Linux backdoor leveraging residential proxies and NHAS reverse SSH

4 May 2025 securebulletin.com

A recently discovered Linux backdoor (SHA256: ea41b2bf1064efcb6196bb79b40c5158fc339a36a3d3ddee68c822d797895b4e) employs advanced evasion techniques to bypass detection while establishing persistent access via SOCKS5...
Read more 0
US indicts Black Kingdom ransomware operator: technical analysis of ProxyLogon exploitation and law enforcement response
Ransomware

US indicts Black Kingdom ransomware operator: technical analysis of ProxyLogon exploitation and law enforcement response

3 May 2025 securebulletin.com

The U.S. Department of Justice unsealed charges against Yemeni national Rami Khaled Ahmed (36) for deploying Black Kingdom ransomware via...
Read more 0
Sophisticated npm malware campaign exploits Cross-Ecosystem typosquatting
Malware

Sophisticated npm malware campaign exploits Cross-Ecosystem typosquatting

3 May 2025 securebulletin.com

A coordinated malware operation targeting npm employs cross-ecosystem typosquatting to mimic popular libraries from Python, Java, C++, and .NET ecosystems....
Read more 0
Kintetsu World Express ransomware attack: technical overview and response
Ransomware

Kintetsu World Express ransomware attack: technical overview and response

30 April 2025 securebulletin.com

Kintetsu World Express (KWE), a major Japanese global logistics provider, has confirmed a significant ransomware attack that began impacting its...
Read more 0
JFL Hospital targeted in ransomware attack amid wave of cyber incidents in US Virgin Islands
Ransomware

JFL Hospital targeted in ransomware attack amid wave of cyber incidents in US Virgin Islands

29 April 2025 securebulletin.com

Governor Juan F. Luis Hospital & Medical Center (JFL) in the US Virgin Islands has become the latest government entity...
Read more 0
Malicious VSCode extensions: a growing threat to developers
Malware

Malicious VSCode extensions: a growing threat to developers

7 April 2025 securebulletin.com

The Visual Studio Code (VSCode) Marketplace has recently become a target for sophisticated cyberattacks, with malicious extensions infiltrating development environments...
Read more 0
Everest ransomware gang faces unprecedented blow: leak site hacked and defaced
Ransomware

Everest ransomware gang faces unprecedented blow: leak site hacked and defaced

7 April 2025 securebulletin.com

In a surprising turn of events, the Everest ransomware gang—a notorious Russia-linked cybercriminal organization—has suffered a significant setback. Over the...
Read more 0
Surge in Palo Alto Networks scanner activity
Vulnerability

Surge in Palo Alto Networks scanner activity

1 April 2025 securebulletin.com

GreyNoise has detected a significant surge in login scanning activity aimed at Palo Alto Networks PAN-OS GlobalProtect portals. In the...
Read more 0