https://sodiumcyber.com/elastic-releases-urgent-fix-for-critical-kibana-vulnerability-enabling-remote-code-execution/2025-03-06T15:52:30+00:00https://sodiumcyber.com/encrypthub-deploys-ransomware-and-stealer-via-trojanized-apps-ppi-services-and-phishing/2025-03-06T15:52:30+00:00https://sodiumcyber.com/outsmarting-cyber-threats-with-attack-graphs/2025-03-06T15:52:30+00:00https://sodiumcyber.com/medusa-ransomware-hits-40-victims-in-2025-demands-100k-15m-ransom/2025-03-06T15:52:30+00:00https://sodiumcyber.com/trojans-disguised-as-ai-cybercriminals-exploit-deepseeks-popularity/2025-03-06T15:52:30+00:00https://sodiumcyber.com/fin7-fin8-and-others-use-ragnar-loader-for-persistent-access-and-ransomware-operations/2025-03-07T15:48:14+00:00https://sodiumcyber.com/microsoft-warns-of-malvertising-campaign-infecting-over-1-million-devices-worldwide/2025-03-07T15:48:14+00:00https://sodiumcyber.com/webinar-learn-how-aspm-transforms-application-security-from-reactive-to-proactive/2025-03-07T15:48:14+00:00https://sodiumcyber.com/what-pci-dss-v4-really-means-lessons-from-af-compliance-journey/2025-03-07T15:48:14+00:00https://sodiumcyber.com/this-malicious-pypi-package-stole-ethereum-private-keys-via-polygon-rpc-transactions/2025-03-07T15:48:14+00:00https://sodiumcyber.com/researchers-expose-new-polymorphic-attack-that-clones-browser-extensions-to-steal-credentials/2025-03-10T16:19:50+00:00https://sodiumcyber.com/desert-dexter-targets-900-victims-using-facebook-ads-and-telegram-malware-links/2025-03-10T16:19:50+00:00https://sodiumcyber.com/why-the-modern-google-workspace-needs-unified-security/2025-03-10T16:19:50+00:00https://sodiumcyber.com/sidewinder-targets-the-maritime-and-nuclear-sectors-with-an-updated-toolset/2025-03-10T16:19:50+00:00https://sodiumcyber.com/%e2%9a%a1-thn-weekly-recap-new-attacks-old-tricks-bigger-impact/2025-03-10T16:19:50+00:00https://sodiumcyber.com/ballista-botnet-exploits-unpatched-tp-link-vulnerability-infects-over-6000-devices/2025-03-11T16:21:26+00:00https://sodiumcyber.com/your-risk-scores-are-lying-adversarial-exposure-validation-exposes-real-threats/2025-03-11T16:21:26+00:00https://sodiumcyber.com/steganography-explained-how-xworm-hides-inside-images/2025-03-11T16:21:26+00:00https://sodiumcyber.com/dcrat-backdoor-returns/2025-03-11T16:21:26+00:00https://sodiumcyber.com/sidewinder-apt-targets-maritime-nuclear-and-it-sectors-across-asia-middle-east-and-africa/2025-03-11T16:21:26+00:00https://sodiumcyber.com/chinese-hackers-breach-juniper-networks-routers-with-custom-backdoors-and-rootkits/2025-03-12T20:14:43+00:00https://sodiumcyber.com/over-400-ips-exploiting-multiple-ssrf-vulnerabilities-in-coordinated-cyber-attack/2025-03-12T20:14:43+00:00https://sodiumcyber.com/little-fires-everywhere-for-march-patch-tuesday/2025-03-12T20:14:43+00:00https://sodiumcyber.com/pentesters-is-ai-coming-for-your-role/2025-03-12T20:14:43+00:00https://sodiumcyber.com/urgent-microsoft-patches-57-security-flaws-including-6-actively-exploited-zero-days/2025-03-12T20:14:43+00:00https://sodiumcyber.com/microsoft-warns-of-clickfix-phishing-campaign-targeting-hospitality-sector-via-fake-booking-com-emails/2025-03-13T20:30:47+00:00https://sodiumcyber.com/north-koreas-scarcruft-deploys-kospy-malware-spying-on-android-users-via-fake-utility-apps/2025-03-13T20:30:47+00:00https://sodiumcyber.com/github-uncovers-new-ruby-saml-vulnerabilities-allowing-account-takeover-attacks/2025-03-13T20:30:47+00:00https://sodiumcyber.com/future-proofing-business-continuity-bcdr-trends-and-challenges-for-2025/2025-03-13T20:30:47+00:00https://sodiumcyber.com/head-mare-and-twelve-join-forces-to-attack-russian-entities/2025-03-13T20:30:47+00:00https://sodiumcyber.com/alleged-israeli-lockbit-developer-rostislav-panev-extradited-to-u-s-for-cybercrime-charges/2025-03-14T21:17:10+00:00https://sodiumcyber.com/gsma-confirms-end-to-end-encryption-for-rcs-enabling-secure-cross-platform-messaging/2025-03-14T21:17:10+00:00https://sodiumcyber.com/live-ransomware-demo-see-how-hackers-breach-networks-and-demand-a-ransom/2025-03-14T21:17:10+00:00https://sodiumcyber.com/why-most-microsegmentation-projects-fail-and-how-andelyn-biosciences-got-it-right/2025-03-14T21:17:10+00:00https://sodiumcyber.com/new-massjacker-malware-targets-piracy-users-hijacking-cryptocurrency-transactions/2025-03-14T21:17:10+00:00https://sodiumcyber.com/malicious-pypi-packages-stole-cloud-tokens-over-14100-downloads-before-removal/2025-03-15T21:43:33+00:00https://sodiumcyber.com/apache-tomcat-vulnerability-actively-exploited-just-30-hours-after-public-disclosure/2025-03-18T00:19:50+00:00https://sodiumcyber.com/unpatched-edimax-camera-flaw-exploited-for-mirai-botnet-attacks-since-last-year/2025-03-18T00:19:50+00:00https://sodiumcyber.com/cybercriminals-exploit-css-to-evade-spam-filters-and-track-email-users-actions/2025-03-18T00:19:50+00:00https://sodiumcyber.com/%e2%9a%a1-thn-weekly-recap-router-hacks-pypi-attacks-new-ransomware-decryptor-and-more/2025-03-18T00:19:50+00:00https://sodiumcyber.com/sans-institute-warns-of-novel-cloud-native-ransomware-attacks/2025-03-18T00:19:50+00:00https://sodiumcyber.com/new-rules-file-backdoor-attack-lets-hackers-inject-malicious-code-via-ai-code-editors/2025-03-19T01:57:18+00:00https://sodiumcyber.com/unpatched-windows-zero-day-flaw-exploited-by-11-state-sponsored-threat-groups-since-2017/2025-03-19T01:57:18+00:00https://sodiumcyber.com/google-acquires-wiz-for-32-billion-in-its-biggest-deal-ever-to-boost-cloud-security/2025-03-19T01:57:18+00:00https://sodiumcyber.com/new-critical-ami-bmc-vulnerability-enables-remote-server-takeover-and-bricking/2025-03-19T01:57:18+00:00https://sodiumcyber.com/how-to-improve-okta-security-in-four-steps/2025-03-19T01:57:18+00:00https://sodiumcyber.com/hackers-exploit-severe-php-flaw-to-deploy-quasar-rat-and-xmrig-miners/2025-03-20T02:13:24+00:00https://sodiumcyber.com/leaked-black-basta-chats-suggest-russian-officials-aided-leaders-escape-from-armenia/2025-03-20T02:13:25+00:00https://sodiumcyber.com/watch-this-webinar-to-learn-how-to-eliminate-identity-based-attacks-before-they-happen/2025-03-20T02:13:25+00:00https://sodiumcyber.com/clearfake-infects-9300-sites-uses-fake-recaptcha-and-turnstile-to-spread-info-stealers/2025-03-20T02:13:25+00:00https://sodiumcyber.com/5-identity-threat-detection-response-must-haves-for-super-saas-security/2025-03-20T02:13:25+00:00https://sodiumcyber.com/the-future-of-mfa-is-clear-but-is-it-here-yet/2025-03-21T02:16:50+00:00https://sodiumcyber.com/youtube-game-cheats-spread-arcane-stealer-malware-to-russian-speaking-users/2025-03-21T02:16:50+00:00https://sodiumcyber.com/veeam-and-ibm-release-patches-for-high-risk-flaws-in-backup-and-aix-systems/2025-03-21T02:16:50+00:00https://sodiumcyber.com/how-to-protect-your-business-from-cyber-threats-mastering-the-shared-responsibility-model/2025-03-21T02:16:50+00:00https://sodiumcyber.com/six-governments-likely-use-israeli-paragon-spyware-to-hack-im-apps-and-harvest-data/2025-03-21T02:16:50+00:00https://sodiumcyber.com/uat-5918-targets-taiwans-critical-infrastructure-using-web-shells-and-open-source-tools/2025-03-22T02:22:47+00:00https://sodiumcyber.com/medusa-ransomware-uses-malicious-driver-to-disable-anti-malware-with-stolen-certificates/2025-03-22T02:22:47+00:00https://sodiumcyber.com/china-linked-apt-aquatic-panda-10-month-campaign-7-global-targets-5-malware-families/2025-03-22T02:22:47+00:00https://sodiumcyber.com/10-critical-network-pentest-findings-it-teams-overlook/2025-03-22T02:22:47+00:00https://sodiumcyber.com/kaspersky-links-head-mare-to-twelve-targeting-russian-entities-via-shared-c2-servers/2025-03-22T02:22:47+00:00https://sodiumcyber.com/u-s-treasury-lifts-tornado-cash-sanctions-amid-north-korea-money-laundering-probe/2025-03-23T03:18:10+00:00https://sodiumcyber.com/coinbase-initially-targeted-in-github-actions-supply-chain-attack-218-repositories-ci-cd-secrets-exposed/2025-03-24T03:43:47+00:00https://sodiumcyber.com/critical-ingress-nginx-controller-vulnerability-allows-rce-without-authentication/2025-03-25T03:56:43+00:00https://sodiumcyber.com/microsoft-adds-inline-data-protection-to-edge-for-business-to-block-genai-data-leaks/2025-03-25T03:56:43+00:00https://sodiumcyber.com/vanhelsing-raas-launch-3-victims-5k-entry-fee-multi-os-and-double-extortion-tactics/2025-03-25T03:56:43+00:00https://sodiumcyber.com/%e2%9a%a1-thn-weekly-recap-github-supply-chain-attack-ai-malware-byovd-tactics-and-more/2025-03-25T03:56:43+00:00https://sodiumcyber.com/vscode-marketplace-removes-two-extensions-deploying-early-stage-ransomware/2025-03-25T03:56:43+00:00https://sodiumcyber.com/operation-forumtroll-apt-attack-with-google-chrome-zero-day-exploit-chain/2025-03-26T04:42:22+00:00https://sodiumcyber.com/researchers-uncover-200-unique-c2-domains-linked-to-raspberry-robin-access-broker/2025-03-26T04:42:23+00:00https://sodiumcyber.com/chinese-hackers-breach-asian-telecom-remain-undetected-for-over-4-years/2025-03-26T04:42:23+00:00https://sodiumcyber.com/ai-powered-saas-security-keeping-pace-with-an-expanding-attack-surface/2025-03-26T04:42:23+00:00https://sodiumcyber.com/hackers-use-net-maui-to-target-indian-and-chinese-users-with-fake-banking-social-apps/2025-03-26T04:42:23+00:00https://sodiumcyber.com/new-sparrowdoor-backdoor-variants-found-in-attacks-on-u-s-and-mexican-organizations/2025-03-27T05:35:13+00:00https://sodiumcyber.com/encrypthub-exploits-windows-zero-day-to-deploy-rhadamanthys-and-stealc-malware/2025-03-27T05:35:13+00:00https://sodiumcyber.com/redcurl-shifts-from-espionage-to-ransomware-with-first-ever-qwcrypt-deployment/2025-03-27T05:35:13+00:00https://sodiumcyber.com/malicious-npm-package-modifies-local-ethers-library-to-launch-reverse-shell-attacks/2025-03-27T05:35:13+00:00https://sodiumcyber.com/sparring-in-the-cyber-ring-using-automated-pentesting-to-build-resilience/2025-03-27T05:35:13+00:00https://sodiumcyber.com/new-morphing-meerkat-phishing-kit-mimics-114-brands-using-victims-dns-email-records/2025-03-28T05:53:33+00:00https://sodiumcyber.com/hackers-repurpose-ransomhubs-edrkillshifter-in-medusa-bianlian-and-play-attacks/2025-03-28T05:53:33+00:00https://sodiumcyber.com/apt36-spoofs-india-post-website-to-infect-windows-and-android-users-with-malware/2025-03-28T05:53:33+00:00https://sodiumcyber.com/new-report-explains-why-casb-solutions-fail-to-address-shadow-saas-and-how-to-fix-it/2025-03-28T05:53:33+00:00https://sodiumcyber.com/pjobrat-makes-a-comeback-takes-another-crack-at-chat-apps/2025-03-28T05:53:33+00:00https://sodiumcyber.com/blacklock-ransomware-exposed-after-researchers-exploit-leak-site-vulnerability/2025-03-29T06:23:20+00:00https://sodiumcyber.com/researchers-uncover-46-critical-flaws-in-solar-inverters-from-sungrow-growatt-and-sma/2025-03-29T06:23:20+00:00https://sodiumcyber.com/coffeeloader-uses-gpu-based-armoury-packer-to-evade-edr-and-antivirus-detection/2025-03-29T06:23:20+00:00https://sodiumcyber.com/product-walkthrough-how-datto-bcdr-delivers-unstoppable-business-continuity/2025-03-29T06:23:20+00:00https://sodiumcyber.com/pjobrat-malware-campaign-targeted-taiwanese-users-via-fake-chat-apps/2025-03-29T06:23:20+00:00https://sodiumcyber.com/resurge-malware-exploits-ivanti-flaw-with-rootkit-and-web-shell-features/2025-03-30T06:41:49+00:00https://sodiumcyber.com/new-android-trojan-crocodilus-abuses-accessibility-to-steal-banking-and-crypto-credentials/2025-03-30T06:41:49+00:00https://sodiumcyber.com/apple-fined-e150-million-by-french-regulator-over-discriminatory-att-consent-practices/2025-04-01T07:26:37+00:00https://sodiumcyber.com/russian-hackers-exploit-cve-2025-26633-via-msc-eviltwin-to-deploy-silentprism-and-darkwisp/2025-04-01T07:26:37+00:00https://sodiumcyber.com/hackers-exploit-wordpress-mu-plugins-to-inject-spam-and-hijack-site-images/2025-04-01T07:26:37+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-chrome-0-day-ingressnightmare-solar-bugs-dns-tactics-and-more/2025-04-01T07:26:37+00:00https://sodiumcyber.com/5-impactful-aws-vulnerabilities-youre-responsible-for/2025-04-01T07:26:37+00:00https://sodiumcyber.com/new-malware-loaders-use-call-stack-spoofing-github-c2-and-net-reactor-for-stealth/2025-04-02T07:35:33+00:00https://sodiumcyber.com/over-1500-postgresql-servers-compromised-in-fileless-cryptocurrency-mining-campaign/2025-04-02T07:35:33+00:00https://sodiumcyber.com/enterprise-gmail-users-can-now-send-end-to-end-encrypted-emails-to-any-platform/2025-04-02T07:35:33+00:00https://sodiumcyber.com/lucid-phaas-hits-169-targets-in-88-countries-using-imessage-and-rcs-smishing/2025-04-02T07:35:33+00:00https://sodiumcyber.com/apple-backports-critical-fixes-for-3-recent-0-days-impacting-older-ios-and-macos-devices/2025-04-02T07:35:33+00:00https://sodiumcyber.com/google-patches-quick-share-vulnerability-enabling-silent-file-transfers-without-consent/2025-04-03T08:47:21+00:00https://sodiumcyber.com/triada-malware-preloaded-on-counterfeit-android-phones-infects-2600-devices/2025-04-03T08:47:21+00:00https://sodiumcyber.com/legacy-stripe-api-exploited-to-validate-stolen-payment-cards-in-web-skimmer-campaign/2025-04-03T08:47:21+00:00https://sodiumcyber.com/europol-dismantles-kidflix-with-72000-csam-videos-seized-in-major-operation/2025-04-03T08:47:21+00:00https://sodiumcyber.com/google-fixed-cloud-run-vulnerability-allowing-unauthorized-image-access-via-iam-misuse/2025-04-03T08:47:21+00:00https://sodiumcyber.com/critical-ivanti-flaw-actively-exploited-to-deploy-trailblaze-and-brushfire-malware/2025-04-04T09:58:08+00:00https://sodiumcyber.com/cert-ua-reports-cyberattacks-targeting-ukrainian-state-systems-with-wrecksteel-malware/2025-04-04T09:58:08+00:00https://sodiumcyber.com/critical-flaw-in-apache-parquet-allows-remote-attackers-to-execute-arbitrary-code/2025-04-04T09:58:08+00:00https://sodiumcyber.com/microsoft-warns-of-tax-themed-email-attacks-using-pdfs-and-qr-codes-to-deliver-malware/2025-04-04T09:58:08+00:00https://sodiumcyber.com/lazarus-group-targets-job-seekers-with-clickfix-tactic-to-deploy-golangghost-malware/2025-04-04T09:58:08+00:00https://sodiumcyber.com/malicious-python-packages-on-pypi-downloaded-39000-times-steal-sensitive-data/2025-04-05T10:07:45+00:00https://sodiumcyber.com/spotbugs-access-token-theft-identified-as-root-cause-of-github-supply-chain-attack/2025-04-05T10:07:45+00:00https://sodiumcyber.com/have-we-reached-a-distroless-tipping-point/2025-04-05T10:07:46+00:00https://sodiumcyber.com/a-journey-into-forgotten-null-session-and-ms-rpc-interfaces-part-2/2025-04-05T10:07:46+00:00https://sodiumcyber.com/microsoft-credits-encrypthub-hacker-behind-618-breaches-for-disclosing-windows-flaws/2025-04-06T10:59:30+00:00https://sodiumcyber.com/north-korean-hackers-deploy-beavertail-malware-via-11-malicious-npm-packages/2025-04-06T10:59:30+00:00https://sodiumcyber.com/security-theater-vanity-metrics-keep-you-busy-and-exposed/2025-04-07T11:18:36+00:00https://sodiumcyber.com/how-toddycat-tried-to-hide-behind-av-software/2025-04-07T11:18:36+00:00https://sodiumcyber.com/poisonseed-exploits-crm-accounts-to-launch-cryptocurrency-seed-phrase-poisoning-attacks/2025-04-07T11:18:36+00:00https://sodiumcyber.com/agentic-ai-in-the-soc-dawn-of-autonomous-alert-triage/2025-04-08T11:40:13+00:00https://sodiumcyber.com/uac-0226-deploys-giftedcrook-stealer-via-malicious-excel-files-targeting-ukraine/2025-04-08T11:40:13+00:00https://sodiumcyber.com/attackers-distributing-a-miner-and-the-clipbanker-trojan-via-sourceforge/2025-04-08T11:40:13+00:00https://sodiumcyber.com/cisa-adds-crushftp-vulnerability-to-kev-catalog-following-confirmed-active-exploitation/2025-04-08T11:40:13+00:00https://sodiumcyber.com/google-releases-android-update-to-patch-two-actively-exploited-vulnerabilities/2025-04-08T11:40:13+00:00https://sodiumcyber.com/new-tcesb-malware-found-in-active-attacks-exploiting-eset-security-scanner/2025-04-09T12:43:42+00:00https://sodiumcyber.com/explosive-growth-of-non-human-identities-creating-massive-security-blind-spots/2025-04-09T12:43:42+00:00https://sodiumcyber.com/pipemagic-trojan-exploits-windows-zero-day-vulnerability-to-deploy-ransomware/2025-04-09T12:43:42+00:00https://sodiumcyber.com/cisa-warns-of-centrestacks-hard-coded-machinekey-vulnerability-enabling-rce-attacks/2025-04-09T12:43:42+00:00https://sodiumcyber.com/microsoft-patches-126-flaws-including-actively-exploited-windows-clfs-vulnerability/2025-04-09T12:43:42+00:00https://sodiumcyber.com/playpraetor-reloaded-ctm360-uncovers-a-play-masquerading-party/2025-04-10T12:47:52+00:00https://sodiumcyber.com/the-identities-behind-ai-agents-a-deep-dive-into-ai-nhi/2025-04-10T12:47:52+00:00https://sodiumcyber.com/gamaredon-uses-infected-removable-drives-to-breach-western-military-mission-in-ukraine/2025-04-10T12:47:52+00:00https://sodiumcyber.com/goffee-continues-to-attack-organizations-in-russia/2025-04-10T12:47:52+00:00https://sodiumcyber.com/europol-arrests-five-smokeloader-clients-linked-by-seized-database-evidence/2025-04-10T12:47:52+00:00https://sodiumcyber.com/initial-access-brokers-shift-tactics-selling-more-for-less/2025-04-11T12:57:58+00:00https://sodiumcyber.com/palo-alto-networks-warns-of-brute-force-attempts-targeting-pan-os-globalprotect-gateways/2025-04-11T12:57:58+00:00https://sodiumcyber.com/spynote-badbazaar-moonshine-malware-target-android-and-ios-users-via-fake-apps/2025-04-11T12:57:58+00:00https://sodiumcyber.com/ottokit-wordpress-plugin-admin-creation-vulnerability-under-active-exploitation/2025-04-11T12:57:58+00:00https://sodiumcyber.com/incomplete-patch-in-nvidia-toolkit-leaves-cve-2024-0132-open-to-container-escapes/2025-04-11T12:57:58+00:00https://sodiumcyber.com/fortinet-warns-attackers-retain-fortigate-access-post-patching-via-ssl-vpn-symlink-exploit/2025-04-12T13:10:59+00:00https://sodiumcyber.com/paper-werewolf-deploys-powermodul-implant-in-targeted-cyberattacks-on-russian-sectors/2025-04-12T13:10:59+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-windows-0-day-vpn-exploits-weaponized-ai-hijacked-antivirus-and-more/2025-04-14T13:36:54+00:00https://sodiumcyber.com/cybersecurity-in-the-ai-era-evolve-faster-than-the-threats-or-get-left-behind/2025-04-14T13:36:54+00:00https://sodiumcyber.com/pakistan-linked-hackers-expand-targets-in-india-with-curlback-rat-and-spark-rat/2025-04-14T13:36:54+00:00https://sodiumcyber.com/majority-of-browser-extensions-can-access-sensitive-enterprise-data-new-report-finds/2025-04-15T13:50:38+00:00https://sodiumcyber.com/crypto-developers-targeted-by-python-malware-disguised-as-coding-challenges/2025-04-15T13:50:38+00:00https://sodiumcyber.com/gladinets-triofox-and-centrestack-under-active-exploitation-via-critical-rce-vulnerability/2025-04-15T13:50:39+00:00https://sodiumcyber.com/meta-resumes-e-u-ai-training-using-public-user-data-after-regulator-approval/2025-04-15T13:50:39+00:00https://sodiumcyber.com/resolverrat-campaign-targets-healthcare-pharma-via-phishing-and-dll-side-loading/2025-04-15T13:50:39+00:00https://sodiumcyber.com/google-blocked-5-1b-harmful-ads-and-suspended-39-2m-advertiser-accounts-in-2024/2025-04-16T13:53:36+00:00https://sodiumcyber.com/gamma-ai-platform-abused-in-phishing-chain-to-spoof-microsoft-sharepoint-logins/2025-04-16T13:53:36+00:00https://sodiumcyber.com/from-third-party-vendors-to-u-s-tariffs-the-new-cyber-risks-facing-supply-chains/2025-04-16T13:53:36+00:00https://sodiumcyber.com/new-bpfdoor-controller-enables-stealthy-lateral-movement-in-linux-server-attacks/2025-04-16T13:53:36+00:00https://sodiumcyber.com/product-walkthrough-a-look-inside-wing-securitys-layered-saas-identity-defense/2025-04-16T13:53:36+00:00https://sodiumcyber.com/state-sponsored-hackers-weaponize-clickfix-tactic-in-targeted-malware-campaigns/2025-04-17T14:32:39+00:00https://sodiumcyber.com/artificial-intelligence-whats-all-the-fuss/2025-04-17T14:32:39+00:00https://sodiumcyber.com/critical-erlang-otp-ssh-vulnerability-cvss-10-0-allows-unauthenticated-code-execution/2025-04-17T14:32:39+00:00https://sodiumcyber.com/blockchain-offers-security-benefits-but-dont-neglect-your-passwords/2025-04-17T14:32:39+00:00https://sodiumcyber.com/node-js-malware-campaign-targets-crypto-users-with-fake-binance-and-tradingview-installers/2025-04-17T14:32:39+00:00https://sodiumcyber.com/multi-stage-malware-attack-uses-jse-and-powershell-to-deploy-agent-tesla-and-xloader/2025-04-18T14:36:21+00:00https://sodiumcyber.com/webinar-ai-is-already-inside-your-saas-stack-learn-how-to-prevent-the-next-silent-breach/2025-04-18T14:36:21+00:00https://sodiumcyber.com/experts-uncover-new-xorddos-controller-infrastructure-as-malware-expands-to-docker-linux-iot/2025-04-18T14:36:21+00:00https://sodiumcyber.com/cve-2025-24054-under-active-attack-steals-ntlm-credentials-on-file-download/2025-04-18T14:36:21+00:00https://sodiumcyber.com/moving-cves-past-one-nation-control/2025-04-18T14:36:21+00:00https://sodiumcyber.com/asus-confirms-critical-flaw-in-aicloud-routers-users-urged-to-update-firmware/2025-04-19T15:21:21+00:00https://sodiumcyber.com/chinese-smishing-kit-powers-widespread-toll-fraud-campaign-targeting-u-s-users-in-8-states/2025-04-19T15:21:21+00:00https://sodiumcyber.com/apt29-deploys-grapeloader-malware-targeting-european-diplomats-through-wine-tasting-lures/2025-04-20T17:17:08+00:00https://sodiumcyber.com/rogue-npm-packages-mimic-telegram-bot-api-to-plant-ssh-backdoors-on-linux-systems/2025-04-20T17:17:08+00:00https://sodiumcyber.com/kimsuky-exploits-bluekeep-rdp-vulnerability-to-breach-systems-in-south-korea-and-japan/2025-04-21T17:22:01+00:00https://sodiumcyber.com/supercard-x-android-malware-enables-contactless-atm-and-pos-fraud-via-nfc-relay-attacks/2025-04-21T17:22:01+00:00https://sodiumcyber.com/lumma-stealer-tracking-distribution-channels/2025-04-21T17:22:01+00:00https://sodiumcyber.com/5-reasons-device-management-isnt-device-trust/2025-04-21T17:22:01+00:00https://sodiumcyber.com/%e2%9a%a1-thn-weekly-recap-ios-zero-days-4chan-breach-ntlm-exploits-whatsapp-spyware-more/2025-04-21T17:22:01+00:00https://sodiumcyber.com/gcp-cloud-composer-bug-let-attackers-elevate-access-via-malicious-pypi-packages/2025-04-22T17:24:56+00:00https://sodiumcyber.com/russian-organizations-targeted-by-backdoor-masquerading-as-secure-networking-software-updates/2025-04-22T17:24:56+00:00https://sodiumcyber.com/5-major-concerns-with-employees-using-the-browser/2025-04-22T17:24:56+00:00https://sodiumcyber.com/phishers-exploit-google-sites-and-dkim-replay-to-send-signed-emails-steal-credentials/2025-04-22T17:24:56+00:00https://sodiumcyber.com/microsoft-secures-msa-signing-with-azure-confidential-vms-following-storm-0558-breach/2025-04-22T17:24:56+00:00https://sodiumcyber.com/dprk-hackers-steal-137m-from-tron-users-in-single-day-phishing-attack/2025-04-23T18:47:09+00:00https://sodiumcyber.com/iran-linked-hackers-target-israel-with-murkytour-malware-via-fake-job-campaign/2025-04-23T18:47:09+00:00https://sodiumcyber.com/android-spyware-disguised-as-alpine-quest-app-targets-russian-military-devices/2025-04-23T18:47:10+00:00https://sodiumcyber.com/three-reasons-why-the-browser-is-best-for-stopping-phishing-attacks/2025-04-23T18:47:10+00:00https://sodiumcyber.com/russian-hackers-exploit-microsoft-oauth-to-target-ukraine-allies-via-signal-and-whatsapp/2025-04-23T18:47:10+00:00https://sodiumcyber.com/lazarus-hits-6-south-korean-firms-via-cross-ex-innorix-flaws-and-threatneedle-malware/2025-04-24T18:50:47+00:00https://sodiumcyber.com/linux-io_uring-poc-rootkit-bypasses-system-call-based-threat-detection-tools/2025-04-24T18:50:47+00:00https://sodiumcyber.com/automating-zero-trust-in-healthcare-from-risk-scoring-to-dynamic-policy-enforcement-without-network-redesign/2025-04-24T18:50:47+00:00https://sodiumcyber.com/159-cves-exploited-in-q1-2025-28-3-within-24-hours-of-disclosure/2025-04-24T18:50:47+00:00https://sodiumcyber.com/darcula-adds-genai-to-phishing-toolkit-lowering-the-barrier-for-cybercriminals/2025-04-24T18:50:47+00:00https://sodiumcyber.com/north-korean-hackers-spread-malware-via-fake-crypto-firms-and-job-interview-lures/2025-04-25T18:51:38+00:00https://sodiumcyber.com/new-critical-sap-netweaver-flaw-exploited-to-drop-web-shell-brute-ratel-framework/2025-04-25T18:51:38+00:00https://sodiumcyber.com/why-nhis-are-securitys-most-dangerous-blind-spot/2025-04-25T18:51:38+00:00https://sodiumcyber.com/triada-strikes-back/2025-04-25T18:51:38+00:00https://sodiumcyber.com/researchers-identify-rackstatic-vulnerability-enabling-data-breaches-in-ruby-servers/2025-04-25T18:51:38+00:00https://sodiumcyber.com/toymaker-uses-lagtoy-to-sell-access-to-cactus-ransomware-gangs-for-double-extortion/2025-04-26T19:45:58+00:00https://sodiumcyber.com/storm-1977-hits-education-clouds-with-azurechecker-deploys-200-crypto-mining-containers/2025-04-27T20:19:07+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-critical-sap-exploit-ai-powered-phishing-major-breaches-new-cves-more/2025-04-28T20:48:07+00:00https://sodiumcyber.com/how-breaches-start-breaking-down-5-real-vulns/2025-04-28T20:48:07+00:00https://sodiumcyber.com/earth-kurma-targets-southeast-asia-with-rootkits-and-cloud-based-data-theft-tools/2025-04-28T20:48:07+00:00https://sodiumcyber.com/woocommerce-users-targeted-by-fake-patch-phishing-campaign-deploying-site-backdoors/2025-04-28T20:48:07+00:00https://sodiumcyber.com/hackers-exploit-critical-craft-cms-flaws-hundreds-of-servers-likely-compromised/2025-04-28T20:48:07+00:00https://sodiumcyber.com/whatsapp-launches-private-processing-to-enable-ai-features-while-protecting-message-privacy/2025-04-29T20:49:14+00:00https://sodiumcyber.com/new-reports-uncover-jailbreaks-unsafe-code-and-data-theft-risks-in-leading-ai-systems/2025-04-29T20:49:14+00:00https://sodiumcyber.com/sentinelone-uncovers-chinese-espionage-campaign-targeting-its-infrastructure-and-clients/2025-04-29T20:49:14+00:00https://sodiumcyber.com/product-walkthrough-securing-microsoft-copilot-with-reco/2025-04-29T20:49:14+00:00https://sodiumcyber.com/google-reports-75-zero-days-exploited-in-2024-44-targeted-enterprise-security-products/2025-04-29T20:49:14+00:00https://sodiumcyber.com/researchers-demonstrate-how-mcp-prompt-injection-can-be-used-for-both-attack-and-defense/2025-04-30T21:08:09+00:00https://sodiumcyber.com/free-webinar-guide-to-securing-your-entire-identity-lifecycle-against-ai-powered-threats/2025-04-30T21:08:09+00:00https://sodiumcyber.com/chinese-hackers-abuse-ipv6-slaac-for-aitm-attacks-via-spellbinder-lateral-movement-tool/2025-04-30T21:08:09+00:00https://sodiumcyber.com/customer-account-takeovers-the-multi-billion-dollar-problem-you-dont-know-about/2025-04-30T21:08:09+00:00https://sodiumcyber.com/nebulous-mantis-targets-nato-linked-entities-with-multi-stage-malware-attacks/2025-04-30T21:08:09+00:00https://sodiumcyber.com/fake-security-plugin-on-wordpress-enables-remote-admin-access-for-attackers/2025-05-01T21:13:55+00:00https://sodiumcyber.com/why-top-soc-teams-are-shifting-to-network-detection-and-response/2025-05-01T21:13:55+00:00https://sodiumcyber.com/claude-ai-exploited-to-operate-100-fake-political-personas-in-global-influence-campaign/2025-05-01T21:13:55+00:00https://sodiumcyber.com/new-research-reveals-95-of-appsec-fixes-dont-reduce-risk/2025-05-01T21:13:55+00:00https://sodiumcyber.com/darkwatchman-sheriff-malware-hit-russia-and-ukraine-with-stealth-and-nation-grade-tactics/2025-05-01T21:13:55+00:00https://sodiumcyber.com/tiktok-slammed-with-e530-million-gdpr-fine-for-sending-e-u-data-to-china/2025-05-02T21:19:29+00:00https://sodiumcyber.com/how-to-automate-cve-and-vulnerability-advisory-response-with-tines/2025-05-02T21:19:29+00:00https://sodiumcyber.com/mintsloader-drops-ghostweaver-via-phishing-clickfix-uses-dga-tls-for-stealth-attacks/2025-05-02T21:19:29+00:00https://sodiumcyber.com/microsoft-sets-passkeys-default-for-new-accounts-15-billion-users-gain-passwordless-support/2025-05-02T21:19:29+00:00https://sodiumcyber.com/malicious-go-modules-deliver-disk-wiping-linux-malware-in-advanced-supply-chain-attack/2025-05-03T21:23:12+00:00https://sodiumcyber.com/iranian-hackers-maintain-2-year-access-to-middle-east-cni-via-vpn-flaws-and-malware/2025-05-03T21:23:12+00:00https://sodiumcyber.com/u-s-charges-yemeni-hacker-behind-black-kingdom-ransomware-targeting-1500-systems/2025-05-03T21:23:12+00:00https://sodiumcyber.com/wormable-airplay-flaws-enable-zero-click-rce-on-apple-devices-via-public-wi-fi/2025-05-05T23:59:44+00:00https://sodiumcyber.com/commvault-cve-2025-34028-added-to-cisa-kev-after-active-exploitation-confirmed/2025-05-05T23:59:44+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-nation-state-hacks-spyware-alerts-deepfake-malware-supply-chain-backdoors/2025-05-05T23:59:44+00:00https://sodiumcyber.com/perfection-is-a-myth-leverage-isnt-how-small-teams-can-secure-their-google-workspace/2025-05-05T23:59:44+00:00https://sodiumcyber.com/golden-chickens-deploy-terrastealerv2-to-steal-browser-credentials-and-crypto-wallet-data/2025-05-05T23:59:44+00:00https://sodiumcyber.com/hackers-exploit-samsung-magicinfo-geovision-iot-flaws-to-deploy-mirai-botnet/2025-05-07T00:02:34+00:00https://sodiumcyber.com/new-investment-scams-use-facebook-ads-rdga-domains-and-ip-checks-to-filter-victims/2025-05-07T00:02:34+00:00https://sodiumcyber.com/third-parties-and-machine-credentials-the-silent-drivers-behind-2025s-worst-breaches/2025-05-07T00:02:34+00:00https://sodiumcyber.com/microsoft-warns-default-helm-charts-could-leave-kubernetes-apps-exposed-to-data-leaks/2025-05-07T00:02:34+00:00https://sodiumcyber.com/entra-id-data-protection-essential-or-overkill/2025-05-07T00:02:34+00:00https://sodiumcyber.com/europol-shuts-down-six-ddos-for-hire-services-used-in-global-attacks/2025-05-08T00:06:25+00:00https://sodiumcyber.com/ottokit-wordpress-plugin-with-100k-installs-hit-by-exploits-targeting-multiple-flaws/2025-05-08T00:06:25+00:00https://sodiumcyber.com/sysaid-patches-4-critical-flaws-enabling-pre-auth-rce-in-on-premise-version/2025-05-08T00:06:25+00:00https://sodiumcyber.com/reevaluating-sses-a-technical-gap-analysis-of-last-mile-protection/2025-05-08T00:06:25+00:00https://sodiumcyber.com/play-ransomware-exploited-windows-cve-2025-29824-as-zero-day-to-breach-u-s-organization/2025-05-08T00:06:25+00:00https://sodiumcyber.com/nickel-tapestry-expands-fraudulent-worker-operations/2025-05-09T00:27:36+00:00https://sodiumcyber.com/38000-freedrain-subdomains-found-exploiting-seo-to-steal-crypto-wallet-seed-phrases/2025-05-09T00:27:36+00:00https://sodiumcyber.com/security-tools-alone-dont-protect-you-control-effectiveness-does/2025-05-09T00:27:36+00:00https://sodiumcyber.com/sonicwall-patches-3-flaws-in-sma-100-devices-allowing-attackers-to-run-code-as-root/2025-05-09T00:27:36+00:00https://sodiumcyber.com/breaking-7000-device-proxy-botnet-using-iot-eol-systems-dismantled-in-u-s-dutch-operation/2025-05-10T01:42:00+00:00https://sodiumcyber.com/ottercookie-v4-adds-vm-detection-and-chrome-metamask-credential-theft-capabilities/2025-05-10T01:42:00+00:00https://sodiumcyber.com/initial-access-brokers-target-brazil-execs-via-nf-e-spam-and-legit-rmm-trials/2025-05-10T01:42:00+00:00https://sodiumcyber.com/deploying-ai-agents-learn-to-secure-them-before-hackers-strike-your-business/2025-05-10T01:42:00+00:00https://sodiumcyber.com/beyond-vulnerability-management-can-you-cve-what-i-cve/2025-05-10T01:42:00+00:00https://sodiumcyber.com/google-pays-1-375-billion-to-texas-over-unauthorized-tracking-and-biometric-data-collection/2025-05-11T01:46:13+00:00https://sodiumcyber.com/germany-shuts-down-exch-over-1-9b-laundering-seizes-e34m-in-crypto-and-8tb-of-data/2025-05-11T01:46:14+00:00https://sodiumcyber.com/asus-patches-driverhub-rce-flaws-exploitable-via-http-and-crafted-ini-files/2025-05-13T02:00:14+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-zero-day-exploits-developer-malware-iot-botnets-and-ai-powered-scams/2025-05-13T02:00:14+00:00https://sodiumcyber.com/the-persistence-problem-why-exposed-credentials-remain-unfixed-and-how-to-change-that/2025-05-13T02:00:14+00:00https://sodiumcyber.com/fake-ai-tools-used-to-spread-noodlophile-malware-targeting-62000-via-facebook-lures/2025-05-13T02:00:14+00:00https://sodiumcyber.com/china-linked-apts-exploit-sap-cve-2025-31324-to-breach-581-critical-systems-worldwide/2025-05-14T02:04:06+00:00https://sodiumcyber.com/malicious-pypi-package-posing-as-solana-tool-stole-source-code-in-761-downloads/2025-05-14T02:04:06+00:00https://sodiumcyber.com/deepfake-defense-in-the-age-of-ai/2025-05-14T02:04:06+00:00https://sodiumcyber.com/north-korean-konni-apt-targets-ukraine-with-malware-to-track-russian-invasion-progress/2025-05-14T02:04:06+00:00https://sodiumcyber.com/using-a-mythic-agent-to-optimize-penetration-testing/2025-05-14T02:04:06+00:00https://sodiumcyber.com/samsung-patches-cve-2025-4632-used-to-deploy-mirai-botnet-via-magicinfo-9-exploit/2025-05-15T02:20:22+00:00https://sodiumcyber.com/bianlian-and-ransomexx-exploit-sap-netweaver-flaw-to-deploy-pipemagic-trojan/2025-05-15T02:20:22+00:00https://sodiumcyber.com/xinbi-telegram-market-tied-to-8-4b-in-crypto-crime-romance-scams-north-korea-laundering/2025-05-15T02:20:22+00:00https://sodiumcyber.com/microsoft-primes-71-fixes-for-may-patch-tuesday/2025-05-15T02:20:22+00:00https://sodiumcyber.com/ctm360-identifies-surge-in-phishing-attacks-targeting-meta-business-users/2025-05-15T02:20:22+00:00https://sodiumcyber.com/meta-to-train-ai-on-e-u-user-data-from-may-27-without-consent-noyb-threatens-lawsuit/2025-05-16T02:48:52+00:00https://sodiumcyber.com/coinbase-agents-bribed-data-of-1-users-leaked-20m-extortion-attempt-fails/2025-05-16T02:48:52+00:00https://sodiumcyber.com/threat-landscape-for-industrial-automation-systems-in-q1-2025/2025-05-16T02:48:52+00:00https://sodiumcyber.com/beyond-the-kill-chain-what-cybercriminals-do-with-their-money-part-5/2025-05-16T02:48:52+00:00https://sodiumcyber.com/beyond-the-kill-chain-what-cybercriminals-do-with-their-money-part-4/2025-05-16T02:48:52+00:00https://sodiumcyber.com/new-httpbot-botnet-launches-200-precision-ddos-attacks-on-gaming-and-tech-sectors/2025-05-17T03:52:01+00:00https://sodiumcyber.com/top-10-best-practices-for-effective-data-protection/2025-05-17T03:52:01+00:00https://sodiumcyber.com/researchers-expose-new-intel-cpu-flaws-enabling-memory-leaks-and-spectre-v2-attacks/2025-05-17T03:52:01+00:00https://sodiumcyber.com/fileless-remcos-rat-delivered-via-lnk-files-and-mshta-in-powershell-based-attacks/2025-05-17T03:52:01+00:00https://sodiumcyber.com/webinar-from-code-to-cloud-to-soc-learn-a-smarter-way-to-defend-modern-applications/2025-05-17T03:52:01+00:00https://sodiumcyber.com/rvtools-official-site-hacked-to-deliver-bumblebee-malware-via-trojanized-installer/2025-05-20T06:21:04+00:00https://sodiumcyber.com/ransomware-gangs-use-skitnet-malware-for-stealthy-data-theft-and-remote-access/2025-05-20T06:21:04+00:00https://sodiumcyber.com/why-ctem-is-the-winning-bet-for-cisos-in-2025/2025-05-20T06:21:04+00:00https://sodiumcyber.com/firefox-patches-2-zero-days-exploited-at-pwn2own-berlin-with-100k-in-rewards/2025-05-20T06:21:04+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-zero-day-exploits-insider-threats-apt-targeting-botnets-and-more/2025-05-20T06:21:04+00:00https://sodiumcyber.com/a-familiar-playbook-with-a-twist-3am-ransomware-actors-dropped-virtual-machine-with-vishing-and-quick-assist/2025-05-21T06:30:55+00:00https://sodiumcyber.com/hazy-hawk-exploits-dns-records-to-hijack-cdc-corporate-domains-for-malware-delivery/2025-05-21T06:30:55+00:00https://sodiumcyber.com/100-fake-chrome-extensions-found-hijacking-sessions-stealing-credentials-injecting-ads/2025-05-21T06:30:55+00:00https://sodiumcyber.com/aws-default-iam-roles-found-to-enable-lateral-movement-and-cross-service-exploitation/2025-05-21T06:30:55+00:00https://sodiumcyber.com/russian-hackers-exploit-email-and-vpn-vulnerabilities-to-spy-on-ukraine-aid-logistics/2025-05-22T06:31:33+00:00https://sodiumcyber.com/purerat-malware-spikes-4x-in-2025-deploying-purelogs-to-target-russian-firms/2025-05-22T06:31:33+00:00https://sodiumcyber.com/dragonforce-targets-rivals-in-a-play-for-dominance/2025-05-22T06:31:33+00:00https://sodiumcyber.com/fake-kling-ai-facebook-ads-deliver-rat-malware-to-over-22-million-potential-victims/2025-05-22T06:31:33+00:00https://sodiumcyber.com/securing-ci-cd-workflows-with-wazuh/2025-05-22T06:31:33+00:00https://sodiumcyber.com/cisa-warns-of-suspected-broader-saas-attacks-exploiting-app-secrets-and-cloud-misconfigs/2025-05-23T06:35:49+00:00https://sodiumcyber.com/gitlab-duo-vulnerability-enabled-attackers-to-hijack-ai-responses-with-hidden-prompts/2025-05-23T06:35:49+00:00https://sodiumcyber.com/chinese-hackers-exploit-trimble-cityworks-flaw-to-infiltrate-u-s-government-networks/2025-05-23T06:35:49+00:00https://sodiumcyber.com/critical-windows-server-2025-dmsa-vulnerability-enables-active-directory-compromise/2025-05-23T06:35:49+00:00https://sodiumcyber.com/chinese-hackers-exploit-ivanti-epmm-bugs-in-global-enterprise-network-attacks/2025-05-23T06:35:49+00:00https://sodiumcyber.com/hackers-use-tiktok-videos-to-distribute-vidar-and-stealc-malware-via-clickfix-technique/2025-05-24T07:11:26+00:00https://sodiumcyber.com/vicioustrap-uses-cisco-flaw-to-build-global-honeypot-from-5300-compromised-devices/2025-05-24T07:11:26+00:00https://sodiumcyber.com/300-servers-and-e3-5m-seized-as-europol-strikes-ransomware-networks-worldwide/2025-05-24T07:11:26+00:00https://sodiumcyber.com/safeline-waf-open-source-web-application-firewall-with-zero-day-detection-and-bot-protection/2025-05-24T07:11:26+00:00https://sodiumcyber.com/u-s-dismantles-danabot-malware-network-charges-16-in-50m-global-cybercrime-operation/2025-05-24T07:11:26+00:00https://sodiumcyber.com/hackers-use-fake-vpn-and-browser-nsis-installers-to-deliver-winos-4-0-malware/2025-05-26T07:22:14+00:00https://sodiumcyber.com/russia-linked-hackers-target-tajikistan-government-with-weaponized-word-documents/2025-05-27T07:30:59+00:00https://sodiumcyber.com/over-70-malicious-npm-and-vs-code-packages-found-stealing-data-and-crypto/2025-05-27T07:30:59+00:00https://sodiumcyber.com/cisos-guide-to-web-privacy-validation-and-why-its-important/2025-05-27T07:30:59+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-apt-campaigns-browser-hijacks-ai-malware-cloud-breaches-and-critical-cves/2025-05-27T07:30:59+00:00https://sodiumcyber.com/apple-blocks-9-billion-in-fraud-over-5-years-amid-rising-app-store-threats/2025-05-28T08:03:48+00:00https://sodiumcyber.com/new-self-spreading-malware-infects-docker-containers-to-mine-dero-cryptocurrency/2025-05-28T08:03:48+00:00https://sodiumcyber.com/cybercriminals-clone-antivirus-site-to-spread-venom-rat-and-steal-crypto-wallets/2025-05-28T08:03:48+00:00https://sodiumcyber.com/russian-hackers-breach-20-ngos-using-evilginx-phishing-via-fake-microsoft-entra-pages/2025-05-28T08:03:48+00:00https://sodiumcyber.com/ai-agents-and-the-non%e2%80%91human-identity-crisis-how-to-deploy-ai-more-securely-at-scale/2025-05-28T08:03:48+00:00https://sodiumcyber.com/chinese-apt41-exploits-google-calendar-for-malware-command-and-control-operations/2025-05-29T08:07:15+00:00https://sodiumcyber.com/over-100000-wordpress-sites-at-risk-from-critical-cvss-10-0-vulnerability-in-wishlist-plugin/2025-05-29T08:07:15+00:00https://sodiumcyber.com/iranian-hacker-pleads-guilty-in-19-million-robbinhood-ransomware-attack-on-baltimore/2025-05-29T08:07:15+00:00https://sodiumcyber.com/czech-republic-blames-china-linked-apt31-hackers-for-2022-cyberattack/2025-05-29T08:07:15+00:00https://sodiumcyber.com/microsoft-onedrive-file-picker-flaw-grants-apps-full-cloud-access-even-when-uploading-just-one-file/2025-05-29T08:07:15+00:00https://sodiumcyber.com/connectwise-hit-by-cyberattack-nation-state-actor-suspected-in-targeted-breach/2025-05-30T08:44:30+00:00https://sodiumcyber.com/meta-disrupts-influence-ops-targeting-romania-azerbaijan-and-taiwan-with-fake-personas/2025-05-30T08:44:30+00:00https://sodiumcyber.com/cybercriminals-target-ai-users-with-malware-loaded-installers-posing-as-popular-tools/2025-05-30T08:44:30+00:00https://sodiumcyber.com/new-windows-rat-evades-detection-for-weeks-using-corrupted-dos-and-pe-headers/2025-05-30T08:44:30+00:00https://sodiumcyber.com/dragonforce-exploits-simplehelp-flaws-to-deploy-ransomware-across-customer-endpoints/2025-05-30T08:44:30+00:00https://sodiumcyber.com/u-s-doj-seizes-4-domains-supporting-cybercrime-crypting-services-in-global-operation/2025-05-31T08:59:23+00:00https://sodiumcyber.com/new-eddiestealer-malware-bypasses-chromes-app-bound-encryption-to-steal-browser-data/2025-05-31T08:59:23+00:00https://sodiumcyber.com/exploits-and-vulnerabilities-in-q1-2025/2025-05-31T08:59:23+00:00https://sodiumcyber.com/china-linked-hackers-exploit-sap-and-sql-server-flaws-in-attacks-across-asia-and-brazil/2025-05-31T08:59:23+00:00https://sodiumcyber.com/from-the-department-of-no-to-a-culture-of-yes-a-healthcare-cisos-journey-to-enabling-modern-care/2025-05-31T08:59:23+00:00https://sodiumcyber.com/new-linux-flaws-allow-password-hash-theft-via-core-dumps-in-ubuntu-rhel-fedora/2025-06-01T09:07:36+00:00https://sodiumcyber.com/fake-recruiter-emails-target-cfos-using-legit-netbird-tool-across-6-global-regions/2025-06-02T09:09:07+00:00https://sodiumcyber.com/google-chrome-to-distrust-two-certificate-authorities-over-compliance-and-conduct-issues/2025-06-03T09:34:20+00:00https://sodiumcyber.com/microsoft-and-crowdstrike-launch-shared-threat-actor-glossary-to-cut-attribution-confusion/2025-06-03T09:34:21+00:00https://sodiumcyber.com/new-chrome-zero-day-actively-exploited-google-issues-emergency-out-of-band-patch/2025-06-03T09:34:21+00:00https://sodiumcyber.com/cryptojacking-campaign-exploits-devops-apis-using-off-the-shelf-tools-from-github/2025-06-03T09:34:21+00:00https://sodiumcyber.com/preinstalled-apps-on-ulefone-krugermatz-phones-let-any-app-reset-device-steal-pin/2025-06-03T09:34:21+00:00https://sodiumcyber.com/hpe-issues-security-patch-for-storeonce-bug-allowing-remote-authentication-bypass/2025-06-04T09:46:07+00:00https://sodiumcyber.com/fake-docusign-gitcode-sites-spread-netsupport-rat-via-multi-stage-powershell-attack/2025-06-04T09:46:07+00:00https://sodiumcyber.com/critical-10-year-old-roundcube-webmail-bug-allows-authenticated-users-run-malicious-code/2025-06-04T09:46:07+00:00https://sodiumcyber.com/scattered-spider-understanding-help-desk-scams-and-how-to-defend-your-organization/2025-06-04T09:46:07+00:00https://sodiumcyber.com/host-based-logs-container-based-threats-how-to-tell-where-an-attack-began/2025-06-04T09:46:07+00:00https://sodiumcyber.com/critical-cisco-ise-auth-bypass-flaw-impacts-cloud-deployments-on-aws-azure-and-oci/2025-06-05T09:49:32+00:00https://sodiumcyber.com/google-exposes-vishing-group-unc6040-targeting-salesforce-with-fake-data-loader-app/2025-06-05T09:49:32+00:00https://sodiumcyber.com/chaos-rat-malware-targets-windows-and-linux-via-fake-network-tool-downloads/2025-06-05T09:49:32+00:00https://sodiumcyber.com/your-saas-data-isnt-safe-why-traditional-dlp-solutions-fail-in-the-browser-era/2025-06-05T09:49:32+00:00https://sodiumcyber.com/malicious-pypi-npm-and-ruby-packages-exposed-in-ongoing-open-source-supply-chain-attacks/2025-06-05T09:49:32+00:00https://sodiumcyber.com/new-pathwiper-data-wiper-malware-disrupts-ukrainian-critical-infrastructure-in-2025-attack/2025-06-06T09:56:15+00:00https://sodiumcyber.com/popular-chrome-extensions-leak-api-keys-user-data-via-http-and-hard-coded-credentials/2025-06-06T09:56:15+00:00https://sodiumcyber.com/researchers-detail-bitter-apts-evolving-tactics-as-its-geographic-scope-expands/2025-06-06T09:56:15+00:00https://sodiumcyber.com/redefining-cyber-value-why-business-impact-should-lead-the-security-conversation/2025-06-06T09:56:15+00:00https://sodiumcyber.com/iran-linked-bladedfeline-hits-iraqi-and-kurdish-targets-with-whisper-and-spearal-malware/2025-06-06T09:56:15+00:00https://sodiumcyber.com/new-atomic-macos-stealer-campaign-exploits-clickfix-to-target-apple-users/2025-06-07T10:10:47+00:00https://sodiumcyber.com/empower-users-and-protect-against-genai-data-loss/2025-06-07T10:10:47+00:00https://sodiumcyber.com/microsoft-helps-cbi-dismantle-indian-call-centers-behind-japanese-tech-support-scam/2025-06-07T10:10:47+00:00https://sodiumcyber.com/inside-the-mind-of-the-adversary-why-more-security-leaders-are-selecting-aev/2025-06-07T10:10:47+00:00https://sodiumcyber.com/analysis-of-the-latest-mirai-wave-exploiting-tbk-dvr-devices-with-cve-2024-3721/2025-06-07T10:10:47+00:00https://sodiumcyber.com/malicious-browser-extensions-infect-722-users-across-latin-america-since-early-2025/2025-06-08T10:18:55+00:00https://sodiumcyber.com/sleep-with-one-eye-open-how-librarian-ghouls-steal-data-by-night/2025-06-09T10:29:02+00:00https://sodiumcyber.com/openai-bans-chatgpt-accounts-used-by-russian-iranian-and-chinese-hacker-groups/2025-06-09T10:29:03+00:00https://sodiumcyber.com/new-supply-chain-malware-operation-hits-npm-and-pypi-ecosystems-targeting-millions-globally/2025-06-09T10:29:03+00:00https://sodiumcyber.com/researcher-found-flaw-to-discover-phone-numbers-linked-to-any-google-account/2025-06-10T10:41:30+00:00https://sodiumcyber.com/rare-werewolf-apt-uses-legitimate-software-in-attacks-on-hundreds-of-russian-enterprises/2025-06-10T10:41:30+00:00https://sodiumcyber.com/cisa-adds-erlang-ssh-and-roundcube-flaws-to-known-exploited-vulnerabilities-catalog/2025-06-10T10:41:30+00:00https://sodiumcyber.com/over-70-organizations-across-multiple-sectors-targeted-by-china-linked-cyber-espionage-group/2025-06-10T10:41:30+00:00https://sodiumcyber.com/two-distinct-botnets-exploit-wazuh-server-vulnerability-to-launch-mirai-based-attacks/2025-06-10T10:41:30+00:00https://sodiumcyber.com/sinotrack-gps-devices-vulnerable-to-remote-vehicle-control-via-default-passwords/2025-06-11T11:21:10+00:00https://sodiumcyber.com/toxic-trend-another-malware-threat-targets-deepseek/2025-06-11T11:21:10+00:00https://sodiumcyber.com/how-to-build-a-lean-security-model-5-lessons-from-river-island/2025-06-11T11:21:10+00:00https://sodiumcyber.com/microsoft-patches-67-vulnerabilities-including-webdav-zero-day-exploited-in-the-wild/2025-06-11T11:21:10+00:00https://sodiumcyber.com/adobe-releases-patch-fixing-254-vulnerabilities-closing-high-severity-security-gaps/2025-06-11T11:21:10+00:00https://sodiumcyber.com/connectwise-to-rotate-screenconnect-code-signing-certificates-due-to-security-risks/2025-06-12T11:25:56+00:00https://sodiumcyber.com/over-80000-microsoft-entra-id-accounts-targeted-using-open-source-teamfiltration-tool/2025-06-12T11:25:56+00:00https://sodiumcyber.com/former-black-basta-members-use-microsoft-teams-and-python-scripts-in-2025-attacks/2025-06-12T11:25:56+00:00https://sodiumcyber.com/295-malicious-ips-launch-coordinated-brute-force-attacks-on-apache-tomcat-manager/2025-06-12T11:25:56+00:00https://sodiumcyber.com/interpol-dismantles-20000-malicious-ips-linked-to-69-malware-variants-in-operation-secure/2025-06-12T11:25:56+00:00https://sodiumcyber.com/ransomware-gangs-exploit-unpatched-simplehelp-flaws-to-target-victims-with-double-extortion/2025-06-13T11:26:59+00:00https://sodiumcyber.com/ctem-is-the-new-soc-shifting-from-monitoring-alerts-to-measuring-risk/2025-06-13T11:26:59+00:00https://sodiumcyber.com/june-patch-tuesday-digs-into-67-bugs/2025-06-13T11:26:59+00:00https://sodiumcyber.com/apple-zero-click-flaw-in-messages-exploited-to-spy-on-journalists-using-paragon-spyware/2025-06-13T11:26:59+00:00https://sodiumcyber.com/wordpress-sites-turned-weapon-how-vextrio-and-affiliates-run-a-global-scam-network/2025-06-13T11:26:59+00:00https://sodiumcyber.com/discord-invite-link-hijacking-delivers-asyncrat-and-skuld-stealer-targeting-crypto-wallets/2025-06-14T11:27:47+00:00https://sodiumcyber.com/over-269000-websites-infected-with-jsfiretruck-javascript-malware-in-one-month/2025-06-14T11:27:47+00:00https://sodiumcyber.com/malicious-pypi-package-masquerades-as-chimera-module-to-steal-aws-ci-cd-and-macos-data/2025-06-16T11:58:38+00:00https://sodiumcyber.com/are-forgotten-ad-service-accounts-leaving-you-at-risk/2025-06-17T12:05:52+00:00https://sodiumcyber.com/hard-coded-b-password-in-sitecore-xp-sparks-major-rce-risk-in-enterprise-deployments/2025-06-17T12:05:52+00:00https://sodiumcyber.com/backups-are-under-attack-how-to-protect-your-backups/2025-06-17T12:05:52+00:00https://sodiumcyber.com/new-flodrix-botnet-variant-exploits-langflow-ai-server-rce-bug-to-launch-ddos-attacks/2025-06-17T12:05:52+00:00https://sodiumcyber.com/tp-link-router-flaw-cve-2023-33538-under-active-exploit-cisa-issues-immediate-alert/2025-06-17T12:05:52+00:00https://sodiumcyber.com/fedramp-at-startup-speed-lessons-learned/2025-06-18T12:14:25+00:00https://sodiumcyber.com/water-curse-hijacks-76-github-accounts-to-deliver-multi-stage-malware-campaign/2025-06-18T12:14:25+00:00https://sodiumcyber.com/ex-cia-analyst-sentenced-to-37-months-for-leaking-top-secret-national-defense-documents/2025-06-18T12:14:25+00:00https://sodiumcyber.com/cisa-warns-of-active-exploitation-of-linux-kernel-privilege-escalation-vulnerability/2025-06-18T12:14:25+00:00https://sodiumcyber.com/veeam-patches-cve-2025-23121-critical-rce-bug-rated-9-9-cvss-in-backup-replication/2025-06-18T12:14:25+00:00https://sodiumcyber.com/bluenoroff-deepfake-zoom-scam-hits-crypto-employee-with-macos-backdoor-malware/2025-06-19T12:14:43+00:00https://sodiumcyber.com/secure-vibe-coding-the-complete-new-guide/2025-06-19T12:14:43+00:00https://sodiumcyber.com/uncover-lots-attacks-hiding-in-trusted-tools-learn-how-in-this-free-expert-session/2025-06-19T12:14:43+00:00https://sodiumcyber.com/russian-apt29-exploits-gmail-app-passwords-to-bypass-2fa-in-targeted-phishing-campaign/2025-06-19T12:14:43+00:00https://sodiumcyber.com/meta-adds-passkey-login-support-to-facebook-for-android-and-ios-users/2025-06-19T12:14:43+00:00https://sodiumcyber.com/6-steps-to-24-7-in-house-soc-success/2025-06-20T12:19:30+00:00https://sodiumcyber.com/massive-7-3-tbps-ddos-attack-delivers-37-4-tb-in-45-seconds-targeting-hosting-provider/2025-06-20T12:19:30+00:00https://sodiumcyber.com/200-trojanized-github-repositories-found-in-campaign-targeting-gamers-and-developers/2025-06-20T12:19:30+00:00https://sodiumcyber.com/new-android-malware-surge-hits-devices-via-overlays-virtualization-fraud-and-nfc-theft/2025-06-20T12:19:30+00:00https://sodiumcyber.com/scattered-spider-behind-cyberattacks-on-ms-and-co-op-causing-up-to-592m-in-damages/2025-06-21T12:40:06+00:00https://sodiumcyber.com/qilin-ransomware-adds-call-lawyer-feature-to-pressure-victims-for-larger-ransoms/2025-06-21T12:40:06+00:00https://sodiumcyber.com/irans-state-tv-hijacked-mid-broadcast-amid-geopolitical-tensions-90m-stolen-in-crypto-heist/2025-06-21T12:40:06+00:00https://sodiumcyber.com/how-ai-enabled-workflow-automation-can-help-socs-reduce-burnout/2025-06-23T13:20:57+00:00https://sodiumcyber.com/google-adds-multi-layered-defenses-to-secure-genai-from-prompt-injection-attacks/2025-06-23T13:20:57+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-chrome-0-day-7-3-tbps-ddos-mfa-bypass-tricks-banking-trojan-and-more/2025-06-23T13:20:57+00:00https://sodiumcyber.com/sparkkitty-sparkcats-little-brother-a-new-trojan-spy-found-in-the-app-store-and-google-play/2025-06-23T13:20:57+00:00https://sodiumcyber.com/between-buzz-and-reality-the-ctem-conversation-we-all-need/2025-06-24T13:25:29+00:00https://sodiumcyber.com/hackers-exploit-misconfigured-docker-apis-to-mine-cryptocurrency-via-tor-network/2025-06-24T13:25:29+00:00https://sodiumcyber.com/u-s-house-bans-whatsapp-on-official-devices-over-security-and-data-protection-issues/2025-06-24T13:25:29+00:00https://sodiumcyber.com/apt28-uses-signal-chat-to-deploy-beardshell-malware-and-covenant-in-ukraine/2025-06-24T13:25:29+00:00https://sodiumcyber.com/china-linked-salt-typhoon-exploits-critical-cisco-vulnerability-to-target-canadian-telecom/2025-06-24T13:25:29+00:00https://sodiumcyber.com/citrix-bleed-2-flaw-enables-token-theft-sap-gui-flaws-risk-sensitive-data-exposure/2025-06-25T13:45:03+00:00https://sodiumcyber.com/pro-iranian-hacktivist-group-leaks-personal-records-from-the-2024-saudi-games/2025-06-25T13:45:03+00:00https://sodiumcyber.com/beware-the-hidden-risk-in-your-entra-environment/2025-06-25T13:45:03+00:00https://sodiumcyber.com/ai-and-collaboration-tools-how-cyberattackers-are-targeting-smbs-in-2025/2025-06-25T13:45:03+00:00https://sodiumcyber.com/sonicwall-netextender-trojan-and-connectwise-exploits-used-in-remote-access-attacks/2025-06-25T13:45:03+00:00https://sodiumcyber.com/the-hidden-risks-of-saas-why-built-in-protections-arent-enough-for-modern-data-resilience/2025-06-26T13:59:52+00:00https://sodiumcyber.com/iranian-apt35-hackers-targeting-israeli-tech-experts-with-ai-powered-phishing-attacks/2025-06-26T13:59:52+00:00https://sodiumcyber.com/cyber-criminals-exploit-open-source-tools-to-compromise-financial-institutions-across-africa/2025-06-26T13:59:52+00:00https://sodiumcyber.com/cisa-adds-3-flaws-to-kev-catalog-impacting-ami-megarac-d-link-fortinet/2025-06-26T13:59:52+00:00https://sodiumcyber.com/whatsapp-adds-ai-powered-message-summaries-for-faster-chat-previews/2025-06-26T13:59:53+00:00https://sodiumcyber.com/pubload-and-pubshell-malware-used-in-mustang-pandas-tibet-specific-attack/2025-06-27T14:00:29+00:00https://sodiumcyber.com/business-case-for-agentic-ai-soc-analysts/2025-06-27T14:00:29+00:00https://sodiumcyber.com/chinese-group-silver-fox-uses-fake-websites-to-deliver-sainbox-rat-and-hidden-rootkit/2025-06-27T14:00:29+00:00https://sodiumcyber.com/moveit-transfer-faces-increased-threats-as-scanning-surges-and-cve-flaws-are-targeted/2025-06-27T14:00:29+00:00https://sodiumcyber.com/oneclik-malware-targets-energy-sector-using-microsoft-clickonce-and-golang-backdoors/2025-06-27T14:00:29+00:00https://sodiumcyber.com/fbi-warns-of-scattered-spiders-expanding-attacks-on-airlines-using-social-engineering/2025-06-28T15:04:14+00:00https://sodiumcyber.com/giftedcrook-malware-evolves-from-browser-stealer-to-intelligence-gathering-tool/2025-06-28T15:04:14+00:00https://sodiumcyber.com/facebooks-new-ai-tool-asks-to-upload-your-photos-for-story-ideas-sparking-privacy-concerns/2025-06-28T15:04:14+00:00https://sodiumcyber.com/over-1000-soho-devices-hacked-in-china-linked-lapdogs-cyber-espionage-campaign/2025-06-28T15:04:14+00:00https://sodiumcyber.com/blind-eagle-uses-proton66-hosting-for-phishing-rat-deployment-on-colombian-banks/2025-06-30T15:13:48+00:00https://sodiumcyber.com/using-ai-to-identify-cybercrime-masterminds/2025-06-30T15:13:48+00:00https://sodiumcyber.com/leveraging-credentials-as-unique-identifiers-a-pragmatic-approach-to-nhi-inventories/2025-06-30T15:13:48+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-airline-hacks-citrix-0-day-outlook-malware-banking-trojans-and-more/2025-06-30T15:13:48+00:00https://sodiumcyber.com/new-flaw-in-ides-like-visual-studio-code-lets-malicious-extensions-bypass-verified-status/2025-07-01T15:16:06+00:00https://sodiumcyber.com/a-new-maturity-model-for-browser-security-closing-the-last-mile-risk/2025-07-01T15:16:06+00:00https://sodiumcyber.com/chrome-zero-day-cve-2025-6554-under-active-attack-google-issues-security-update/2025-07-01T15:16:06+00:00https://sodiumcyber.com/u-s-arrests-facilitator-in-north-korean-it-worker-scheme-seizes-29-domains-and-raids-21-laptop-farms/2025-07-01T15:16:06+00:00https://sodiumcyber.com/microsoft-removes-password-management-from-authenticator-app-starting-august-2025/2025-07-01T15:16:06+00:00https://sodiumcyber.com/that-network-traffic-looks-legit-but-it-could-be-hiding-a-serious-threat/2025-07-02T15:22:33+00:00https://sodiumcyber.com/hackers-using-pdfs-to-impersonate-microsoft-docusign-and-more-in-callback-phishing-campaigns/2025-07-02T15:22:33+00:00https://sodiumcyber.com/u-s-sanctions-russian-bulletproof-hosting-provider-for-supporting-cybercriminals-behind-ransomware/2025-07-02T15:22:33+00:00https://sodiumcyber.com/vercels-v0-ai-tool-weaponized-by-cybercriminals-to-rapidly-create-fake-login-pages-at-scale/2025-07-02T15:22:33+00:00https://sodiumcyber.com/critical-vulnerability-in-anthropics-mcp-exposes-developer-machines-to-remote-exploits/2025-07-02T15:22:33+00:00https://sodiumcyber.com/over-40-malicious-firefox-extensions-target-cryptocurrency-wallets-stealing-user-assets/2025-07-03T15:24:15+00:00https://sodiumcyber.com/the-hidden-weaknesses-in-ai-soc-tools-that-no-one-talks-about/2025-07-03T15:24:15+00:00https://sodiumcyber.com/chinese-hackers-exploit-ivanti-csa-zero-days-in-attacks-on-french-government-telecoms/2025-07-03T15:24:15+00:00https://sodiumcyber.com/critical-cisco-vulnerability-in-unified-cm-grants-root-access-via-static-credentials/2025-07-03T15:24:15+00:00https://sodiumcyber.com/north-korean-hackers-target-web3-with-nim-malware-and-use-clickfix-in-babyshark-campaign/2025-07-03T15:24:15+00:00https://sodiumcyber.com/nighteagle-apt-exploits-microsoft-exchange-flaw-to-target-chinas-military-and-tech-sectors/2025-07-04T15:33:21+00:00https://sodiumcyber.com/your-ai-agents-might-be-leaking-data-watch-this-webinar-to-learn-how-to-stop-it/2025-07-04T15:33:21+00:00https://sodiumcyber.com/critical-sudo-vulnerabilities-let-local-users-gain-root-access-on-linux-impacting-major-distros/2025-07-04T15:33:21+00:00https://sodiumcyber.com/google-ordered-to-pay-314m-for-misusing-android-users-cellular-data-without-permission/2025-07-04T15:33:21+00:00https://sodiumcyber.com/threat-intelligence-executive-report-volume-2025-number-3/2025-07-04T15:33:21+00:00https://sodiumcyber.com/taiwan-nsb-alerts-public-on-data-risks-from-tiktok-weibo-and-rednote-over-china-ties/2025-07-05T16:13:30+00:00https://sodiumcyber.com/alert-exposed-jdwp-interfaces-lead-to-crypto-mining-hpingbot-targets-ssh-for-ddos/2025-07-05T16:13:30+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-chrome-0-day-ivanti-exploits-macos-stealers-crypto-heists-and-more/2025-07-07T17:23:31+00:00https://sodiumcyber.com/manufacturing-security-why-default-passwords-must-go/2025-07-07T17:23:31+00:00https://sodiumcyber.com/batavia-spyware-steals-data-from-russian-organizations/2025-07-07T17:23:31+00:00https://sodiumcyber.com/tag-140-deploys-drat-v2-rat-targeting-indian-government-defense-and-rail-sectors/2025-07-07T17:23:31+00:00https://sodiumcyber.com/anatsa-android-banking-trojan-hits-90000-users-with-fake-pdf-app-on-google-play/2025-07-08T17:29:11+00:00https://sodiumcyber.com/malicious-pull-request-targets-6000-developers-via-vulnerable-ethcode-vs-code-extension/2025-07-08T17:29:11+00:00https://sodiumcyber.com/5-ways-identity-based-attacks-are-breaching-retail/2025-07-08T17:29:11+00:00https://sodiumcyber.com/rondodox-botnet-exploits-flaws-in-tbk-dvrs-and-four-faith-routers-to-launch-ddos-attacks/2025-07-08T17:29:11+00:00https://sodiumcyber.com/baittrap-over-17000-fake-news-websites-caught-fueling-investment-fraud-globally/2025-07-08T17:29:11+00:00https://sodiumcyber.com/donot-apt-expands-operations-targets-european-foreign-ministries-with-loptikmod-malware/2025-07-09T17:42:47+00:00https://sodiumcyber.com/u-s-sanctions-north-korean-andariel-hacker-behind-fraudulent-it-worker-scheme/2025-07-09T17:42:47+00:00https://sodiumcyber.com/how-to-automate-ticket-creation-device-identification-and-threat-triage-with-tines/2025-07-09T17:42:47+00:00https://sodiumcyber.com/chinese-hacker-xu-zewei-arrested-for-ties-to-silk-typhoon-group-and-u-s-cyber-attacks/2025-07-09T17:42:47+00:00https://sodiumcyber.com/microsoft-patches-130-vulnerabilities-including-critical-flaws-in-spnego-and-sql-server/2025-07-09T17:42:47+00:00https://sodiumcyber.com/fake-gaming-and-ai-firms-push-malware-on-cryptocurrency-users-via-telegram-and-discord/2025-07-10T17:53:25+00:00https://sodiumcyber.com/four-arrested-in-440m-cyber-attack-on-marks-spencer-co-op-and-harrods/2025-07-10T17:53:25+00:00https://sodiumcyber.com/code-highlighting-with-cursor-ai-for-500000/2025-07-10T17:53:25+00:00https://sodiumcyber.com/what-security-leaders-need-to-know-about-ai-governance-for-saas/2025-07-10T17:53:25+00:00https://sodiumcyber.com/new-zuru-malware-variant-targeting-developers-via-trojanized-termius-macos-app/2025-07-10T17:53:25+00:00https://sodiumcyber.com/fortinet-releases-patch-for-critical-sql-injection-flaw-in-fortiweb-cve-2025-25257/2025-07-11T17:57:33+00:00https://sodiumcyber.com/perfektblue-bluetooth-vulnerabilities-expose-millions-of-vehicles-to-remote-code-execution/2025-07-11T17:57:33+00:00https://sodiumcyber.com/securing-data-in-the-ai-era/2025-07-11T17:57:33+00:00https://sodiumcyber.com/critical-wing-ftp-server-vulnerability-cve-2025-47812-actively-being-exploited-in-the-wild/2025-07-11T17:57:33+00:00https://sodiumcyber.com/iranian-backed-pay2key-ransomware-resurfaces-with-80-profit-share-for-cybercriminals/2025-07-11T17:57:33+00:00https://sodiumcyber.com/gpuhammer-new-rowhammer-attack-variant-degrades-ai-models-on-nvidia-gpus/2025-07-12T18:00:24+00:00https://sodiumcyber.com/over-600-laravel-apps-exposed-to-remote-code-execution-due-to-leaked-app_keys-on-github/2025-07-12T18:00:24+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-scattered-spider-arrests-car-exploits-macos-malware-fortinet-rce-and-more/2025-07-14T18:29:54+00:00https://sodiumcyber.com/sophosai-at-black-hat-usa-25-anomaly-detection-betrayed-us-so-we-gave-it-a-new-job/2025-07-14T18:29:54+00:00https://sodiumcyber.com/forensic-journey-breaking-down-the-userassist-artifact-structure/2025-07-14T18:29:54+00:00https://sodiumcyber.com/cbi-shuts-down-390k-u-k-tech-support-scam-arrests-key-operatives-in-noida-call-center/2025-07-14T18:29:54+00:00https://sodiumcyber.com/esim-vulnerability-in-kigens-euicc-cards-exposes-billions-of-iot-devices-to-malicious-attacks/2025-07-14T18:29:54+00:00https://sodiumcyber.com/hyper-volumetric-ddos-attacks-reach-record-7-3-tbps-targeting-key-global-sectors/2025-07-15T18:30:25+00:00https://sodiumcyber.com/newly-emerged-global-group-raas-expands-operations-with-ai-driven-negotiation-tools/2025-07-15T18:30:25+00:00https://sodiumcyber.com/state-backed-hazybeacon-malware-uses-aws-lambda-to-steal-data-from-se-asian-governments/2025-07-15T18:30:25+00:00https://sodiumcyber.com/securing-agentic-ai-how-to-protect-the-invisible-identity-access/2025-07-15T18:30:25+00:00https://sodiumcyber.com/asyncrats-open-source-code-sparks-surge-in-dangerous-malware-variants-across-the-globe/2025-07-15T18:30:25+00:00https://sodiumcyber.com/hackers-leverage-microsoft-teams-to-spread-matanbuchus-3-0-malware-to-targeted-firms/2025-07-16T18:32:37+00:00https://sodiumcyber.com/unc6148-backdoors-fully-patched-sonicwall-sma-100-series-devices-with-overstep-rootkit/2025-07-16T18:32:37+00:00https://sodiumcyber.com/critical-golden-dmsa-attack-in-windows-server-2025-enables-cross-domain-attacks-and-persistent-access/2025-07-16T18:32:37+00:00https://sodiumcyber.com/ai-agents-act-like-employees-with-root-access-heres-how-to-regain-control/2025-07-16T18:32:37+00:00https://sodiumcyber.com/new-konfety-malware-variant-evades-detection-by-manipulating-apks-and-dynamic-code/2025-07-16T18:32:37+00:00https://sodiumcyber.com/hackers-exploit-apache-http-server-flaw-to-deploy-linuxsys-cryptocurrency-miner/2025-07-17T18:34:22+00:00https://sodiumcyber.com/europol-disrupts-noname05716-hacktivist-group-linked-to-ddos-attacks-against-ukraine/2025-07-17T18:34:22+00:00https://sodiumcyber.com/ctem-vs-asm-vs-vulnerability-management-what-security-leaders-need-to-know-in-2025/2025-07-17T18:34:22+00:00https://sodiumcyber.com/ghostcontainer-backdoor-malware-compromising-exchange-servers-of-high-value-organizations-in-asia/2025-07-17T18:34:22+00:00https://sodiumcyber.com/chinese-hackers-target-taiwans-semiconductor-sector-with-cobalt-strike-custom-backdoors/2025-07-17T18:34:22+00:00https://sodiumcyber.com/cert-ua-discovers-lamehug-malware-linked-to-apt28-using-llm-for-phishing-campaign/2025-07-18T18:38:37+00:00https://sodiumcyber.com/critical-nvidia-container-toolkit-flaw-allows-privilege-escalation-on-ai-cloud-services/2025-07-18T18:38:37+00:00https://sodiumcyber.com/google-sues-25-chinese-entities-over-badbox-2-0-botnet-affecting-10m-android-devices/2025-07-18T18:38:37+00:00https://sodiumcyber.com/from-backup-to-cyber-resilience-why-it-leaders-must-rethink-backup-in-the-age-of-ransomware/2025-07-18T18:38:37+00:00https://sodiumcyber.com/hackers-use-github-repositories-to-host-amadey-malware-and-data-stealers-bypassing-filters/2025-07-18T18:38:37+00:00https://sodiumcyber.com/chinas-massistant-tool-secretly-extracts-sms-gps-data-and-images-from-confiscated-phones/2025-07-19T19:20:14+00:00https://sodiumcyber.com/ung0002-group-hits-china-hong-kong-pakistan-using-lnk-files-and-rats-in-twin-campaigns/2025-07-19T19:20:14+00:00https://sodiumcyber.com/ivanti-zero-days-exploited-to-drop-mdifyloader-and-launch-in-memory-cobalt-strike-attacks/2025-07-19T19:20:14+00:00https://sodiumcyber.com/encrypthub-targets-web3-developers-using-fake-ai-platforms-to-deploy-fickle-stealer-malware/2025-07-20T19:21:41+00:00https://sodiumcyber.com/critical-unpatched-sharepoint-zero-day-actively-exploited-breaches-75-company-servers/2025-07-20T19:21:41+00:00https://sodiumcyber.com/malware-injected-into-5-npm-packages-after-maintainer-tokens-stolen-in-phishing-attack/2025-07-20T19:21:41+00:00https://sodiumcyber.com/hackers-exploit-critical-crushftp-flaw-to-gain-admin-access-on-unpatched-servers/2025-07-20T19:21:41+00:00https://sodiumcyber.com/iran-linked-dchspy-android-malware-masquerades-as-vpn-apps-to-spy-on-dissidents/2025-07-21T19:27:57+00:00https://sodiumcyber.com/china-linked-hackers-launch-targeted-espionage-campaign-on-african-it-infrastructure/2025-07-21T19:27:57+00:00https://sodiumcyber.com/sharepoint-toolshell-vulnerabilities-being-exploited-in-the-wild/2025-07-21T19:27:57+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-sharepoint-0-day-chrome-exploit-macos-spyware-nvidia-toolkit-rce-and-more/2025-07-21T19:27:57+00:00https://sodiumcyber.com/assessing-the-role-of-ai-in-zero-trust/2025-07-21T19:27:57+00:00https://sodiumcyber.com/microsoft-links-ongoing-sharepoint-exploits-to-three-chinese-hacker-groups/2025-07-22T19:37:13+00:00https://sodiumcyber.com/cisco-confirms-active-exploits-targeting-ise-flaws-enabling-unauthenticated-root-access/2025-07-22T19:37:13+00:00https://sodiumcyber.com/credential-theft-and-remote-access-surge-as-allakore-purerat-and-hijack-loader-proliferate/2025-07-22T19:37:13+00:00https://sodiumcyber.com/how-to-advance-from-soc-manager-to-ciso/2025-07-22T19:37:13+00:00https://sodiumcyber.com/hackers-exploit-sharepoint-zero-day-since-july-7-to-steal-keys-maintain-persistent-access/2025-07-22T19:37:13+00:00https://sodiumcyber.com/threat-actor-mimo-targets-magento-and-docker-to-deploy-crypto-miners-and-proxyware/2025-07-23T19:43:04+00:00https://sodiumcyber.com/new-coyote-malware-variant-exploits-windows-ui-automation-to-steal-banking-credentials/2025-07-23T19:43:04+00:00https://sodiumcyber.com/kerberoasting-detections-a-new-approach-to-a-decade-old-challenge/2025-07-23T19:43:04+00:00https://sodiumcyber.com/small-world-the-revitalization-of-small-ai-models-for-cybersecurity/2025-07-23T19:43:04+00:00https://sodiumcyber.com/google-launches-oss-rebuild-to-expose-malicious-code-in-widely-used-open-source-packages/2025-07-23T19:43:04+00:00https://sodiumcyber.com/critical-mitel-flaw-lets-hackers-bypass-login-gain-full-access-to-mivoice-mx-one-systems/2025-07-24T20:37:46+00:00https://sodiumcyber.com/fire-ant-exploits-vmware-flaws-to-compromise-esxi-hosts-and-vcenter-environments/2025-07-24T20:37:46+00:00https://sodiumcyber.com/castleloader-malware-infects-469-devices-using-fake-github-repos-and-clickfix-phishing/2025-07-24T20:37:46+00:00https://sodiumcyber.com/sophos-and-sonicwall-patch-critical-rce-flaws-affecting-firewalls-and-sma-100-devices/2025-07-24T20:37:46+00:00https://sodiumcyber.com/watch-this-webinar-to-uncover-hidden-flaws-in-login-ai-and-digital-trust-and-fix-them/2025-07-24T20:37:46+00:00https://sodiumcyber.com/u-s-sanctions-firm-behind-n-korean-it-scheme-arizona-woman-jailed-for-running-laptop-farm/2025-07-25T20:39:08+00:00https://sodiumcyber.com/patchwork-targets-turkish-defense-firms-with-spear-phishing-using-malicious-lnk-files/2025-07-25T20:39:08+00:00https://sodiumcyber.com/cyber-espionage-campaign-hits-russian-aerospace-sector-using-eaglet-backdoor/2025-07-25T20:39:08+00:00https://sodiumcyber.com/soco404-and-koske-malware-target-cloud-services-with-cross-platform-cryptomining-attacks/2025-07-25T20:39:08+00:00https://sodiumcyber.com/overcoming-risks-from-chinese-genai-tool-usage/2025-07-25T20:39:08+00:00https://sodiumcyber.com/hackers-breach-toptal-github-publish-10-malicious-npm-packages-with-5000-downloads/2025-07-28T20:47:45+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-sharepoint-breach-spyware-iot-hijacks-dprk-fraud-crypto-drains-and-more/2025-07-28T20:47:45+00:00https://sodiumcyber.com/email-security-is-stuck-in-the-antivirus-era-why-it-needs-a-modern-approach/2025-07-28T20:47:45+00:00https://sodiumcyber.com/sophos-secure-by-design-2025-progress/2025-07-28T20:47:45+00:00https://sodiumcyber.com/scattered-spider-hijacks-vmware-esxi-to-deploy-ransomware-on-critical-u-s-infrastructure/2025-07-28T20:47:45+00:00https://sodiumcyber.com/gold-blade-remote-dll-sideloading-attack-deploys-redloader/2025-07-29T20:54:11+00:00https://sodiumcyber.com/wiz-uncovers-critical-access-bypass-flaw-in-ai-powered-vibe-coding-platform-base44/2025-07-29T20:54:11+00:00https://sodiumcyber.com/pypi-warns-of-ongoing-phishing-campaign-using-fake-verification-emails-and-lookalike-domain/2025-07-29T20:54:11+00:00https://sodiumcyber.com/chaos-raas-emerges-after-blacksuit-takedown-demanding-300k-from-u-s-victims/2025-07-29T20:54:11+00:00https://sodiumcyber.com/how-the-browser-became-the-main-cyber-battleground/2025-07-29T20:54:11+00:00https://sodiumcyber.com/hackers-use-facebook-ads-to-spread-jsceal-malware-via-fake-cryptocurrency-trading-apps/2025-07-30T21:03:05+00:00https://sodiumcyber.com/funksec-ransomware-decryptor-released-free-to-public-after-group-goes-dormant/2025-07-30T21:03:05+00:00https://sodiumcyber.com/product-walkthrough-a-look-inside-pillars-ai-security-platform/2025-07-30T21:03:05+00:00https://sodiumcyber.com/apple-patches-safari-vulnerability-also-exploited-as-zero-day-in-google-chrome/2025-07-30T21:03:05+00:00https://sodiumcyber.com/critical-dahua-camera-flaws-enable-remote-hijack-via-onvif-and-file-upload-exploits/2025-07-30T21:03:05+00:00https://sodiumcyber.com/secret-blizzard-deploys-malware-in-isp-level-aitm-attacks-on-moscow-embassies/2025-07-31T21:04:06+00:00https://sodiumcyber.com/experts-detect-multi-layer-redirect-tactic-used-to-steal-microsoft-365-login-credentials/2025-07-31T21:04:06+00:00https://sodiumcyber.com/n-korean-hackers-used-job-lures-cloud-account-access-and-malware-to-steal-millions-in-crypto/2025-07-31T21:04:06+00:00https://sodiumcyber.com/ai-driven-trends-in-endpoint-security-what-the-2025-gartner-magic-quadrant-reveals/2025-07-31T21:04:07+00:00https://sodiumcyber.com/unc2891-breaches-atm-network-via-4g-raspberry-pi-tries-caketap-rootkit-for-fraud/2025-07-31T21:04:07+00:00https://sodiumcyber.com/cursor-ai-code-editor-fixed-flaw-allowing-attackers-to-run-commands-via-prompt-injection/2025-08-01T21:41:42+00:00https://sodiumcyber.com/attackers-use-fake-oauth-apps-with-tycoon-kit-to-breach-microsoft-365-accounts/2025-08-01T21:41:42+00:00https://sodiumcyber.com/ai-generated-malicious-npm-package-drains-solana-funds-from-1500-before-takedown/2025-08-01T21:41:42+00:00https://sodiumcyber.com/you-are-what-you-eat-why-your-ai-security-tools-are-only-as-strong-as-the-data-you-feed-them/2025-08-01T21:41:42+00:00https://sodiumcyber.com/storm-2603-deploys-dns-controlled-backdoor-in-warlock-and-lockbit-ransomware-attacks/2025-08-01T21:41:42+00:00https://sodiumcyber.com/cl-sta-0969-installs-covert-malware-in-telecom-networks-during-10-month-espionage-campaign/2025-08-02T21:43:47+00:00https://sodiumcyber.com/new-plague-pam-backdoor-exposes-critical-linux-systems-to-silent-credential-theft/2025-08-02T21:43:47+00:00https://sodiumcyber.com/akira-ransomware-exploits-sonicwall-vpns-in-likely-zero-day-attack-on-fully-patched-devices/2025-08-02T21:43:47+00:00https://sodiumcyber.com/nvidia-triton-bugs-let-unauthenticated-attackers-execute-code-and-hijack-ai-servers/2025-08-04T21:51:29+00:00https://sodiumcyber.com/vietnamese-hackers-use-pxa-stealer-hit-4000-ips-and-steal-200000-passwords-globally/2025-08-04T21:51:29+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-vpn-0-day-encryption-backdoor-ai-malware-macos-flaw-atm-hack-more/2025-08-04T21:51:29+00:00https://sodiumcyber.com/man-in-the-middle-attack-prevention-guide/2025-08-04T21:51:29+00:00https://sodiumcyber.com/clickfix-malware-campaign-exploits-captchas-to-spread-cross-platform-infections/2025-08-05T22:18:46+00:00https://sodiumcyber.com/googles-august-patch-fixes-two-qualcomm-vulnerabilities-exploited-in-the-wild/2025-08-05T22:18:46+00:00https://sodiumcyber.com/cursor-ai-code-editor-vulnerability-enables-rce-via-malicious-mcp-file-swaps-post-approval/2025-08-05T22:18:46+00:00https://sodiumcyber.com/misconfigurations-are-not-vulnerabilities-the-costly-confusion-behind-security-risks/2025-08-05T22:18:46+00:00https://sodiumcyber.com/how-top-cisos-save-their-socs-from-alert-chaos-to-never-miss-real-incidents/2025-08-05T22:18:46+00:00https://sodiumcyber.com/researchers-uncover-ecscape-flaw-in-amazon-ecs-enabling-cross-task-credential-theft/2025-08-06T22:20:02+00:00https://sodiumcyber.com/fake-vpn-and-spam-blocker-apps-tied-to-vextrio-used-in-ad-fraud-subscription-scams/2025-08-06T22:20:02+00:00https://sodiumcyber.com/shared-secret-edr-killer-in-the-kill-chain/2025-08-06T22:20:02+00:00https://sodiumcyber.com/ai-slashes-workloads-for-vcisos-by-68-as-smbs-demand-more-new-report-reveals/2025-08-06T22:20:02+00:00https://sodiumcyber.com/microsoft-launches-project-ire-to-autonomously-classify-malware-using-ai-tools/2025-08-06T22:20:02+00:00https://sodiumcyber.com/sophos-ai-at-black-hat-usa-25-anomaly-detection-betrayed-us-so-we-gave-it-a-new-job/2025-08-07T22:20:16+00:00https://sodiumcyber.com/socgholish-malware-spread-via-ad-tools-delivers-access-to-lockbit-evil-corp-and-others/2025-08-07T22:20:16+00:00https://sodiumcyber.com/webinar-how-to-stop-python-supply-chain-attacks-and-the-expert-tools-you-need/2025-08-07T22:20:16+00:00https://sodiumcyber.com/malicious-go-npm-packages-deliver-cross-platform-malware-trigger-remote-data-wipes/2025-08-07T22:20:16+00:00https://sodiumcyber.com/the-ai-powered-security-shift-what-2025-is-teaching-us-about-cloud-defense/2025-08-07T22:20:16+00:00https://sodiumcyber.com/ai-tools-fuel-brazilian-phishing-scam-while-efimer-trojan-steals-crypto-from-5000-victims/2025-08-08T22:49:56+00:00https://sodiumcyber.com/leaked-credentials-up-160-what-attackers-are-doing-with-them/2025-08-08T22:49:56+00:00https://sodiumcyber.com/rubygems-pypi-hit-by-malicious-packages-stealing-credentials-crypto-forcing-security-changes/2025-08-08T22:49:56+00:00https://sodiumcyber.com/scammers-mass-mailing-the-efimer-trojan-to-steal-crypto/2025-08-08T22:49:56+00:00https://sodiumcyber.com/greedybear-steals-1m-in-crypto-using-150-malicious-firefox-wallet-extensions/2025-08-08T22:49:56+00:00https://sodiumcyber.com/linux-based-lenovo-webcams-flaw-can-be-remotely-exploited-for-badusb-attacks/2025-08-09T22:52:58+00:00https://sodiumcyber.com/researchers-uncover-gpt-5-jailbreak-and-zero-click-ai-agent-attacks-exposing-cloud-and-iot-systems/2025-08-09T22:52:58+00:00https://sodiumcyber.com/cyberark-and-hashicorp-flaws-enable-remote-vault-takeover-without-credentials/2025-08-09T22:52:58+00:00https://sodiumcyber.com/new-win-ddos-flaws-let-attackers-turn-public-domain-controllers-into-ddos-botnet-via-rpc-ldap/2025-08-10T23:11:47+00:00https://sodiumcyber.com/researchers-detail-windows-epm-poisoning-exploit-chain-leading-to-domain-privilege-escalation/2025-08-10T23:11:47+00:00https://sodiumcyber.com/researchers-reveal-revault-attack-targeting-dell-controlvault3-firmware-in-100-laptop-models/2025-08-10T23:11:47+00:00https://sodiumcyber.com/new-tetra-radio-encryption-flaws-expose-law-enforcement-communications/2025-08-12T00:40:11+00:00https://sodiumcyber.com/researchers-spot-surge-in-erlang-otp-ssh-rce-exploits-70-target-ot-firewalls/2025-08-12T00:40:11+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-badcam-attack-winrar-0-day-edr-killer-nvidia-flaws-ransomware-attacks-more/2025-08-12T00:40:11+00:00https://sodiumcyber.com/6-lessons-learned-focusing-security-where-business-value-lives/2025-08-12T00:40:11+00:00https://sodiumcyber.com/winrar-zero-day-under-active-exploitation-update-to-latest-version-immediately/2025-08-12T00:40:11+00:00https://sodiumcyber.com/researchers-spot-xz-utils-backdoor-in-dozens-of-docker-hub-images-fueling-supply-chain-risks/2025-08-13T01:05:15+00:00https://sodiumcyber.com/fortinet-ssl-vpns-hit-by-global-brute-force-wave-before-attackers-shift-to-fortimanager/2025-08-13T01:05:15+00:00https://sodiumcyber.com/cybercrime-groups-shinyhunters-scattered-spider-join-forces-in-extortion-attacks-on-businesses/2025-08-13T01:05:15+00:00https://sodiumcyber.com/new-curly-comrades-apt-using-ngen-com-hijacking-in-georgia-moldova-attacks/2025-08-13T01:05:16+00:00https://sodiumcyber.com/the-ultimate-battle-enterprise-browsers-vs-secure-browser-extensions/2025-08-13T01:05:16+00:00https://sodiumcyber.com/august-patch-tuesday-includes-blasts-from-the-recent-past/2025-08-14T01:13:07+00:00https://sodiumcyber.com/new-ps1bot-malware-campaign-uses-malvertising-to-deploy-multi-stage-in-memory-attacks/2025-08-14T01:13:07+00:00https://sodiumcyber.com/zoom-and-xerox-release-critical-security-updates-fixing-privilege-escalation-and-rce-flaws/2025-08-14T01:13:07+00:00https://sodiumcyber.com/fortinet-warns-about-fortisiem-vulnerability-cve-2025-25256-with-in-the-wild-exploit-code/2025-08-14T01:13:07+00:00https://sodiumcyber.com/ai-soc-101-key-capabilities-security-leaders-need-to-know/2025-08-14T01:13:07+00:00https://sodiumcyber.com/new-http-2-madeyoureset-vulnerability-enables-large-scale-dos-attacks/2025-08-15T01:13:21+00:00https://sodiumcyber.com/hackers-found-using-crossc2-to-expand-cobalt-strike-beacons-reach-to-linux-and-macos/2025-08-15T01:13:21+00:00https://sodiumcyber.com/have-you-turned-off-your-virtual-oven/2025-08-15T01:13:21+00:00https://sodiumcyber.com/new-android-malware-wave-hits-banking-via-nfc-relay-fraud-call-hijacking-and-root-exploits/2025-08-15T01:13:21+00:00https://sodiumcyber.com/simple-steps-for-attack-surface-reduction/2025-08-15T01:13:21+00:00https://sodiumcyber.com/taiwan-web-servers-breached-by-uat-7237-using-customized-open-source-hacking-tools/2025-08-16T01:19:34+00:00https://sodiumcyber.com/u-s-sanctions-garantex-and-grinex-over-100m-in-ransomware-linked-illicit-crypto-transactions/2025-08-16T01:19:34+00:00https://sodiumcyber.com/zero-trust-ai-privacy-in-the-age-of-agentic-ai/2025-08-16T01:19:34+00:00https://sodiumcyber.com/cisco-warns-of-cvss-10-0-fmc-radius-flaw-allowing-remote-code-execution/2025-08-16T01:19:34+00:00https://sodiumcyber.com/ermac-v3-0-banking-trojan-source-code-leak-exposes-full-malware-infrastructure/2025-08-17T01:24:21+00:00https://sodiumcyber.com/russian-group-encrypthub-exploits-msc-eviltwin-vulnerability-to-deploy-fickle-stealer-malware/2025-08-17T01:24:21+00:00https://sodiumcyber.com/noodlophile-malware-campaign-expands-global-reach-with-copyright-phishing-lures/2025-08-19T01:38:07+00:00https://sodiumcyber.com/microsoft-windows-vulnerability-exploited-to-deploy-pipemagic-ransomexx-malware/2025-08-19T01:38:07+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-nfc-fraud-curly-comrades-n-able-exploits-docker-backdoors-more/2025-08-19T01:38:07+00:00https://sodiumcyber.com/malicious-pypi-and-npm-packages-discovered-exploiting-dependencies-in-supply-chain-attacks/2025-08-19T01:38:07+00:00https://sodiumcyber.com/wazuh-for-regulatory-compliance/2025-08-19T01:38:07+00:00https://sodiumcyber.com/apache-activemq-flaw-exploited-to-deploy-dripdropper-malware-on-cloud-linux-systems/2025-08-20T01:44:02+00:00https://sodiumcyber.com/new-godrat-trojan-targets-trading-firms-using-steganography-and-gh0st-rat-code/2025-08-20T01:44:02+00:00https://sodiumcyber.com/public-exploit-for-chained-sap-flaws-exposes-unpatched-systems-to-remote-code-execution/2025-08-20T01:44:02+00:00https://sodiumcyber.com/u-k-government-drops-apple-encryption-backdoor-order-after-u-s-civil-liberties-pushback/2025-08-20T01:44:02+00:00https://sodiumcyber.com/why-your-security-culture-is-critical-to-mitigating-cyber-risk/2025-08-20T01:44:02+00:00https://sodiumcyber.com/dom-based-extension-clickjacking-exposes-popular-password-managers-to-credential-and-data-theft/2025-08-21T01:47:34+00:00https://sodiumcyber.com/%f0%9f%95%b5%ef%b8%8f-webinar-discover-and-control-shadow-ai-agents-in-your-enterprise-before-hackers-do/2025-08-21T01:47:34+00:00https://sodiumcyber.com/threat-intelligence-executive-report-volume-2025-number-4/2025-08-21T01:47:34+00:00https://sodiumcyber.com/fbi-warns-fsb-linked-hackers-exploiting-unpatched-cisco-devices-for-cyber-espionage/2025-08-21T01:47:34+00:00https://sodiumcyber.com/experts-find-ai-browsers-can-be-tricked-by-promptfix-exploit-to-run-malicious-hidden-prompts/2025-08-21T01:47:35+00:00https://sodiumcyber.com/pre-auth-exploit-chains-found-in-commvault-could-enable-remote-code-execution-attacks/2025-08-22T02:10:01+00:00https://sodiumcyber.com/cybercriminals-deploy-cornflake-v3-backdoor-via-clickfix-tactic-and-fake-captcha-pages/2025-08-22T02:10:01+00:00https://sodiumcyber.com/weak-passwords-and-compromised-accounts-key-findings-from-the-blue-report-2025/2025-08-22T02:10:01+00:00https://sodiumcyber.com/hackers-using-new-quirkyloader-malware-to-spread-agent-tesla-asyncrat-and-snake-keylogger/2025-08-22T02:10:01+00:00https://sodiumcyber.com/scattered-spider-hacker-gets-10-years-13m-restitution-for-sim-swapping-crypto-theft/2025-08-22T02:10:01+00:00https://sodiumcyber.com/linux-malware-delivered-via-malicious-rar-filenames-evades-antivirus-detection/2025-08-23T02:23:07+00:00https://sodiumcyber.com/automation-is-redefining-pentest-delivery/2025-08-23T02:23:07+00:00https://sodiumcyber.com/chinese-hackers-murky-genesis-and-glacial-panda-escalate-cloud-and-telecom-espionage/2025-08-23T02:23:07+00:00https://sodiumcyber.com/interpol-arrests-1209-cybercriminals-across-18-african-nations-in-global-crackdown/2025-08-23T02:23:07+00:00https://sodiumcyber.com/modern-vehicle-cybersecurity-trends/2025-08-23T02:23:07+00:00https://sodiumcyber.com/geoserver-exploits-polaredge-and-gayfemboy-push-cybercrime-beyond-traditional-botnets/2025-08-24T02:28:14+00:00https://sodiumcyber.com/malicious-go-module-poses-as-ssh-brute-force-tool-steals-credentials-via-telegram-bot/2025-08-25T02:53:45+00:00https://sodiumcyber.com/unc6384-deploys-plugx-via-captive-portal-hijacks-and-valid-certificates-targeting-diplomats/2025-08-26T02:53:49+00:00https://sodiumcyber.com/docker-fixes-cve-2025-9074-critical-container-escape-vulnerability-with-cvss-score-9-3/2025-08-26T02:53:49+00:00https://sodiumcyber.com/phishing-campaign-uses-upcrypter-in-fake-voicemail-emails-to-deliver-rat-payloads/2025-08-26T02:53:49+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-password-manager-flaws-apple-0-day-hidden-ai-prompts-in-the-wild-exploits-more/2025-08-26T02:53:49+00:00https://sodiumcyber.com/why-siem-rules-fail-and-how-to-fix-them-insights-from-160-million-attack-simulations/2025-08-26T02:53:49+00:00https://sodiumcyber.com/velociraptor-incident-response-tool-abused-for-remote-access/2025-08-27T02:54:35+00:00https://sodiumcyber.com/citrix-patches-three-netscaler-flaws-confirms-active-exploitation-of-cve-2025-7775/2025-08-27T02:54:35+00:00https://sodiumcyber.com/new-sni5gect-attack-crashes-phones-and-downgrades-5g-to-4g-without-rogue-base-station/2025-08-27T02:54:35+00:00https://sodiumcyber.com/mixshell-malware-delivered-via-contact-forms-targets-u-s-supply-chain-manufacturers/2025-08-27T02:54:35+00:00https://sodiumcyber.com/storm-0501-exploits-entra-id-to-exfiltrate-and-delete-azure-data-in-hybrid-cloud-attacks/2025-08-28T03:30:59+00:00https://sodiumcyber.com/someone-created-first-ai-powered-ransomware-using-openais-gpt-oss20b-model/2025-08-28T03:30:59+00:00https://sodiumcyber.com/anthropic-disrupts-ai-powered-cyberattacks-automating-theft-and-extortion-across-critical-sectors/2025-08-28T03:30:59+00:00https://sodiumcyber.com/shadowsilk-hits-35-organizations-in-central-asia-and-apac-using-telegram-bots/2025-08-28T03:30:59+00:00https://sodiumcyber.com/the-5-golden-rules-of-safe-ai-adoption/2025-08-28T03:30:59+00:00https://sodiumcyber.com/researchers-find-vs-code-flaw-allowing-attackers-to-republish-deleted-extensions-under-same-names/2025-08-29T03:31:47+00:00https://sodiumcyber.com/salt-typhoon-exploits-cisco-ivanti-palo-alto-flaws-to-breach-600-organizations-worldwide/2025-08-29T03:31:47+00:00https://sodiumcyber.com/webinar-why-top-teams-are-prioritizing-code-to-cloud-mapping-in-our-2025-appsec/2025-08-29T03:31:47+00:00https://sodiumcyber.com/hidden-vulnerabilities-of-project-management-tools-how-fluentpro-backup-secures-them/2025-08-29T03:31:47+00:00https://sodiumcyber.com/malicious-nx-packages-in-s1ngularity-attack-leaked-2349-github-cloud-and-ai-credentials/2025-08-29T03:31:47+00:00https://sodiumcyber.com/researchers-warn-of-sitecore-exploit-chain-linking-cache-poisoning-and-remote-code-execution/2025-08-30T03:36:18+00:00https://sodiumcyber.com/amazon-disrupts-apt29-watering-hole-campaign-abusing-microsoft-device-code-authentication/2025-08-30T03:36:18+00:00https://sodiumcyber.com/abandoned-sogou-zhuyin-update-server-hijacked-weaponized-in-taiwan-espionage-campaign/2025-08-30T03:36:18+00:00https://sodiumcyber.com/can-your-security-stack-see-chatgpt-why-network-visibility-matters/2025-08-30T03:36:18+00:00https://sodiumcyber.com/attackers-abuse-velociraptor-forensic-tool-to-deploy-visual-studio-code-for-c2-tunneling/2025-08-31T03:59:13+00:00https://sodiumcyber.com/whatsapp-issues-emergency-update-for-zero-click-exploit-targeting-ios-and-macos-devices/2025-08-31T03:59:13+00:00https://sodiumcyber.com/android-droppers-now-deliver-sms-stealers-and-spyware-not-just-banking-trojans/2025-09-02T04:23:46+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-whatsapp-0-day-docker-bug-salesforce-breach-fake-captchas-spyware-app-more/2025-09-02T04:23:46+00:00https://sodiumcyber.com/when-browsers-become-the-attack-surface-rethinking-security-for-scattered-spider/2025-09-02T04:23:46+00:00https://sodiumcyber.com/scarcruft-uses-rokrat-malware-in-operation-hankook-phantom-targeting-south-korean-academics/2025-09-02T04:23:46+00:00https://sodiumcyber.com/salesloft-takes-drift-offline-after-oauth-token-theft-hits-hundreds-of-organizations/2025-09-03T04:26:24+00:00https://sodiumcyber.com/lazarus-group-expands-malware-arsenal-with-pondrat-themeforestrat-and-remotepe/2025-09-03T04:26:24+00:00https://sodiumcyber.com/researchers-warn-of-mystrodx-backdoor-using-dns-and-icmp-triggers-for-stealthy-control/2025-09-03T04:26:24+00:00https://sodiumcyber.com/shadow-ai-discovery-a-critical-part-of-enterprise-ai-governance/2025-09-03T04:26:24+00:00https://sodiumcyber.com/ukrainian-network-fdn3-launches-massive-brute-force-attacks-on-ssl-vpn-and-rdp-devices/2025-09-03T04:26:24+00:00https://sodiumcyber.com/malicious-npm-packages-exploit-ethereum-smart-contracts-to-target-crypto-developers/2025-09-04T04:26:57+00:00https://sodiumcyber.com/threat-actors-weaponize-hexstrike-ai-to-exploit-citrix-flaws-within-a-week-of-disclosure/2025-09-04T04:26:57+00:00https://sodiumcyber.com/detecting-data-leaks-before-disaster/2025-09-04T04:26:57+00:00https://sodiumcyber.com/android-security-alert-google-patches-120-flaws-including-two-zero-days-under-attack/2025-09-04T04:26:57+00:00https://sodiumcyber.com/iranian-hackers-exploit-100-embassy-email-accounts-in-global-phishing-targeting-diplomats/2025-09-04T04:26:57+00:00https://sodiumcyber.com/russian-apt28-deploys-notdoor-outlook-backdoor-against-companies-in-nato-countries/2025-09-05T04:55:48+00:00https://sodiumcyber.com/ghostredirector-hacks-65-windows-servers-using-rungan-backdoor-and-gamshen-iis-module/2025-09-05T04:55:48+00:00https://sodiumcyber.com/cybercriminals-exploit-xs-grok-ai-to-bypass-ad-protections-and-spread-malware-to-millions/2025-09-05T04:55:48+00:00https://sodiumcyber.com/google-fined-379-million-by-french-regulator-for-cookie-consent-violations/2025-09-05T04:55:48+00:00https://sodiumcyber.com/cisa-orders-immediate-patch-of-critical-sitecore-vulnerability-under-active-exploitation/2025-09-06T05:25:56+00:00https://sodiumcyber.com/tag-150-develops-castlerat-in-python-and-c-expanding-castleloader-malware-operations/2025-09-06T05:25:56+00:00https://sodiumcyber.com/sap-s-4hana-critical-vulnerability-cve-2025-42957-exploited-in-the-wild/2025-09-06T05:25:56+00:00https://sodiumcyber.com/it-threat-evolution-in-q2-2025-mobile-statistics/2025-09-06T05:25:56+00:00https://sodiumcyber.com/it-threat-evolution-in-q2-2025-non-mobile-statistics/2025-09-06T05:25:56+00:00https://sodiumcyber.com/noisy-bear-targets-kazakhstan-energy-sector-with-barrelfire-phishing-campaign/2025-09-07T05:31:24+00:00https://sodiumcyber.com/malicious-npm-packages-impersonate-flashbots-steal-ethereum-wallet-keys/2025-09-07T05:31:25+00:00https://sodiumcyber.com/45-previously-unreported-domains-expose-longstanding-salt-typhoon-cyber-espionage/2025-09-09T06:00:44+00:00https://sodiumcyber.com/github-account-compromise-led-to-salesloft-drift-breach-affecting-22-companies/2025-09-09T06:00:44+00:00https://sodiumcyber.com/gpugate-malware-uses-google-ads-and-fake-github-commits-to-target-it-firms/2025-09-09T06:00:44+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-drift-breach-chaos-zero-days-active-patch-warnings-smarter-threats-more/2025-09-09T06:00:44+00:00https://sodiumcyber.com/you-didnt-get-phished-you-onboarded-the-attacker/2025-09-09T06:00:44+00:00https://sodiumcyber.com/adobe-commerce-flaw-cve-2025-54236-lets-hackers-take-over-customer-accounts/2025-09-10T06:03:07+00:00https://sodiumcyber.com/sap-patches-critical-netweaver-cvss-up-to-10-0-and-previously-exploited-s-4hana-flaws/2025-09-10T06:03:07+00:00https://sodiumcyber.com/axios-abuse-and-salty-2fa-kits-fuel-advanced-microsoft-365-phishing-attacks/2025-09-10T06:03:07+00:00https://sodiumcyber.com/raton-android-malware-detected-with-nfc-relay-and-ats-banking-fraud-capabilities/2025-09-10T06:03:07+00:00https://sodiumcyber.com/webinar-shadow-ai-agents-multiply-fast-learn-how-to-detect-and-control-them/2025-09-10T06:03:07+00:00https://sodiumcyber.com/september-patch-tuesday-handles-81-cves/2025-09-11T06:03:44+00:00https://sodiumcyber.com/chinese-apt-deploys-eggstreme-fileless-malware-to-breach-philippine-military-systems/2025-09-11T06:03:44+00:00https://sodiumcyber.com/notes-of-cyber-inspector-three-clusters-of-threat-in-cyberspace/2025-09-11T06:03:44+00:00https://sodiumcyber.com/chillyhell-macos-backdoor-and-zynorrat-rat-threaten-macos-windows-and-linux-systems/2025-09-11T06:03:44+00:00https://sodiumcyber.com/microsoft-fixes-80-flaws-including-smb-privesc-and-azure-cvss-10-0-bugs/2025-09-11T06:03:44+00:00https://sodiumcyber.com/cursor-ai-code-editor-flaw-enables-silent-code-execution-via-malicious-repositories/2025-09-12T06:08:55+00:00https://sodiumcyber.com/google-pixel-10-adds-c2pa-support-to-verify-ai-generated-media-authenticity/2025-09-12T06:08:56+00:00https://sodiumcyber.com/senator-wyden-urges-ftc-to-probe-microsoft-for-ransomware-linked-cybersecurity-negligence/2025-09-12T06:08:56+00:00https://sodiumcyber.com/cracking-the-boardroom-code-helping-cisos-speak-the-language-of-business/2025-09-12T06:08:56+00:00https://sodiumcyber.com/sonicwall-ssl-vpn-flaw-and-misconfigurations-actively-exploited-by-akira-ransomware-hackers/2025-09-12T06:08:56+00:00https://sodiumcyber.com/samsung-fixes-critical-zero-day-cve-2025-21043-exploited-in-android-attacks/2025-09-13T06:16:46+00:00https://sodiumcyber.com/apple-warns-french-users-of-fourth-spyware-campaign-in-2025-cert-fr-confirms/2025-09-13T06:16:46+00:00https://sodiumcyber.com/new-hybridpetya-ransomware-bypasses-uefi-secure-boot-with-cve-2024-7344-exploit/2025-09-13T06:16:46+00:00https://sodiumcyber.com/critical-cve-2025-5086-in-delmia-apriso-actively-exploited-cisa-issues-warning/2025-09-13T06:16:46+00:00https://sodiumcyber.com/cloud-native-security-in-2025-why-runtime-visibility-must-take-center-stage/2025-09-13T06:16:46+00:00https://sodiumcyber.com/fbi-warns-of-unc6040-and-unc6395-targeting-salesforce-platforms-in-data-theft-attacks/2025-09-14T07:05:25+00:00https://sodiumcyber.com/hiddengh0st-winos-and-kkrat-exploit-seo-github-pages-in-chinese-malware-attacks/2025-09-15T07:11:42+00:00https://sodiumcyber.com/40-npm-packages-compromised-in-supply-chain-attack-using-bundle-js-to-steal-credentials/2025-09-16T07:23:50+00:00https://sodiumcyber.com/mustang-panda-deploys-snakedisk-usb-worm-to-deliver-yokai-backdoor-on-thailand-ips/2025-09-16T07:23:50+00:00https://sodiumcyber.com/6-browser-based-attacks-security-teams-need-to-prepare-for-right-now/2025-09-16T07:23:50+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-bootkit-malware-ai-powered-attacks-supply-chain-breaches-zero-days-more/2025-09-16T07:23:50+00:00https://sodiumcyber.com/shiny-tools-shallow-checks-how-the-ai-hype-opens-the-door-to-malicious-mcp-servers/2025-09-16T07:23:50+00:00https://sodiumcyber.com/doj-resentences-breachforums-founder-to-3-years-for-cybercrime-and-possession-of-csam/2025-09-17T07:29:37+00:00https://sodiumcyber.com/raccoono365-phishing-network-dismantled-as-microsoft-cloudflare-take-down-338-domains/2025-09-17T07:29:37+00:00https://sodiumcyber.com/chaos-mesh-critical-graphql-flaws-enable-rce-and-full-kubernetes-cluster-takeover/2025-09-17T07:29:37+00:00https://sodiumcyber.com/slopads-fraud-ring-exploits-224-android-apps-to-drive-2-3-billion-daily-ad-bids/2025-09-17T07:29:37+00:00https://sodiumcyber.com/new-filefix-variant-delivers-stealc-malware-through-multilingual-phishing-site/2025-09-17T07:29:37+00:00https://sodiumcyber.com/google-patches-chrome-zero-day-cve-2025-10585-as-active-v8-exploit-threatens-millions/2025-09-18T07:30:25+00:00https://sodiumcyber.com/ta558-uses-ai-generated-scripts-to-deploy-venom-rat-in-brazil-hotel-attacks/2025-09-18T07:30:25+00:00https://sodiumcyber.com/gold-salems-warlock-operation-joins-busy-ransomware-landscape/2025-09-18T07:30:25+00:00https://sodiumcyber.com/from-quantum-hacks-to-ai-defenses-expert-guide-to-building-unbreakable-cyber-resilience/2025-09-18T07:30:25+00:00https://sodiumcyber.com/chinese-ta415-uses-vs-code-remote-tunnels-to-spy-on-u-s-economic-policy-experts/2025-09-18T07:30:25+00:00https://sodiumcyber.com/u-k-arrests-two-teen-scattered-spider-hackers-linked-to-august-2024-tfl-cyber-attack/2025-09-19T07:54:03+00:00https://sodiumcyber.com/cisa-warns-of-two-malware-strains-exploiting-ivanti-epmm-cve-2025-4427-and-cve-2025-4428/2025-09-19T07:54:03+00:00https://sodiumcyber.com/sonicwall-urges-password-resets-after-cloud-backup-breach-affecting-under-5-of-customers/2025-09-19T07:54:03+00:00https://sodiumcyber.com/countloader-broadens-russian-ransomware-operations-with-multi-version-malware-loader/2025-09-19T07:54:03+00:00https://sodiumcyber.com/silentsync-rat-delivered-via-two-malicious-pypi-packages-targeting-python-developers/2025-09-19T07:54:03+00:00https://sodiumcyber.com/lastpass-warns-of-fake-repositories-infecting-macos-with-atomic-infostealer/2025-09-20T07:59:14+00:00https://sodiumcyber.com/researchers-uncover-gpt-4-powered-malterminal-malware-creating-ransomware-reverse-shell/2025-09-20T07:59:15+00:00https://sodiumcyber.com/shadowleak-zero-click-flaw-leaks-gmail-data-via-openai-chatgpt-deep-research-agent/2025-09-20T07:59:15+00:00https://sodiumcyber.com/unc1549-hacks-34-devices-in-11-telecom-firms-via-linkedin-job-lures-and-minibike-malware/2025-09-20T07:59:15+00:00https://sodiumcyber.com/systembc-powers-rem-proxy-with-1500-daily-vps-victims-across-80-c2-servers/2025-09-20T07:59:15+00:00https://sodiumcyber.com/microsoft-patches-critical-entra-id-flaw-enabling-global-admin-impersonation-across-tenants/2025-09-22T08:03:32+00:00https://sodiumcyber.com/dprk-hackers-use-clickfix-to-deliver-beavertail-malware-in-crypto-job-scams/2025-09-22T08:03:32+00:00https://sodiumcyber.com/comicform-and-sectorj149-hackers-deploy-formbook-malware-in-eurasian-cyberattacks/2025-09-23T08:09:08+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-chrome-0-day-ai-hacking-tools-ddr5-bit-flips-npm-worm-more/2025-09-23T08:09:08+00:00https://sodiumcyber.com/how-to-gain-control-of-ai-agents-and-non-human-identities/2025-09-23T08:09:09+00:00https://sodiumcyber.com/what-happens-when-a-cybersecurity-company-gets-phished/2025-09-23T08:09:09+00:00https://sodiumcyber.com/hackers-exploit-pandoc-cve-2025-51591-to-target-aws-imds-and-steal-ec2-iam-credentials/2025-09-24T08:11:10+00:00https://sodiumcyber.com/state-sponsored-hackers-exploiting-libraesva-email-security-gateway-vulnerability/2025-09-24T08:11:10+00:00https://sodiumcyber.com/two-new-supermicro-bmc-bugs-allow-malicious-firmware-to-evade-root-of-trust-security/2025-09-24T08:11:10+00:00https://sodiumcyber.com/eurojust-arrests-5-in-e100m-cryptocurrency-investment-fraud-spanning-23-countries/2025-09-24T08:11:10+00:00https://sodiumcyber.com/u-s-secret-service-seizes-300-sim-servers-100k-cards-threatening-u-s-officials-near-un/2025-09-24T08:11:10+00:00https://sodiumcyber.com/cisco-warns-of-actively-exploited-snmp-vulnerability-allowing-rce-or-dos-in-ios-software/2025-09-25T08:11:19+00:00https://sodiumcyber.com/chinese-hackers-rednovember-target-global-governments-using-pantegana-and-cobalt-strike/2025-09-25T08:11:19+00:00https://sodiumcyber.com/unc5221-uses-brickstorm-backdoor-to-infiltrate-u-s-legal-and-technology-sectors/2025-09-25T08:11:19+00:00https://sodiumcyber.com/two-critical-flaws-uncovered-in-wondershare-repairit-exposing-user-data-and-ai-models/2025-09-25T08:11:19+00:00https://sodiumcyber.com/how-one-bad-password-ended-a-158-year-old-business/2025-09-25T08:11:19+00:00https://sodiumcyber.com/cisco-asa-firewall-zero-day-exploits-deploy-rayinitiator-and-line-viper-malware/2025-09-26T08:12:05+00:00https://sodiumcyber.com/urgent-cisco-asa-zero-day-duo-under-attack-cisa-triggers-emergency-mitigation-directive/2025-09-26T08:12:05+00:00https://sodiumcyber.com/threatsday-bulletin-rootkit-patch-federal-breach-oneplus-sms-leak-tiktok-scandal-more/2025-09-26T08:12:05+00:00https://sodiumcyber.com/vane-viper-generates-1-trillion-dns-queries-to-power-global-malware-and-ad-fraud-network/2025-09-26T08:12:05+00:00https://sodiumcyber.com/salesforce-patches-critical-forcedleak-bug-exposing-crm-data-via-ai-prompt-injection/2025-09-26T08:12:05+00:00https://sodiumcyber.com/researchers-expose-svg-and-purerat-phishing-threats-targeting-ukraine-and-vietnam/2025-09-27T08:13:11+00:00https://sodiumcyber.com/new-coldriver-malware-campaign-joins-bo-team-and-bearlyfy-in-russia-focused-cyberattacks/2025-09-27T08:13:11+00:00https://sodiumcyber.com/crash-tests-for-security-why-bas-is-proof-of-defense-not-assumptions/2025-09-27T08:13:11+00:00https://sodiumcyber.com/heartcrypts-wholesale-impersonation-effort/2025-09-27T08:13:11+00:00https://sodiumcyber.com/fortra-goanywhere-cvss-10-flaw-exploited-as-0-day-a-week-before-public-disclosure/2025-09-27T08:13:11+00:00https://sodiumcyber.com/china-linked-plugx-and-bookworm-malware-attacks-target-asian-telecom-and-asean-networks/2025-09-28T08:26:06+00:00https://sodiumcyber.com/cisa-sounds-alarm-on-critical-sudo-flaw-actively-exploited-in-linux-and-unix-systems/2025-09-30T08:36:34+00:00https://sodiumcyber.com/evilai-malware-masquerades-as-ai-tools-to-infiltrate-global-organizations/2025-09-30T08:36:35+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-cisco-0-day-record-ddos-lockbit-5-0-bmc-bugs-shadowv2-botnet-more/2025-09-30T08:36:35+00:00https://sodiumcyber.com/the-state-of-ai-in-the-soc-2025-insights-from-recent-study/2025-09-30T08:36:35+00:00https://sodiumcyber.com/microsoft-flags-ai-driven-phishing-llm-crafted-svg-files-outsmart-email-security/2025-09-30T08:36:35+00:00https://sodiumcyber.com/ukraine-warns-of-cabinetrat-backdoor-xll-add-ins-spread-via-signal-zips/2025-10-01T09:01:30+00:00https://sodiumcyber.com/50-battering-ram-attack-breaks-intel-and-amd-cloud-security-protections/2025-10-01T09:01:30+00:00https://sodiumcyber.com/phantom-taurus-new-china-linked-hacker-group-hits-governments-with-stealth-malware/2025-10-01T09:01:30+00:00https://sodiumcyber.com/researchers-disclose-google-gemini-ai-flaws-allowing-prompt-injection-and-cloud-exploits/2025-10-01T09:01:30+00:00https://sodiumcyber.com/microsoft-expands-sentinel-into-agentic-security-platform-with-unified-data-lake/2025-10-01T09:01:30+00:00https://sodiumcyber.com/new-wiretap-attack-extracts-intel-sgx-ecdsa-key-via-ddr4-memory-bus-interposer/2025-10-02T09:02:13+00:00https://sodiumcyber.com/onelogin-bug-let-attackers-use-api-keys-to-steal-oidc-secrets-and-impersonate-apps/2025-10-02T09:02:13+00:00https://sodiumcyber.com/learn-how-leading-security-teams-blend-ai-human-workflows-free-webinar/2025-10-02T09:02:13+00:00https://sodiumcyber.com/red-hat-openshift-ai-flaw-exposes-hybrid-cloud-infrastructure-to-full-takeover/2025-10-02T09:02:13+00:00https://sodiumcyber.com/2025-cybersecurity-reality-check-breaches-hidden-attack-surfaces-growing-and-ai-misperceptions-rising/2025-10-02T09:02:13+00:00https://sodiumcyber.com/confucius-hackers-hit-pakistan-with-new-wooperstealer-and-anondoor-malware/2025-10-03T09:02:33+00:00https://sodiumcyber.com/alert-malicious-pypi-package-soopsocks-infects-2653-systems-before-takedown/2025-10-03T09:02:33+00:00https://sodiumcyber.com/automating-pentest-delivery-7-key-workflows-for-maximum-impact/2025-10-03T09:02:33+00:00https://sodiumcyber.com/threatsday-bulletin-carplay-exploit-byovd-tactics-sql-c2-attacks-icloud-backdoor-demand-more/2025-10-03T09:02:33+00:00https://sodiumcyber.com/google-mandiant-probes-new-oracle-extortion-wave-possibly-linked-to-cl0p-ransomware/2025-10-03T09:02:33+00:00https://sodiumcyber.com/detour-dog-caught-running-dns-powered-malware-factory-for-strela-stealer/2025-10-04T09:03:57+00:00https://sodiumcyber.com/rhadamanthys-stealer-evolves-adds-device-fingerprinting-png-steganography-payloads/2025-10-04T09:03:57+00:00https://sodiumcyber.com/researchers-warn-of-self-spreading-whatsapp-malware-named-sorvepotel/2025-10-04T09:03:57+00:00https://sodiumcyber.com/product-walkthrough-how-passwork-7-addresses-complexity-of-enterprise-security/2025-10-04T09:03:57+00:00https://sodiumcyber.com/new-cavalry-werewolf-attack-hits-russian-agencies-with-foalshell-and-stallionrat/2025-10-04T09:03:57+00:00https://sodiumcyber.com/cometjacking-one-click-can-turn-perplexitys-comet-ai-browser-into-a-data-thief/2025-10-05T09:04:20+00:00https://sodiumcyber.com/scanning-activity-on-palo-alto-networks-portals-jump-500-in-one-day/2025-10-05T09:04:20+00:00https://sodiumcyber.com/how-we-trained-an-ml-model-to-detect-dll-hijacking/2025-10-06T09:05:10+00:00https://sodiumcyber.com/detecting-dll-hijacking-with-machine-learning-real-world-cases/2025-10-06T09:05:10+00:00https://sodiumcyber.com/zimbra-zero-day-exploited-to-target-brazilian-military-via-malicious-ics-files/2025-10-06T09:05:10+00:00https://sodiumcyber.com/oracle-rushes-patch-for-cve-2025-61882-after-cl0p-exploited-it-in-data-theft-attacks/2025-10-06T09:05:10+00:00https://sodiumcyber.com/oracle-ebs-under-fire-as-cl0p-exploits-cve-2025-61882-in-real-world-attacks/2025-10-07T09:11:08+00:00https://sodiumcyber.com/new-report-links-research-firms-bieta-and-ciii-to-chinas-mss-cyber-operations/2025-10-07T09:11:08+00:00https://sodiumcyber.com/5-critical-questions-for-adopting-an-ai-security-solution/2025-10-07T09:11:08+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-oracle-0-day-bitlocker-bypass-vmscape-whatsapp-worm-more/2025-10-07T09:11:08+00:00https://sodiumcyber.com/openai-disrupts-russian-north-korean-and-chinese-hackers-misusing-chatgpt-for-cyberattacks/2025-10-08T09:12:29+00:00https://sodiumcyber.com/batshadow-group-uses-new-go-based-vampire-bot-malware-to-hunt-job-seekers/2025-10-08T09:12:30+00:00https://sodiumcyber.com/googles-new-ai-doesnt-just-find-vulnerabilities-it-rewrites-code-to-patch-them/2025-10-08T09:12:30+00:00https://sodiumcyber.com/new-research-ai-is-already-the-1-data-exfiltration-channel-in-the-enterprise/2025-10-08T09:12:30+00:00https://sodiumcyber.com/xworm-6-0-returns-with-35-plugins-and-enhanced-data-theft-capabilities/2025-10-08T09:12:30+00:00https://sodiumcyber.com/critical-exploit-lets-hackers-bypass-authentication-in-wordpress-service-finder-theme/2025-10-09T09:14:23+00:00https://sodiumcyber.com/hackers-exploit-wordpress-sites-to-power-next-gen-clickfix-phishing-attacks/2025-10-09T09:14:23+00:00https://sodiumcyber.com/chinese-hackers-weaponize-open-source-nezha-tool-in-new-attack-wave/2025-10-09T09:14:23+00:00https://sodiumcyber.com/step-into-the-password-graveyard-if-you-dare-and-join-the-live-session/2025-10-09T09:14:23+00:00https://sodiumcyber.com/lockbit-qilin-and-dragonforce-join-forces-to-dominate-the-ransomware-ecosystem/2025-10-09T09:14:23+00:00https://sodiumcyber.com/cl0p-linked-hackers-breach-dozens-of-organizations-through-oracle-software-flaw/2025-10-10T09:17:57+00:00https://sodiumcyber.com/from-healthkick-to-govershell-the-evolution-of-uta0388s-espionage-malware/2025-10-10T09:17:57+00:00https://sodiumcyber.com/new-clayrat-spyware-targets-android-users-via-fake-whatsapp-and-tiktok-apps/2025-10-10T09:17:58+00:00https://sodiumcyber.com/hackers-access-sonicwall-cloud-firewall-backups-spark-urgent-security-checks/2025-10-10T09:17:58+00:00https://sodiumcyber.com/threatsday-bulletin-ms-teams-hack-mfa-hijacking-2b-crypto-heist-apple-siri-probe-more/2025-10-10T09:17:58+00:00https://sodiumcyber.com/whatsapp-worm-targets-brazilian-banking-customers/2025-10-11T09:21:56+00:00https://sodiumcyber.com/stealit-malware-abuses-node-js-single-executable-feature-via-game-and-vpn-installers/2025-10-11T09:21:56+00:00https://sodiumcyber.com/microsoft-warns-of-payroll-pirates-hijacking-hr-saas-accounts-to-steal-employee-salaries/2025-10-11T09:21:56+00:00https://sodiumcyber.com/from-detection-to-patch-fortra-reveals-full-timeline-of-cve-2025-10035-exploitation/2025-10-11T09:21:56+00:00https://sodiumcyber.com/the-ai-soc-stack-of-2026-what-sets-top-tier-platforms-apart/2025-10-11T09:21:56+00:00https://sodiumcyber.com/experts-warn-of-widespread-sonicwall-vpn-compromise-impacting-over-100-accounts/2025-10-12T09:35:33+00:00https://sodiumcyber.com/hackers-turn-velociraptor-dfir-tool-into-weapon-in-lockbit-ransomware-attacks/2025-10-12T09:35:33+00:00https://sodiumcyber.com/astaroth-banking-trojan-abuses-github-to-remain-operational-after-takedowns/2025-10-13T09:39:51+00:00https://sodiumcyber.com/new-rust-based-malware-chaosbot-uses-discord-channels-to-control-victims-pcs/2025-10-13T09:39:51+00:00https://sodiumcyber.com/new-oracle-e-business-suite-bug-could-let-hackers-access-data-without-login/2025-10-13T09:39:51+00:00https://sodiumcyber.com/the-king-is-dead-long-live-the-king-windows-10-eol-and-windows-11-forensic-artifacts/2025-10-14T09:43:57+00:00https://sodiumcyber.com/npm-pypi-and-rubygems-packages-found-sending-developer-data-to-discord-channels/2025-10-14T09:43:57+00:00https://sodiumcyber.com/researchers-expose-ta585s-monsterv2-malware-capabilities-and-attack-chain/2025-10-14T09:43:57+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-whatsapp-worm-critical-cves-oracle-0-day-ransomware-cartel-more/2025-10-14T09:43:58+00:00https://sodiumcyber.com/why-unmonitored-javascript-is-your-biggest-holiday-security-risk/2025-10-14T09:43:58+00:00https://sodiumcyber.com/two-cvss-10-0-bugs-in-red-lion-rtus-could-hand-hackers-full-industrial-control/2025-10-15T09:47:46+00:00https://sodiumcyber.com/hackers-target-ictbroadcast-servers-via-cookie-exploit-to-gain-remote-shell-access/2025-10-15T09:47:46+00:00https://sodiumcyber.com/new-sap-netweaver-bug-lets-attackers-take-over-servers-without-login/2025-10-15T09:47:46+00:00https://sodiumcyber.com/chinese-hackers-exploit-arcgis-server-as-backdoor-for-over-a-year/2025-10-15T09:47:46+00:00https://sodiumcyber.com/moving-beyond-awareness-how-threat-hunting-builds-readiness/2025-10-15T09:47:46+00:00https://sodiumcyber.com/threatsday-bulletin-15b-crypto-bust-satellite-spying-billion-dollar-smishing-android-rats-more/2025-10-16T09:50:30+00:00https://sodiumcyber.com/cisa-flags-adobe-aem-flaw-with-perfect-10-0-score-already-under-active-attack/2025-10-16T09:50:30+00:00https://sodiumcyber.com/chinese-threat-group-jewelbug-quietly-infiltrated-russian-it-network-for-months/2025-10-16T09:50:30+00:00https://sodiumcyber.com/f5-network-compromised/2025-10-16T09:50:30+00:00https://sodiumcyber.com/october-patch-tuesday-beats-january-25-record/2025-10-16T09:50:30+00:00https://sodiumcyber.com/seo-spam-and-hidden-links-how-to-protect-your-website-and-your-reputation/2025-10-17T09:52:20+00:00https://sodiumcyber.com/microsoft-revokes-200-fraudulent-certificates-used-in-rhysida-ransomware-campaign/2025-10-17T09:52:20+00:00https://sodiumcyber.com/north-korean-hackers-use-etherhiding-to-hide-malware-inside-blockchain-smart-contracts/2025-10-17T09:52:20+00:00https://sodiumcyber.com/hackers-abuse-blockchain-smart-contracts-to-spread-malware-via-infected-wordpress-sites/2025-10-17T09:52:20+00:00https://sodiumcyber.com/linkpro-linux-rootkit-uses-ebpf-to-hide-and-activates-via-magic-tcp-packets/2025-10-17T09:52:20+00:00https://sodiumcyber.com/silver-fox-expands-winos-4-0-attacks-to-japan-and-malaysia-via-holdinghands-rat/2025-10-18T09:54:52+00:00https://sodiumcyber.com/north-korean-hackers-combine-beavertail-and-ottercookie-into-advanced-js-malware/2025-10-18T09:54:52+00:00https://sodiumcyber.com/threat-intelligence-executive-report-volume-2025-number-5/2025-10-18T09:54:52+00:00https://sodiumcyber.com/identity-security-your-first-and-last-line-of-defense/2025-10-18T09:54:52+00:00https://sodiumcyber.com/post-exploitation-framework-now-also-delivered-via-npm/2025-10-18T09:54:52+00:00https://sodiumcyber.com/europol-dismantles-sim-farm-network-powering-49-million-fake-accounts-worldwide/2025-10-19T09:55:12+00:00https://sodiumcyber.com/new-net-capi-backdoor-targets-russian-auto-and-e-commerce-firms-via-phishing-zips/2025-10-19T09:55:12+00:00https://sodiumcyber.com/mss-claims-nsa-used-42-cyber-tools-in-multi-stage-attack-on-beijing-time-systems/2025-10-20T09:55:25+00:00https://sodiumcyber.com/passiveneuron-a-sophisticated-campaign-targeting-servers-of-high-profile-organizations/2025-10-21T09:56:57+00:00https://sodiumcyber.com/google-identifies-three-new-russian-malware-families-created-by-coldriver-hackers/2025-10-21T09:56:57+00:00https://sodiumcyber.com/hackers-used-snappybee-malware-and-citrix-flaw-to-breach-european-telecom-network/2025-10-21T09:56:57+00:00https://sodiumcyber.com/five-new-exploited-bugs-land-in-cisas-catalog-oracle-and-microsoft-among-targets/2025-10-21T09:56:57+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-f5-breached-linux-rootkits-pixnapping-attack-etherhiding-more/2025-10-21T09:56:57+00:00https://sodiumcyber.com/deep-analysis-of-the-flaw-in-betterbank-reward-logic/2025-10-22T10:10:43+00:00https://sodiumcyber.com/researchers-identify-passiveneuron-apt-using-neursite-and-neuralexecutor-malware/2025-10-22T10:10:43+00:00https://sodiumcyber.com/tarmageddon-flaw-in-async-tar-rust-library-could-enable-remote-code-execution/2025-10-22T10:10:43+00:00https://sodiumcyber.com/tp-link-patches-four-omada-gateway-flaws-two-allow-remote-code-execution/2025-10-22T10:10:43+00:00https://sodiumcyber.com/meta-rolls-out-new-tools-to-protect-whatsapp-and-messenger-users-from-scams/2025-10-22T10:10:43+00:00https://sodiumcyber.com/jingle-thief-hackers-exploit-cloud-infrastructure-to-steal-millions-in-gift-cards/2025-10-23T10:12:53+00:00https://sodiumcyber.com/over-250-magento-stores-hit-overnight-as-hackers-exploit-new-adobe-commerce-flaw/2025-10-23T10:12:53+00:00https://sodiumcyber.com/critical-lanscope-endpoint-manager-bug-exploited-in-ongoing-cyberattacks-cisa-confirms/2025-10-23T10:12:53+00:00https://sodiumcyber.com/iran-linked-muddywater-targets-100-organisations-in-global-espionage-campaign/2025-10-23T10:12:53+00:00https://sodiumcyber.com/ukraine-aid-groups-targeted-through-fake-zoom-meetings-and-weaponized-pdf-files/2025-10-23T10:12:53+00:00https://sodiumcyber.com/self-spreading-glassworm-infects-vs-code-extensions-in-widespread-supply-chain-attack/2025-10-24T10:14:03+00:00https://sodiumcyber.com/north-korean-hackers-lure-defense-engineers-with-fake-jobs-to-steal-drone-secrets/2025-10-24T10:14:03+00:00https://sodiumcyber.com/secure-ai-at-scale-and-speed-learn-the-framework-in-this-free-webinar/2025-10-24T10:14:03+00:00https://sodiumcyber.com/threatsday-bulletin-176m-crypto-fine-hacking-formula-1-chromium-vulns-ai-hijack-more/2025-10-24T10:14:03+00:00https://sodiumcyber.com/why-organizations-are-abandoning-static-secrets-for-managed-identities/2025-10-24T10:14:03+00:00https://sodiumcyber.com/smishing-triad-linked-to-194000-malicious-domains-in-global-phishing-operation/2025-10-25T10:14:42+00:00https://sodiumcyber.com/newly-patched-critical-microsoft-wsus-flaw-comes-under-active-exploitation/2025-10-25T10:14:42+00:00https://sodiumcyber.com/apt36-targets-indian-government-with-golang-based-deskrat-malware-campaign/2025-10-25T10:14:42+00:00https://sodiumcyber.com/the-cybersecurity-perception-gap-why-executives-and-practitioners-see-risk-differently/2025-10-25T10:14:42+00:00https://sodiumcyber.com/3000-youtube-videos-exposed-as-malware-traps-in-massive-ghost-network-operation/2025-10-25T10:14:42+00:00https://sodiumcyber.com/qilin-ransomware-combines-linux-payload-with-byovd-exploit-in-hybrid-attack/2025-10-27T10:45:12+00:00https://sodiumcyber.com/chatgpt-atlas-browser-can-be-tricked-by-fake-urls-into-executing-hidden-commands/2025-10-27T10:45:12+00:00https://sodiumcyber.com/mem3nt0-mori-the-hacking-team-is-back/2025-10-27T10:45:12+00:00https://sodiumcyber.com/chrome-zero-day-exploited-to-deliver-italian-memento-labs-leetagent-spyware/2025-10-28T10:46:27+00:00https://sodiumcyber.com/sidewinder-adopts-new-clickonce-based-attack-chain-targeting-south-asian-diplomats/2025-10-28T10:46:27+00:00https://sodiumcyber.com/crypto-wasted-bluenoroffs-ghost-mirage-of-funding-and-jobs/2025-10-28T10:46:27+00:00https://sodiumcyber.com/x-warns-users-with-security-keys-to-re-enroll-before-november-10-to-avoid-lockouts/2025-10-28T10:46:27+00:00https://sodiumcyber.com/new-chatgpt-atlas-browser-exploit-lets-attackers-plant-persistent-hidden-commands/2025-10-28T10:46:27+00:00https://sodiumcyber.com/10-npm-packages-caught-stealing-developer-credentials-on-windows-macos-and-linux/2025-10-29T10:47:44+00:00https://sodiumcyber.com/active-exploits-hit-dassault-and-xwiki-cisa-confirms-critical-flaws-under-attack/2025-10-29T10:47:44+00:00https://sodiumcyber.com/new-tee-fail-side-channel-attack-extracts-secrets-from-intel-and-amd-ddr5-secure-enclaves/2025-10-29T10:47:44+00:00https://sodiumcyber.com/new-android-trojan-herodotus-outsmarts-anti-fraud-systems-by-typing-like-a-human/2025-10-29T10:47:44+00:00https://sodiumcyber.com/researchers-expose-ghostcall-and-ghosthire-bluenoroffs-new-malware-chains/2025-10-29T10:47:44+00:00https://sodiumcyber.com/windows-server-update-services-wsus-vulnerability-abused-to-harvest-sensitive-data/2025-10-30T10:47:49+00:00https://sodiumcyber.com/experts-reports-sharp-increase-in-automated-botnet-attacks-targeting-php-servers-and-iot-devices/2025-10-30T10:47:49+00:00https://sodiumcyber.com/new-ai-targeted-cloaking-attack-tricks-ai-crawlers-into-citing-fake-info-as-verified-facts/2025-10-30T10:47:49+00:00https://sodiumcyber.com/discover-practical-ai-tactics-for-grc-join-the-free-expert-webinar/2025-10-30T10:47:49+00:00https://sodiumcyber.com/preparing-for-the-digital-battlefield-of-2026-ghost-identities-poisoned-accounts-ai-agent-havoc/2025-10-30T10:47:49+00:00https://sodiumcyber.com/cisa-and-nsa-issue-urgent-guidance-to-secure-wsus-and-microsoft-exchange-servers/2025-10-31T10:48:31+00:00https://sodiumcyber.com/eclipse-foundation-revokes-leaked-open-vsx-tokens-following-wiz-discovery/2025-10-31T10:48:31+00:00https://sodiumcyber.com/cisa-flags-vmware-zero-day-exploited-by-china-linked-hackers-in-active-attacks/2025-10-31T10:48:31+00:00https://sodiumcyber.com/a-new-security-layer-for-macos-takes-aim-at-admin-errors-before-hackers-do/2025-10-31T10:48:31+00:00https://sodiumcyber.com/bronze-butler-exploits-japanese-asset-management-software-vulnerability/2025-10-31T10:48:31+00:00https://sodiumcyber.com/openai-unveils-aardvark-gpt-5-agent-that-finds-and-fixes-code-flaws-automatically/2025-11-01T10:48:43+00:00https://sodiumcyber.com/nation-state-hackers-deploy-new-airstalk-malware-in-suspected-supply-chain-attack/2025-11-01T10:48:43+00:00https://sodiumcyber.com/china-linked-hackers-exploit-windows-shortcut-flaw-to-target-european-diplomats/2025-11-01T10:48:43+00:00https://sodiumcyber.com/china-linked-tick-group-exploits-lanscope-zero-day-to-hijack-corporate-systems/2025-11-01T10:48:43+00:00https://sodiumcyber.com/the-msp-cybersecurity-readiness-guide-turning-security-into-growth/2025-11-01T10:48:43+00:00https://sodiumcyber.com/asd-warns-of-ongoing-badcandy-attacks-exploiting-cisco-ios-xe-vulnerability/2025-11-02T10:51:14+00:00https://sodiumcyber.com/new-httptroy-backdoor-poses-as-vpn-invoice-in-targeted-cyberattack-on-south-korea/2025-11-03T10:55:45+00:00https://sodiumcyber.com/googles-ai-big-sleep-finds-5-new-vulnerabilities-in-apples-safari-webkit/2025-11-04T10:56:32+00:00https://sodiumcyber.com/u-s-prosecutors-indict-cybersecurity-insiders-accused-of-blackcat-ransomware-attacks/2025-11-04T10:56:32+00:00https://sodiumcyber.com/microsoft-detects-sesameop-backdoor-using-openais-api-as-a-stealth-command-channel/2025-11-04T10:56:32+00:00https://sodiumcyber.com/malicious-vsx-extension-sleepyduck-uses-ethereum-to-keep-its-command-server-alive/2025-11-04T10:56:32+00:00https://sodiumcyber.com/cybercriminals-exploit-remote-monitoring-tools-to-infiltrate-logistics-and-freight-networks/2025-11-04T10:56:32+00:00https://sodiumcyber.com/cisa-adds-gladinet-and-cwp-flaws-to-kev-catalog-amid-active-exploitation-evidence/2025-11-05T11:03:17+00:00https://sodiumcyber.com/a-cybercrime-merger-like-no-other-scattered-spider-lapsus-and-shinyhunters-join-forces/2025-11-05T11:03:17+00:00https://sodiumcyber.com/european-authorities-dismantle-e600-million-crypto-fraud-network-in-global-sweep/2025-11-05T11:03:17+00:00https://sodiumcyber.com/critical-react-native-cli-flaw-exposed-millions-of-developers-to-remote-attacks/2025-11-05T11:03:18+00:00https://sodiumcyber.com/microsoft-teams-bugs-let-attackers-impersonate-colleagues-and-edit-messages-unnoticed/2025-11-05T11:03:18+00:00https://sodiumcyber.com/hackers-weaponize-windows-hyper-v-to-hide-linux-vm-and-evade-edr-detection/2025-11-06T11:05:36+00:00https://sodiumcyber.com/sonicwall-confirms-state-sponsored-hackers-behind-september-cloud-backup-breach/2025-11-06T11:05:36+00:00https://sodiumcyber.com/google-uncovers-promptflux-malware-that-uses-gemini-ai-to-rewrite-its-code-hourly/2025-11-06T11:05:36+00:00https://sodiumcyber.com/detecting-fraudulent-north-korean-hires-a-ciso-playbook/2025-11-06T11:05:37+00:00https://sodiumcyber.com/researchers-find-chatgpt-vulnerabilities-that-let-attackers-trick-ai-into-leaking-data/2025-11-06T11:05:37+00:00https://sodiumcyber.com/enterprise-credentials-at-risk-same-old-same-old/2025-11-07T11:06:50+00:00https://sodiumcyber.com/google-launches-new-maps-feature-to-help-businesses-report-review-based-extortion-attempts/2025-11-07T11:06:50+00:00https://sodiumcyber.com/vibe-coded-malicious-vs-code-extension-found-with-built-in-ransomware-capabilities/2025-11-07T11:06:50+00:00https://sodiumcyber.com/trojanized-eset-installers-drop-kalambur-backdoor-in-phishing-attacks-on-ukraine/2025-11-07T11:06:50+00:00https://sodiumcyber.com/cisco-warns-of-new-firewall-attack-exploiting-cve-2025-20333-and-cve-2025-20362/2025-11-07T11:06:50+00:00https://sodiumcyber.com/samsung-mobile-flaw-exploited-as-zero-day-to-deploy-landfall-android-spyware/2025-11-08T11:35:58+00:00https://sodiumcyber.com/from-log4j-to-iis-chinas-hackers-turn-legacy-bugs-into-global-espionage-tools/2025-11-08T11:35:58+00:00https://sodiumcyber.com/hidden-logic-bombs-in-malware-laced-nuget-packages-set-to-detonate-years-after-installation/2025-11-08T11:35:58+00:00https://sodiumcyber.com/microsoft-uncovers-whisper-leak-attack-that-identifies-ai-chat-topics-in-encrypted-traffic/2025-11-09T11:50:16+00:00https://sodiumcyber.com/large-scale-clickfix-phishing-attacks-target-hotel-systems-with-purerat-malware/2025-11-10T11:52:36+00:00https://sodiumcyber.com/glassworm-malware-discovered-in-three-vs-code-extensions-with-thousands-of-installs/2025-11-10T11:52:36+00:00https://sodiumcyber.com/hackers-exploiting-triofox-flaw-to-install-remote-access-tools-via-antivirus-feature/2025-11-11T12:05:31+00:00https://sodiumcyber.com/konni-hackers-turn-googles-find-hub-into-a-remote-data-wiping-weapon/2025-11-11T12:05:31+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-hyper-v-malware-malicious-ai-bots-rdp-exploits-whatsapp-lockdown-and-more/2025-11-11T12:05:31+00:00https://sodiumcyber.com/new-browser-security-report-reveals-emerging-threats-for-enterprises/2025-11-11T12:05:31+00:00https://sodiumcyber.com/active-directory-under-siege-why-critical-infrastructure-needs-stronger-security/2025-11-12T12:07:04+00:00https://sodiumcyber.com/microsoft-fixes-63-security-flaws-including-a-windows-kernel-zero-day-under-active-attack/2025-11-12T12:07:04+00:00https://sodiumcyber.com/google-launches-private-ai-compute-secure-ai-processing-with-on-device-level-privacy/2025-11-12T12:07:04+00:00https://sodiumcyber.com/whatsapp-malware-maverick-hijacks-browser-sessions-to-target-brazils-biggest-banks/2025-11-12T12:07:04+00:00https://sodiumcyber.com/gootloader-is-back-using-a-new-font-trick-to-hide-malware-on-wordpress-sites/2025-11-12T12:07:04+00:00https://sodiumcyber.com/when-attacks-come-faster-than-patches-why-2026-will-be-the-year-of-machine-speed-security/2025-11-13T12:08:30+00:00https://sodiumcyber.com/operation-endgame-dismantles-rhadamanthys-venom-rat-and-elysium-botnet-in-global-crackdown/2025-11-13T12:08:30+00:00https://sodiumcyber.com/threatsday-bulletin-cisco-0-days-ai-bug-bounties-crypto-heists-state-linked-leaks-and-20-more-stories/2025-11-13T12:08:30+00:00https://sodiumcyber.com/cisa-flags-critical-watchguard-fireware-flaw-exposing-54000-fireboxes-to-no-login-attacks/2025-11-13T12:08:30+00:00https://sodiumcyber.com/over-67000-fake-npm-packages-flood-registry-in-worm-like-spam-attack/2025-11-13T12:08:30+00:00https://sodiumcyber.com/ransomwares-fragmentation-reaches-a-breaking-point-while-lockbit-returns/2025-11-14T12:09:59+00:00https://sodiumcyber.com/chinese-hackers-use-anthropics-ai-to-launch-automated-cyber-espionage-campaign/2025-11-14T12:09:59+00:00https://sodiumcyber.com/now-patched-fortinet-fortiweb-flaw-exploited-in-attacks-to-create-admin-accounts/2025-11-14T12:09:59+00:00https://sodiumcyber.com/russian-hackers-create-4300-fake-travel-sites-to-steal-hotel-guests-payment-data/2025-11-14T12:09:59+00:00https://sodiumcyber.com/fake-chrome-extension-safery-steals-ethereum-wallet-seed-phrases-using-sui-blockchain/2025-11-14T12:09:59+00:00https://sodiumcyber.com/five-u-s-citizens-plead-guilty-to-helping-north-korean-it-workers-infiltrate-136-companies/2025-11-15T12:11:07+00:00https://sodiumcyber.com/north-korean-hackers-turn-json-services-into-covert-malware-delivery-channels/2025-11-15T12:11:07+00:00https://sodiumcyber.com/researchers-find-serious-ai-bugs-exposing-meta-nvidia-and-microsoft-inference-frameworks/2025-11-15T12:11:07+00:00https://sodiumcyber.com/iranian-hackers-launch-spearspecter-spy-operation-on-defense-government-targets/2025-11-15T12:11:07+00:00https://sodiumcyber.com/rondodox-exploits-unpatched-xwiki-servers-to-pull-more-devices-into-its-botnet/2025-11-16T12:42:07+00:00https://sodiumcyber.com/dragon-breath-uses-roningloader-to-disable-security-tools-and-deploy-gh0st-rat/2025-11-17T12:43:10+00:00https://sodiumcyber.com/rust-adoption-drives-android-memory-safety-bugs-below-20-for-first-time/2025-11-17T12:43:10+00:00https://sodiumcyber.com/learn-how-leading-companies-secure-cloud-workloads-and-infrastructure-at-scale/2025-11-18T12:43:16+00:00https://sodiumcyber.com/beyond-iam-silos-why-the-identity-security-fabric-is-essential-for-securing-ai-and-non-human-identities/2025-11-18T12:43:16+00:00https://sodiumcyber.com/seven-npm-packages-use-adspect-cloaking-to-trick-victims-into-crypto-scam-pages/2025-11-18T12:43:16+00:00https://sodiumcyber.com/microsoft-mitigates-record-15-72-tbps-ddos-attack-driven-by-aisuru-botnet/2025-11-18T12:43:16+00:00https://sodiumcyber.com/google-issues-security-fix-for-actively-exploited-chrome-v8-zero-day-vulnerability/2025-11-18T12:43:16+00:00https://sodiumcyber.com/application-containment-how-to-use-ringfencing-to-prevent-the-weaponization-of-trusted-software/2025-11-19T12:52:02+00:00https://sodiumcyber.com/it-threat-evolution-in-q3-2025-mobile-statistics/2025-11-19T12:52:03+00:00https://sodiumcyber.com/it-threat-evolution-in-q3-2025-non-mobile-statistics/2025-11-19T12:52:03+00:00https://sodiumcyber.com/edgestepper-implant-reroutes-dns-queries-to-deploy-malware-via-hijacked-software-updates/2025-11-19T12:52:03+00:00https://sodiumcyber.com/servicenow-ai-agents-can-be-tricked-into-acting-against-each-other-via-second-order-prompts/2025-11-19T12:52:03+00:00https://sodiumcyber.com/threatsday-bulletin-0-days-linkedin-spies-crypto-crimes-iot-flaws-and-new-malware-waves/2025-11-20T13:15:00+00:00https://sodiumcyber.com/inside-the-dark-web-job-market/2025-11-20T13:15:00+00:00https://sodiumcyber.com/ctm360-exposes-a-global-whatsapp-hijacking-campaign-hackonchat/2025-11-20T13:15:00+00:00https://sodiumcyber.com/new-sturnus-android-trojan-quietly-captures-encrypted-chats-and-hijacks-devices/2025-11-20T13:15:00+00:00https://sodiumcyber.com/blockchain-and-node-js-abused-by-tsundere-an-emerging-botnet/2025-11-20T13:15:00+00:00https://sodiumcyber.com/google-brings-airdrop-compatibility-to-androids-quick-share-using-rust-hardened-security/2025-11-21T13:18:20+00:00https://sodiumcyber.com/why-it-admins-choose-samsung-for-mobile-security/2025-11-21T13:18:20+00:00https://sodiumcyber.com/apt24-deploys-badaudio-in-years-long-espionage-hitting-taiwan-and-1000-domains/2025-11-21T13:18:20+00:00https://sodiumcyber.com/toddycat-your-hidden-email-assistant-part-1/2025-11-21T13:18:20+00:00https://sodiumcyber.com/sec-drops-solarwinds-case-after-years-of-high-stakes-cybersecurity-scrutiny/2025-11-21T13:18:20+00:00https://sodiumcyber.com/matrix-push-c2-uses-browser-notifications-for-fileless-cross-platform-phishing-attacks/2025-11-22T13:51:13+00:00https://sodiumcyber.com/cisa-warns-of-actively-exploited-critical-oracle-identity-manager-zero-day-vulnerability/2025-11-22T13:51:13+00:00https://sodiumcyber.com/grafana-patches-cvss-10-0-scim-flaw-enabling-impersonation-and-privilege-escalation/2025-11-22T13:51:13+00:00https://sodiumcyber.com/china-linked-apt31-launches-stealthy-cyberattacks-on-russian-it-using-cloud-services/2025-11-23T13:51:39+00:00https://sodiumcyber.com/second-sha1-hulud-wave-affects-25000-repositories-via-npm-preinstall-credential-theft/2025-11-24T13:57:11+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-fortinet-exploit-chrome-0-day-badiis-malware-record-ddos-saas-breach-more/2025-11-24T13:57:11+00:00https://sodiumcyber.com/to-buy-or-not-to-buy-how-cybercriminals-capitalize-on-black-friday/2025-11-24T13:57:11+00:00https://sodiumcyber.com/chinese-deepseek-r1-ai-generates-insecure-code-when-prompts-mention-tibet-or-uyghurs/2025-11-24T13:57:11+00:00https://sodiumcyber.com/shadowpad-malware-actively-exploits-wsus-vulnerability-for-full-system-access/2025-11-24T13:57:11+00:00https://sodiumcyber.com/toddycats-new-hacking-tools-steal-outlook-emails-and-microsoft-365-access-tokens/2025-11-25T13:58:12+00:00https://sodiumcyber.com/3-soc-challenges-you-need-to-solve-before-2026/2025-11-25T13:58:12+00:00https://sodiumcyber.com/hackers-hijack-blender-3d-assets-to-deploy-stealc-v2-data-stealing-malware/2025-11-25T13:58:12+00:00https://sodiumcyber.com/cisa-warns-of-active-spyware-campaigns-hijacking-high-value-signal-and-whatsapp-users/2025-11-25T13:58:13+00:00https://sodiumcyber.com/new-fluent-bit-flaws-expose-cloud-to-rce-and-stealthy-infrastructure-intrusions/2025-11-25T13:58:13+00:00https://sodiumcyber.com/when-your-2m-security-detection-fails-can-your-soc-save-you/2025-11-26T13:59:29+00:00https://sodiumcyber.com/chrome-extension-caught-injecting-hidden-solana-transfer-fees-into-raydium-swaps/2025-11-26T13:59:29+00:00https://sodiumcyber.com/webinar-learn-to-spot-risks-and-patch-safely-with-community-maintained-tools/2025-11-26T13:59:29+00:00https://sodiumcyber.com/old-tech-new-vulnerabilities-ntlm-abuse-ongoing-exploitation-in-2025/2025-11-26T13:59:29+00:00https://sodiumcyber.com/romcom-uses-socgholish-fake-update-attacks-to-deliver-mythic-agent-malware/2025-11-26T13:59:30+00:00https://sodiumcyber.com/threatsday-bulletin-ai-malware-voice-bot-flaws-crypto-laundering-iot-attacks-and-20-more-stories/2025-11-27T14:32:10+00:00https://sodiumcyber.com/gainsight-expands-impacted-customer-list-following-salesforce-security-alert/2025-11-27T14:32:10+00:00https://sodiumcyber.com/shai-hulud-v2-spreads-from-npm-to-maven-as-campaign-exposes-thousands-of-secrets/2025-11-27T14:32:10+00:00https://sodiumcyber.com/qilin-ransomware-turns-south-korean-msp-breach-into-28-victim-korean-leaks-data-heist/2025-11-27T14:32:10+00:00https://sodiumcyber.com/why-organizations-are-turning-to-rpam/2025-11-28T14:42:57+00:00https://sodiumcyber.com/ms-teams-guest-access-can-remove-defender-protection-when-users-join-external-tenants/2025-11-28T14:42:57+00:00https://sodiumcyber.com/tomiris-wreaks-havoc-new-tools-and-techniques-of-the-apt-group/2025-11-28T14:42:57+00:00https://sodiumcyber.com/bloody-wolf-expands-java-based-netsupport-rat-attacks-in-kyrgyzstan-and-uzbekistan/2025-11-28T14:42:57+00:00https://sodiumcyber.com/microsoft-to-block-unauthorized-scripts-in-entra-id-logins-with-2026-csp-update/2025-11-28T14:42:57+00:00https://sodiumcyber.com/legacy-python-bootstrap-scripts-create-domain-takeover-risk-in-multiple-pypi-packages/2025-11-29T14:43:34+00:00https://sodiumcyber.com/north-korean-hackers-deploy-197-npm-packages-to-spread-updated-ottercookie-malware/2025-11-29T14:43:34+00:00https://sodiumcyber.com/cisa-adds-actively-exploited-xss-bug-cve-2021-26829-in-openplc-scadabr-to-kev/2025-11-30T14:49:20+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-hot-cves-npm-worm-returns-firefox-rce-m365-email-raid-more/2025-12-01T14:52:47+00:00https://sodiumcyber.com/webinar-the-agentic-trojan-horse-why-the-new-ai-browsers-war-is-a-nightmare-for-security-teams/2025-12-01T14:52:47+00:00https://sodiumcyber.com/new-albiriox-maas-malware-targets-400-apps-for-on-device-fraud-and-screen-control/2025-12-01T14:52:47+00:00https://sodiumcyber.com/tomiris-shifts-to-public-service-implants-for-stealthier-c2-in-attacks-on-government-targets/2025-12-01T14:52:47+00:00https://sodiumcyber.com/iran-linked-hackers-hits-israeli-sectors-with-new-muddyviper-backdoor-in-targeted-attacks/2025-12-02T14:53:33+00:00https://sodiumcyber.com/secalerts-cuts-through-the-noise-with-a-smarter-faster-way-to-track-vulnerabilities/2025-12-02T14:53:33+00:00https://sodiumcyber.com/kaspersky-security-bulletin-2025-statistics/2025-12-02T14:53:33+00:00https://sodiumcyber.com/google-patches-107-android-flaws-including-two-framework-bugs-exploited-in-the-wild/2025-12-02T14:53:33+00:00https://sodiumcyber.com/india-orders-phone-makers-to-pre-install-government-app-to-tackle-telecom-fraud/2025-12-02T14:53:33+00:00https://sodiumcyber.com/discover-the-ai-tools-fueling-the-next-cybercrime-wave-watch-the-webinar/2025-12-03T14:55:42+00:00https://sodiumcyber.com/exploits-and-vulnerabilities-in-q3-2025/2025-12-03T14:55:42+00:00https://sodiumcyber.com/chopping-ai-down-to-size-turning-disruptive-technology-into-a-strategic-advantage/2025-12-03T14:55:42+00:00https://sodiumcyber.com/picklescan-bugs-allow-malicious-pytorch-models-to-evade-scans-and-execute-code/2025-12-03T14:55:42+00:00https://sodiumcyber.com/malicious-rust-crate-delivers-os-specific-malware-to-web3-developer-systems/2025-12-03T14:55:42+00:00https://sodiumcyber.com/threatsday-bulletin-wi-fi-hack-npm-worm-defi-theft-phishing-blasts-and-15-more-stories/2025-12-04T14:56:07+00:00https://sodiumcyber.com/5-threats-that-reshaped-web-security-this-year-2025/2025-12-04T14:56:07+00:00https://sodiumcyber.com/goldfactory-hits-southeast-asia-with-modified-banking-apps-driving-11000-infections/2025-12-04T14:56:07+00:00https://sodiumcyber.com/record-29-7-tbps-ddos-attack-linked-to-aisuru-botnet-with-up-to-4-million-infected-hosts/2025-12-04T14:56:07+00:00https://sodiumcyber.com/shai-hulud-2-0-now-with-a-wiper-flavor/2025-12-04T14:56:07+00:00https://sodiumcyber.com/sharpening-the-knife-gold-blades-strategic-evolution/2025-12-05T14:57:04+00:00https://sodiumcyber.com/introducing-sophos-intelix-for-microsoft-365-copilot/2025-12-05T14:57:04+00:00https://sodiumcyber.com/introducing-sophos-intelix-for-microsoft-security-copilot/2025-12-05T14:57:04+00:00https://sodiumcyber.com/intellexa-leaks-reveal-zero-days-and-ads-based-vector-for-predator-spyware-delivery/2025-12-05T14:57:04+00:00https://sodiumcyber.com/getting-to-yes-an-anti-sales-guide-for-msps/2025-12-05T14:57:04+00:00https://sodiumcyber.com/critical-react2shell-flaw-added-to-cisa-kev-after-confirmed-active-exploitation/2025-12-06T15:00:04+00:00https://sodiumcyber.com/zero-click-agentic-browser-attack-can-delete-entire-google-drive-using-crafted-emails/2025-12-06T15:00:04+00:00https://sodiumcyber.com/critical-xxe-bug-cve-2025-66516-cvss-10-0-hits-apache-tika-requires-urgent-patch/2025-12-06T15:00:04+00:00https://sodiumcyber.com/chinese-hackers-have-started-exploiting-the-newly-disclosed-react2shell-vulnerability/2025-12-06T15:00:04+00:00https://sodiumcyber.com/inside-shanya-a-packer-as-a-service-fueling-modern-attacks/2025-12-07T15:01:07+00:00https://sodiumcyber.com/researchers-uncover-30-flaws-in-ai-coding-tools-enabling-data-theft-and-rce-attacks/2025-12-07T15:01:07+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-usb-malware-react2shell-whatsapp-worms-ai-ide-bugs-more/2025-12-08T15:01:17+00:00https://sodiumcyber.com/how-can-retailers-cyber-prepare-for-the-most-vulnerable-time-of-the-year/2025-12-08T15:01:17+00:00https://sodiumcyber.com/android-malware-fvncbot-seedsnatcher-and-clayrat-gain-stronger-data-theft-features/2025-12-08T15:01:17+00:00https://sodiumcyber.com/sneeit-wordpress-rce-exploited-in-the-wild-while-ictbroadcast-bug-fuels-frost-botnet-attacks/2025-12-08T15:01:17+00:00https://sodiumcyber.com/muddywater-deploys-udpgangster-backdoor-in-targeted-turkey-israel-azerbaijan-campaign/2025-12-08T15:01:17+00:00https://sodiumcyber.com/storm-0249-escalates-ransomware-attacks-with-clickfix-fileless-powershell-and-dll-sideloading/2025-12-09T15:02:24+00:00https://sodiumcyber.com/how-to-streamline-zero-trust-using-the-shared-signals-framework/2025-12-09T15:02:24+00:00https://sodiumcyber.com/goodbye-dark-telegram-blocks-are-pushing-the-underground-out/2025-12-09T15:02:24+00:00https://sodiumcyber.com/google-adds-layered-defenses-to-chrome-to-block-indirect-prompt-injection-threats/2025-12-09T15:02:24+00:00https://sodiumcyber.com/stac6565-targets-canada-in-80-of-attacks-as-gold-blade-deploys-qwcrypt-ransomware/2025-12-09T15:02:24+00:00https://sodiumcyber.com/three-pcie-encryption-weaknesses-expose-pcie-5-0-systems-to-faulty-data-handling/2025-12-10T15:02:35+00:00https://sodiumcyber.com/warning-winrar-vulnerability-cve-2025-6218-under-active-attack-by-multiple-threat-groups/2025-12-10T15:02:35+00:00https://sodiumcyber.com/webinar-how-attackers-exploit-cloud-misconfigurations-across-aws-ai-models-and-kubernetes/2025-12-10T15:02:35+00:00https://sodiumcyber.com/microsoft-issues-security-fixes-for-56-flaws-including-active-exploit-and-two-zero-days/2025-12-10T15:02:35+00:00https://sodiumcyber.com/fortinet-ivanti-and-sap-issue-urgent-patches-for-authentication-and-code-execution-flaws/2025-12-10T15:02:35+00:00https://sodiumcyber.com/threatsday-bulletin-spyware-alerts-mirai-strikes-docker-leaks-valleyrat-rootkit-and-20-more-stories/2025-12-11T15:03:45+00:00https://sodiumcyber.com/nanoremote-malware-uses-google-drive-api-for-hidden-control-on-windows-systems/2025-12-11T15:03:45+00:00https://sodiumcyber.com/hunting-for-mythic-in-network-traffic/2025-12-11T15:03:45+00:00https://sodiumcyber.com/the-impact-of-robotic-process-automation-rpa-on-identity-and-access-management/2025-12-11T15:03:45+00:00https://sodiumcyber.com/wirte-leverages-ashenloader-sideloading-to-install-the-ashtag-espionage-backdoor/2025-12-11T15:03:45+00:00https://sodiumcyber.com/new-advanced-phishing-kits-use-ai-and-mfa-bypass-tactics-to-steal-credentials-at-scale/2025-12-12T15:29:11+00:00https://sodiumcyber.com/securing-genai-in-the-browser-policy-isolation-and-data-controls-that-actually-work/2025-12-12T15:29:11+00:00https://sodiumcyber.com/following-the-digital-trail-what-happens-to-data-stolen-in-a-phishing-attack/2025-12-12T15:29:11+00:00https://sodiumcyber.com/new-react-rsc-vulnerabilities-enable-dos-and-source-code-exposure/2025-12-12T15:29:11+00:00https://sodiumcyber.com/react2shell-exploitation-escalates-into-large-scale-global-attacks-forcing-emergency-mitigation/2025-12-12T15:29:11+00:00https://sodiumcyber.com/cisa-adds-actively-exploited-sierra-wireless-router-flaw-enabling-rce-attacks/2025-12-13T15:48:59+00:00https://sodiumcyber.com/apple-issues-security-updates-after-two-webkit-flaws-found-exploited-in-the-wild/2025-12-13T15:48:59+00:00https://sodiumcyber.com/fake-osint-and-gpt-utility-github-repos-spread-pystorerat-malware-payloads/2025-12-13T15:48:59+00:00https://sodiumcyber.com/freepbx-patches-critical-sqli-file-upload-and-authtype-bypass-flaws-enabling-rce/2025-12-15T15:51:44+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-apple-0-days-winrar-exploit-lastpass-fines-net-rce-oauth-scams-more/2025-12-15T15:51:44+00:00https://sodiumcyber.com/a-browser-extension-risk-guide-after-the-shadypanda-campaign/2025-12-15T15:51:44+00:00https://sodiumcyber.com/phantom-stealer-spread-by-iso-phishing-emails-hitting-russian-finance-sector/2025-12-15T15:51:44+00:00https://sodiumcyber.com/game-of-clones-sophos-and-the-mitre-attck-enterprise-2025-evaluations/2025-12-15T15:51:44+00:00https://sodiumcyber.com/amazon-exposes-years-long-gru-cyber-campaign-targeting-energy-and-cloud-infrastructure/2025-12-16T15:52:06+00:00https://sodiumcyber.com/why-data-security-and-privacy-need-to-start-in-code/2025-12-16T15:52:07+00:00https://sodiumcyber.com/fortinet-fortigate-under-active-attack-through-saml-sso-authentication-bypass/2025-12-16T15:52:07+00:00https://sodiumcyber.com/god-mode-on-how-we-attacked-a-vehicles-head-unit-modem/2025-12-16T15:52:07+00:00https://sodiumcyber.com/react2shell-vulnerability-actively-exploited-to-deploy-linux-backdoors/2025-12-16T15:52:07+00:00https://sodiumcyber.com/apt28-targets-ukrainian-ukr-net-users-in-long-running-credential-phishing-campaign/2025-12-17T15:52:09+00:00https://sodiumcyber.com/new-forumtroll-phishing-attacks-target-russian-scholars-using-fake-elibrary-emails/2025-12-17T15:52:09+00:00https://sodiumcyber.com/fix-soc-blind-spots-see-threats-to-your-industry-country-in-real-time/2025-12-17T15:52:09+00:00https://sodiumcyber.com/china-linked-ink-dragon-hacks-governments-using-shadowpad-and-finaldraft-malware/2025-12-17T15:52:09+00:00https://sodiumcyber.com/operation-forumtroll-continues-russian-political-scientists-targeted-using-plagiarism-reports/2025-12-17T15:52:09+00:00https://sodiumcyber.com/hpe-oneview-flaw-rated-cvss-10-0-allows-unauthenticated-remote-code-execution/2025-12-18T15:52:12+00:00https://sodiumcyber.com/threatsday-bulletin-whatsapp-hijacks-mcp-leaks-ai-recon-react2shell-exploit-and-15-more-stories/2025-12-18T15:52:13+00:00https://sodiumcyber.com/north-korea-linked-hackers-steal-2-02-billion-in-2025-leading-global-crypto-theft/2025-12-18T15:52:13+00:00https://sodiumcyber.com/the-case-for-dynamic-ai-saas-security-as-copilots-scale/2025-12-18T15:52:13+00:00https://sodiumcyber.com/kimsuky-spreads-docswap-android-malware-via-qr-phishing-posing-as-delivery-app/2025-12-18T15:52:13+00:00https://sodiumcyber.com/cracked-software-and-youtube-videos-spread-countloader-and-gachiloader-malware/2025-12-19T15:52:29+00:00https://sodiumcyber.com/watchguard-warns-of-active-exploitation-of-critical-fireware-os-vpn-vulnerability/2025-12-19T15:52:29+00:00https://sodiumcyber.com/nigeria-arrests-raccoono365-phishing-developer-linked-to-microsoft-365-attacks/2025-12-19T15:52:29+00:00https://sodiumcyber.com/cloud-atlas-activity-in-the-first-half-of-2025-what-changed/2025-12-19T15:52:29+00:00https://sodiumcyber.com/new-uefi-flaw-enables-early-boot-dma-attacks-on-asrock-asus-gigabyte-msi-motherboards/2025-12-19T15:52:29+00:00https://sodiumcyber.com/u-s-doj-charges-54-in-atm-jackpotting-scheme-using-ploutus-malware/2025-12-20T15:53:15+00:00https://sodiumcyber.com/russia-linked-hackers-use-microsoft-365-device-code-phishing-for-account-takeovers/2025-12-20T15:53:15+00:00https://sodiumcyber.com/iranian-infy-apt-resurfaces-with-new-malware-activity-after-years-of-silence/2025-12-21T15:53:21+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-firewall-exploits-ai-data-theft-android-hacks-apt-attacks-insider-leaks-more/2025-12-22T15:54:20+00:00https://sodiumcyber.com/how-to-browse-the-web-more-sustainably-with-a-green-browser/2025-12-22T15:54:20+00:00https://sodiumcyber.com/android-malware-operations-merge-droppers-sms-theft-and-rat-capabilities-at-scale/2025-12-22T15:54:20+00:00https://sodiumcyber.com/two-chrome-extensions-caught-secretly-stealing-credentials-from-over-170-sites/2025-12-23T15:54:36+00:00https://sodiumcyber.com/assessing-siem-effectiveness/2025-12-23T15:54:36+00:00https://sodiumcyber.com/interpol-arrests-574-in-africa-ukrainian-ransomware-affiliate-pleads-guilty/2025-12-23T15:54:36+00:00https://sodiumcyber.com/passwd-a-walkthrough-of-the-google-workspace-password-manager/2025-12-23T15:54:36+00:00https://sodiumcyber.com/u-s-doj-seizes-fraud-domain-behind-14-6-million-bank-account-takeover-scheme/2025-12-23T15:54:36+00:00https://sodiumcyber.com/nomani-investment-scam-surges-62-using-ai-deepfake-ads-on-social-media/2025-12-24T15:55:03+00:00https://sodiumcyber.com/attacks-are-evolving-3-ways-to-protect-your-business-in-2026/2025-12-24T15:55:03+00:00https://sodiumcyber.com/sec-files-charges-over-14-million-crypto-scam-using-fake-ai-themed-investment-tips/2025-12-24T15:55:03+00:00https://sodiumcyber.com/evasive-panda-apt-poisons-dns-requests-to-deliver-mgbot/2025-12-24T15:55:03+00:00https://sodiumcyber.com/italy-fines-apple-e98-6-million-over-att-rules-limiting-app-store-competition/2025-12-24T15:55:03+00:00https://sodiumcyber.com/threatsday-bulletin-stealth-loaders-ai-chatbot-flaws-ai-exploits-docker-hack-and-15-more-stories/2025-12-25T15:56:03+00:00https://sodiumcyber.com/lastpass-2022-breach-led-to-years-long-cryptocurrency-thefts-trm-labs-finds/2025-12-25T15:56:03+00:00https://sodiumcyber.com/threat-landscape-for-industrial-automation-systems-in-q3-2025/2025-12-25T15:56:03+00:00https://sodiumcyber.com/fortinet-warns-of-active-exploitation-of-fortios-ssl-vpn-2fa-bypass-vulnerability/2025-12-25T15:56:03+00:00https://sodiumcyber.com/cisa-flags-actively-exploited-digiever-nvr-vulnerability-allowing-remote-code-execution/2025-12-25T15:56:03+00:00https://sodiumcyber.com/trust-wallet-chrome-extension-breach-caused-7-million-crypto-loss-via-malicious-code/2025-12-26T16:03:32+00:00https://sodiumcyber.com/china-linked-evasive-panda-ran-dns-poisoning-campaign-to-deliver-mgbot-malware/2025-12-26T16:03:32+00:00https://sodiumcyber.com/critical-langchain-core-vulnerability-exposes-secrets-via-serialization-injection/2025-12-26T16:03:32+00:00https://sodiumcyber.com/new-mongodb-flaw-lets-unauthenticated-attackers-read-uninitialized-memory/2025-12-27T16:05:27+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-mongodb-attacks-wallet-breaches-android-spyware-insider-crime-more/2025-12-29T16:08:21+00:00https://sodiumcyber.com/the-honeymyte-apt-evolves-with-a-kernel-mode-rootkit-and-a-toneshell-backdoor/2025-12-29T16:08:21+00:00https://sodiumcyber.com/mongodb-vulnerability-cve-2025-14847-under-active-exploitation-worldwide/2025-12-29T16:08:21+00:00https://sodiumcyber.com/27-malicious-npm-packages-used-as-phishing-infrastructure-to-steal-login-credentials/2025-12-29T16:08:21+00:00https://sodiumcyber.com/traditional-security-frameworks-leave-organizations-exposed-to-ai-specific-attack-vectors/2025-12-29T16:08:21+00:00https://sodiumcyber.com/silver-fox-targets-indian-users-with-tax-themed-emails-delivering-valleyrat-malware/2025-12-30T16:13:56+00:00https://sodiumcyber.com/how-to-integrate-ai-into-modern-soc-workflows/2025-12-30T16:13:56+00:00https://sodiumcyber.com/mustang-panda-uses-signed-kernel-mode-rootkit-to-load-toneshell-backdoor/2025-12-30T16:13:56+00:00https://sodiumcyber.com/ibm-warns-of-critical-api-connect-bug-allowing-remote-authentication-bypass/2025-12-31T16:14:44+00:00https://sodiumcyber.com/researchers-spot-modified-shai-hulud-worm-testing-payload-on-npm-registry/2025-12-31T16:14:44+00:00https://sodiumcyber.com/u-s-treasury-lifts-sanctions-on-three-individuals-linked-to-intellexa-and-predator-spyware/2025-12-31T16:14:44+00:00https://sodiumcyber.com/csa-issues-alert-on-critical-smartermail-bug-allowing-remote-code-execution/2025-12-31T16:14:44+00:00https://sodiumcyber.com/rondodox-botnet-exploits-critical-react2shell-flaw-to-hijack-iot-devices-and-web-servers/2026-01-01T16:15:38+00:00https://sodiumcyber.com/how-to-browse-faster-and-get-more-done-using-adapt-browser/2026-01-01T16:15:38+00:00https://sodiumcyber.com/trust-wallet-chrome-extension-hack-drains-8-5m-via-shai-hulud-supply-chain-attack/2026-01-01T16:15:38+00:00https://sodiumcyber.com/darkspectre-browser-extension-campaigns-exposed-after-impacting-8-8-million-users-worldwide/2026-01-01T16:15:38+00:00https://sodiumcyber.com/transparent-tribe-launches-new-rat-attacks-against-indian-government-and-academia/2026-01-02T16:16:00+00:00https://sodiumcyber.com/the-roi-problem-in-attack-surface-management/2026-01-02T16:16:00+00:00https://sodiumcyber.com/cybercriminals-abuse-google-cloud-email-feature-in-multi-stage-phishing-campaign/2026-01-02T16:16:00+00:00https://sodiumcyber.com/threatsday-bulletin-ghostad-drain-macos-attacks-proxy-botnets-cloud-exploits-and-12-stories/2026-01-02T16:16:00+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-iot-exploits-wallet-breaches-rogue-extensions-ai-abuse-more/2026-01-05T16:19:26+00:00https://sodiumcyber.com/the-state-of-cybersecurity-in-2025-key-segments-insights-and-innovations/2026-01-05T16:19:26+00:00https://sodiumcyber.com/bitfinex-hack-convict-ilya-lichtenstein-released-early-under-u-s-first-step-act/2026-01-05T16:19:26+00:00https://sodiumcyber.com/new-vvs-stealer-malware-targets-discord-accounts-via-obfuscated-python-code/2026-01-05T16:19:26+00:00https://sodiumcyber.com/fake-booking-emails-redirect-hotel-staff-to-fake-bsod-pages-delivering-dcrat/2026-01-06T16:22:34+00:00https://sodiumcyber.com/what-is-identity-dark-matter/2026-01-06T16:22:34+00:00https://sodiumcyber.com/vs-code-forks-recommend-missing-extensions-creating-supply-chain-risk-in-open-vsx/2026-01-06T16:22:34+00:00https://sodiumcyber.com/new-n8n-vulnerability-9-9-cvss-lets-authenticated-users-execute-system-commands/2026-01-06T16:22:34+00:00https://sodiumcyber.com/critical-adonisjs-bodyparser-flaw-cvss-9-2-enables-arbitrary-file-write-on-servers/2026-01-06T16:22:34+00:00https://sodiumcyber.com/critical-n8n-vulnerability-cvss-10-0-allows-unauthenticated-attackers-to-take-full-control/2026-01-07T16:23:03+00:00https://sodiumcyber.com/webinar-learn-how-ai-powered-zero-trust-detects-attacks-with-no-files-or-indicators/2026-01-07T16:23:03+00:00https://sodiumcyber.com/n8n-warns-of-cvss-10-0-rce-vulnerability-affecting-self-hosted-and-cloud-versions/2026-01-07T16:23:03+00:00https://sodiumcyber.com/the-future-of-cybersecurity-includes-non-human-employees/2026-01-07T16:23:03+00:00https://sodiumcyber.com/veeam-patches-critical-rce-vulnerability-with-cvss-9-0-in-backup-replication/2026-01-07T16:23:03+00:00https://sodiumcyber.com/china-linked-uat-7290-targets-telecoms-with-linux-malware-and-orb-nodes/2026-01-08T16:24:30+00:00https://sodiumcyber.com/threatsday-bulletin-rustfs-flaw-iranian-ops-webui-rce-cloud-leaks-and-12-more-stories/2026-01-08T16:24:30+00:00https://sodiumcyber.com/the-state-of-trusted-open-source/2026-01-08T16:24:30+00:00https://sodiumcyber.com/cisco-patches-ise-security-vulnerability-after-public-poc-exploit-release/2026-01-08T16:24:30+00:00https://sodiumcyber.com/researchers-uncover-nodecordrat-hidden-in-npm-bitcoin-themed-packages/2026-01-08T16:24:30+00:00https://sodiumcyber.com/russian-apt28-runs-credential-stealing-campaign-targeting-energy-and-policy-organizations/2026-01-09T16:26:49+00:00https://sodiumcyber.com/cybersecurity-predictions-2026-the-hype-we-can-ignore-and-the-risks-we-cant/2026-01-09T16:26:49+00:00https://sodiumcyber.com/trend-micro-apex-central-rce-flaw-scores-9-8-cvss-in-on-prem-windows-versions/2026-01-09T16:26:49+00:00https://sodiumcyber.com/cisa-retires-10-emergency-cybersecurity-directives-issued-between-2019-and-2024/2026-01-09T16:26:49+00:00https://sodiumcyber.com/a-big-finish-to-2025-in-decembers-patch-tuesday/2026-01-09T16:26:49+00:00https://sodiumcyber.com/muddywater-launches-rustywater-rat-via-spear-phishing-across-middle-east-sectors/2026-01-10T16:27:32+00:00https://sodiumcyber.com/europol-arrests-34-black-axe-members-in-spain-over-e5-9m-fraud-and-organized-crime/2026-01-10T16:27:32+00:00https://sodiumcyber.com/human-in-the-loop-security-will-define-2026-predictions-from-sophos-experts/2026-01-10T16:27:32+00:00https://sodiumcyber.com/china-linked-hackers-exploit-vmware-esxi-zero-days-to-escape-virtual-machines/2026-01-10T16:27:32+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-ai-automation-exploits-telecom-espionage-prompt-poaching-more/2026-01-12T16:54:55+00:00https://sodiumcyber.com/year-in-review-2025-the-major-headlines-and-moments-from-sophos-this-year/2026-01-12T16:54:55+00:00https://sodiumcyber.com/gobruteforcer-botnet-targets-crypto-project-databases-by-exploiting-weak-credentials/2026-01-12T16:54:55+00:00https://sodiumcyber.com/anthropic-launches-claude-ai-for-healthcare-with-secure-health-record-access/2026-01-12T16:54:55+00:00https://sodiumcyber.com/webinar-securing-agentic-ai-from-mcps-and-tool-access-to-shadow-api-key-sprawl/2026-01-13T16:57:38+00:00https://sodiumcyber.com/new-advanced-linux-voidlink-malware-targets-cloud-and-container-environments/2026-01-13T16:57:38+00:00https://sodiumcyber.com/what-should-we-learn-from-how-attackers-leveraged-ai-in-2025/2026-01-13T16:57:38+00:00https://sodiumcyber.com/servicenow-patches-critical-ai-platform-flaw-allowing-unauthenticated-user-impersonation/2026-01-13T16:57:38+00:00https://sodiumcyber.com/new-malware-campaign-delivers-remcos-rat-through-multi-stage-windows-attack/2026-01-13T16:57:38+00:00https://sodiumcyber.com/ai-agents-are-becoming-privilege-escalation-paths/2026-01-14T16:58:08+00:00https://sodiumcyber.com/hackers-exploit-c-ares-dll-side-loading-to-bypass-security-and-deploy-malware/2026-01-14T16:58:08+00:00https://sodiumcyber.com/fortinet-fixes-critical-fortisiem-flaw-allowing-unauthenticated-remote-code-execution/2026-01-14T16:58:08+00:00https://sodiumcyber.com/new-research-64-of-3rd-party-applications-access-sensitive-data-without-justification/2026-01-14T16:58:08+00:00https://sodiumcyber.com/microsoft-fixes-114-windows-flaws-in-january-2026-patch-one-actively-exploited/2026-01-14T16:58:08+00:00https://sodiumcyber.com/critical-wordpress-modular-ds-plugin-flaw-actively-exploited-to-gain-admin-access/2026-01-15T17:16:57+00:00https://sodiumcyber.com/researchers-reveal-reprompt-attack-allowing-single-click-data-exfiltration-from-microsoft-copilot/2026-01-15T17:16:57+00:00https://sodiumcyber.com/threatsday-bulletin-ai-voice-cloning-exploit-wi-fi-kill-switch-plc-vulns-and-14-more-stories/2026-01-15T17:16:57+00:00https://sodiumcyber.com/model-security-is-the-wrong-frame-the-real-risk-is-workflow-security/2026-01-15T17:16:57+00:00https://sodiumcyber.com/4-outdated-habits-destroying-your-socs-mttr-in-2026/2026-01-15T17:16:57+00:00https://sodiumcyber.com/five-malicious-chrome-extensions-impersonate-workday-and-netsuite-to-hijack-accounts/2026-01-16T17:20:00+00:00https://sodiumcyber.com/your-digital-footprint-can-lead-right-to-your-front-door/2026-01-16T17:20:00+00:00https://sodiumcyber.com/lotuslite-backdoor-targets-u-s-policy-entities-using-venezuela-themed-spear-phishing/2026-01-16T17:20:00+00:00https://sodiumcyber.com/china-linked-apt-exploited-sitecore-zero-day-in-critical-infrastructure-intrusions/2026-01-16T17:20:00+00:00https://sodiumcyber.com/cisco-patches-zero-day-rce-exploited-by-china-linked-apt-in-secure-email-gateways/2026-01-16T17:20:00+00:00https://sodiumcyber.com/openai-to-show-ads-in-chatgpt-for-logged-in-u-s-adults-on-free-and-go-plans/2026-01-17T17:23:13+00:00https://sodiumcyber.com/gootloader-malware-uses-500-1000-concatenated-zip-archives-to-evade-detection/2026-01-17T17:23:13+00:00https://sodiumcyber.com/black-basta-ransomware-leader-added-to-eu-most-wanted-and-interpol-red-notice/2026-01-18T17:26:15+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-fortinet-exploits-redline-clipjack-ntlm-crack-copilot-attack-more/2026-01-19T17:27:33+00:00https://sodiumcyber.com/devops-saas-downtime-the-high-and-hidden-costs-for-cloud-first-businesses/2026-01-19T17:27:33+00:00https://sodiumcyber.com/new-stackwarp-hardware-flaw-breaks-amd-sev-snp-protections-on-zen-1-5-cpus/2026-01-19T17:27:33+00:00https://sodiumcyber.com/crashfix-chrome-extension-delivers-modelorat-using-clickfix-style-browser-crash-lures/2026-01-19T17:27:33+00:00https://sodiumcyber.com/security-bug-in-stealc-malware-panel-let-researchers-spy-on-threat-actor-operations/2026-01-19T17:27:33+00:00https://sodiumcyber.com/three-flaws-in-anthropic-mcp-git-server-enable-file-access-and-code-execution/2026-01-20T17:27:49+00:00https://sodiumcyber.com/hackers-use-linkedin-messages-to-spread-rat-malware-through-dll-sideloading/2026-01-20T17:27:49+00:00https://sodiumcyber.com/the-hidden-risk-of-orphan-accounts/2026-01-20T17:27:49+00:00https://sodiumcyber.com/evelyn-stealer-malware-abuses-vs-code-extensions-to-steal-developer-credentials-and-crypto/2026-01-20T17:27:49+00:00https://sodiumcyber.com/cloudflare-fixes-acme-validation-bug-allowing-waf-bypass-to-origin-servers/2026-01-20T17:27:49+00:00https://sodiumcyber.com/tamperedchef-serves-bad-ads-with-infostealers-as-the-main-course/2026-01-21T17:29:15+00:00https://sodiumcyber.com/zoom-and-gitlab-release-security-updates-fixing-rce-dos-and-2fa-bypass-flaws/2026-01-21T17:29:15+00:00https://sodiumcyber.com/webinar-how-smart-mssps-using-ai-to-boost-margins-with-half-the-staff/2026-01-21T17:29:15+00:00https://sodiumcyber.com/exposure-assessment-platforms-signal-a-shift-in-focus/2026-01-21T17:29:15+00:00https://sodiumcyber.com/critical-gnu-inetutils-telnetd-flaw-lets-attackers-bypass-login-and-gain-root-access/2026-01-22T17:29:54+00:00https://sodiumcyber.com/threatsday-bulletin-pixel-zero-click-redis-rce-china-c2s-rat-ads-crypto-scams-15-stories/2026-01-22T17:29:54+00:00https://sodiumcyber.com/filling-the-most-common-gaps-in-google-workspace-security/2026-01-22T17:29:54+00:00https://sodiumcyber.com/malicious-pypi-package-impersonates-sympy-deploys-xmrig-miner-on-linux-hosts/2026-01-22T17:29:54+00:00https://sodiumcyber.com/smartermail-auth-bypass-exploited-in-the-wild-two-days-after-patch-release/2026-01-22T17:29:54+00:00https://sodiumcyber.com/cisa-updates-kev-catalog-with-four-actively-exploited-software-vulnerabilities/2026-01-23T17:30:04+00:00https://sodiumcyber.com/fortinet-confirms-active-forticloud-sso-bypass-on-fully-patched-fortigate-firewalls/2026-01-23T17:30:04+00:00https://sodiumcyber.com/tiktok-forms-u-s-joint-venture-to-continue-operations-under-2025-executive-order/2026-01-23T17:30:04+00:00https://sodiumcyber.com/phishing-attack-uses-stolen-credentials-to-install-logmein-rmm-for-persistent-access/2026-01-23T17:30:04+00:00https://sodiumcyber.com/microsoft-flags-multi-stage-aitm-phishing-and-bec-attacks-targeting-energy-firms/2026-01-23T17:30:04+00:00https://sodiumcyber.com/multi-stage-phishing-campaign-targets-russia-with-amnesia-rat-and-ransomware/2026-01-24T17:31:15+00:00https://sodiumcyber.com/new-dynowiper-malware-used-in-attempted-sandworm-attack-on-polish-power-sector/2026-01-24T17:31:15+00:00https://sodiumcyber.com/who-approved-this-agent-rethinking-access-accountability-and-risk-in-the-age-of-ai-agents/2026-01-24T17:31:15+00:00https://sodiumcyber.com/cisa-adds-actively-exploited-vmware-vcenter-flaw-cve-2024-37079-to-kev-catalog/2026-01-24T17:31:15+00:00https://sodiumcyber.com/indian-users-targeted-in-tax-phishing-campaign-delivering-blackmoon-malware/2026-01-26T17:34:48+00:00https://sodiumcyber.com/malicious-vs-code-ai-extensions-with-1-5-million-installs-steal-developer-source-code/2026-01-26T17:34:48+00:00https://sodiumcyber.com/generative-ai-and-cybersecurity-what-sophos-experts-expect-in-2026/2026-01-26T17:34:48+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-firewall-flaws-ai-built-malware-browser-traps-critical-cves-more/2026-01-26T17:34:48+00:00https://sodiumcyber.com/microsoft-office-vulnerability-cve-2026-21509-in-active-exploitation/2026-01-27T17:35:40+00:00https://sodiumcyber.com/clickfix-attacks-expand-using-fake-captchas-microsoft-scripts-and-trusted-web-services/2026-01-27T17:35:40+00:00https://sodiumcyber.com/ctem-in-practice-prioritization-validation-and-outcomes-that-matter/2026-01-27T17:35:40+00:00https://sodiumcyber.com/microsoft-office-zero-day-cve-2026-21509-emergency-patch-issued-for-active-exploitation/2026-01-27T17:35:40+00:00https://sodiumcyber.com/critical-vm2-node-js-flaw-allows-sandbox-escape-and-arbitrary-code-execution/2026-01-28T17:35:45+00:00https://sodiumcyber.com/two-high-severity-n8n-flaws-allow-authenticated-remote-code-execution/2026-01-28T17:35:45+00:00https://sodiumcyber.com/from-triage-to-threat-hunts-how-ai-accelerates-secops/2026-01-28T17:35:45+00:00https://sodiumcyber.com/mustang-panda-deploys-updated-coolclient-backdoor-in-government-cyber-attacks/2026-01-28T17:35:45+00:00https://sodiumcyber.com/password-reuse-in-disguise-an-often-missed-risky-workaround/2026-01-28T17:35:45+00:00https://sodiumcyber.com/supply-chain-attack-on-escan-antivirus-detecting-and-remediating-malicious-updates/2026-01-29T17:36:32+00:00https://sodiumcyber.com/threatsday-bulletin-new-rces-darknet-busts-kernel-bugs-25-more-stories/2026-01-29T17:36:32+00:00https://sodiumcyber.com/survey-of-100-energy-systems-reveals-critical-ot-cybersecurity-gaps/2026-01-29T17:36:32+00:00https://sodiumcyber.com/3-decisions-cisos-need-to-make-to-prevent-downtime-risk-in-2026/2026-01-29T17:36:32+00:00https://sodiumcyber.com/solarwinds-fixes-four-critical-web-help-desk-flaws-with-unauthenticated-rce-and-auth-bypass/2026-01-29T17:36:32+00:00https://sodiumcyber.com/researchers-uncover-chrome-extensions-abusing-affiliate-links-and-stealing-chatgpt-access/2026-01-30T17:36:58+00:00https://sodiumcyber.com/china-linked-uat-8099-targets-iis-servers-in-asia-with-badiis-seo-malware/2026-01-30T17:36:58+00:00https://sodiumcyber.com/badges-bytes-and-blackmail/2026-01-30T17:36:58+00:00https://sodiumcyber.com/ex-google-engineer-convicted-for-stealing-2000-ai-trade-secrets-for-china-startup/2026-01-30T17:36:58+00:00https://sodiumcyber.com/smartermail-fixes-critical-unauthenticated-rce-flaw-with-cvss-9-3-score/2026-01-30T17:36:58+00:00https://sodiumcyber.com/iran-linked-redkitten-cyber-campaign-targets-human-rights-ngos-and-activists/2026-01-31T17:37:51+00:00https://sodiumcyber.com/mandiant-finds-shinyhunters-style-vishing-attacks-stealing-mfa-to-breach-saas-platforms/2026-01-31T17:37:51+00:00https://sodiumcyber.com/cert-polska-details-coordinated-cyber-attacks-on-30-wind-and-solar-farms/2026-01-31T17:37:51+00:00https://sodiumcyber.com/openclaw-bug-enables-one-click-remote-code-execution-via-malicious-link/2026-02-02T17:42:22+00:00https://sodiumcyber.com/microsoft-begins-ntlm-phase-out-with-three-stage-plan-to-move-windows-to-kerberos/2026-02-02T17:42:22+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-proxy-botnet-office-zero-day-mongodb-ransoms-ai-hijacks-new-threats/2026-02-02T17:42:22+00:00https://sodiumcyber.com/securing-the-mid-market-across-the-complete-threat-lifecycle/2026-02-02T17:42:22+00:00https://sodiumcyber.com/notepad-official-update-mechanism-hijacked-to-deliver-malware-to-select-users/2026-02-02T17:42:22+00:00https://sodiumcyber.com/webinar-the-smarter-soc-blueprint-learn-what-to-build-buy-and-automate/2026-02-03T17:43:07+00:00https://sodiumcyber.com/hackers-exploit-metro4shell-rce-flaw-in-react-native-cli-npm-package/2026-02-03T17:43:07+00:00https://sodiumcyber.com/when-cloud-outages-ripple-across-the-internet/2026-02-03T17:43:07+00:00https://sodiumcyber.com/apt28-uses-microsoft-office-cve-2026-21509-in-espionage-focused-malware-attacks/2026-02-03T17:43:07+00:00https://sodiumcyber.com/the-notepad-supply-chain-attack-unnoticed-execution-chains-and-new-iocs/2026-02-03T17:43:07+00:00https://sodiumcyber.com/china-linked-amaranth-dragon-exploits-winrar-flaw-in-espionage-campaigns/2026-02-04T17:44:28+00:00https://sodiumcyber.com/orchid-security-introduces-continuous-identity-observability-for-enterprise-applications/2026-02-04T17:44:28+00:00https://sodiumcyber.com/the-first-90-seconds-how-early-decisions-shape-incident-response-investigations/2026-02-04T17:44:28+00:00https://sodiumcyber.com/microsoft-warns-python-infostealers-target-macos-via-fake-ads-and-installers/2026-02-04T17:44:28+00:00https://sodiumcyber.com/eclipse-foundation-mandates-pre-publish-security-checks-for-open-vsx-extensions/2026-02-04T17:44:28+00:00https://sodiumcyber.com/threatsday-bulletin-codespaces-rce-asyncrat-c2-byovd-abuse-ai-cloud-intrusions-15-stories/2026-02-05T17:45:55+00:00https://sodiumcyber.com/the-buyers-guide-to-ai-usage-control/2026-02-05T17:45:55+00:00https://sodiumcyber.com/infy-hackers-resume-operations-with-new-c2-servers-after-iran-internet-blackout-ends/2026-02-05T17:45:55+00:00https://sodiumcyber.com/stan-ghouls-targeting-russia-and-uzbekistan-with-netsupport-rat/2026-02-05T17:45:55+00:00https://sodiumcyber.com/critical-n8n-flaw-cve-2026-25049-enables-system-command-execution-via-malicious-workflows/2026-02-05T17:45:55+00:00https://sodiumcyber.com/china-linked-dknife-aitm-framework-targets-routers-for-traffic-hijacking-malware-delivery/2026-02-06T17:47:32+00:00https://sodiumcyber.com/cisa-orders-removal-of-unsupported-edge-devices-to-reduce-federal-network-risk/2026-02-06T17:47:32+00:00https://sodiumcyber.com/asian-state-backed-group-tgr-sta-1030-breaches-70-government-infrastructure-entities/2026-02-06T17:47:32+00:00https://sodiumcyber.com/how-samsung-knox-helps-stop-your-network-security-breach/2026-02-06T17:47:32+00:00https://sodiumcyber.com/compromised-dydx-npm-and-pypi-packages-deliver-wallet-stealers-and-rat-malware/2026-02-06T17:47:32+00:00https://sodiumcyber.com/german-agencies-warn-of-signal-phishing-targeting-politicians-military-journalists/2026-02-07T17:58:11+00:00https://sodiumcyber.com/openclaw-integrates-virustotal-scanning-to-detect-malicious-clawhub-skills/2026-02-08T18:39:19+00:00https://sodiumcyber.com/china-linked-unc3886-targets-singapore-telecom-sector-in-cyber-espionage-campaign/2026-02-09T18:45:16+00:00https://sodiumcyber.com/solarwinds-web-help-desk-exploited-for-rce-in-multi-stage-attacks-on-exposed-servers/2026-02-09T18:45:16+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-ai-skill-malware-31tbps-ddos-notepad-hack-llm-backdoors-and-more/2026-02-09T18:45:16+00:00https://sodiumcyber.com/how-top-cisos-solve-burnout-and-speed-up-mttr-without-extra-hiring/2026-02-09T18:45:16+00:00https://sodiumcyber.com/bloody-wolf-targets-uzbekistan-russia-using-netsupport-rat-in-spear-phishing-campaign/2026-02-09T18:45:16+00:00https://sodiumcyber.com/dprk-operatives-impersonate-professionals-on-linkedin-to-infiltrate-companies/2026-02-10T18:45:22+00:00https://sodiumcyber.com/reynolds-ransomware-embeds-byovd-driver-to-disable-edr-security-tools/2026-02-10T18:45:22+00:00https://sodiumcyber.com/from-ransomware-to-residency-inside-the-rise-of-the-digital-parasite/2026-02-10T18:45:22+00:00https://sodiumcyber.com/fortinet-patches-critical-sqli-flaw-enabling-unauthenticated-code-execution/2026-02-10T18:45:22+00:00https://sodiumcyber.com/from-security-operations-to-security-leadership-sophos-ciso-advantage/2026-02-10T18:45:22+00:00https://sodiumcyber.com/apt36-and-sidecopy-launch-cross-platform-rat-campaigns-against-indian-entities/2026-02-11T18:46:01+00:00https://sodiumcyber.com/the-game-is-over-when-free-comes-at-too-high-a-price-what-we-know-about-renengine/2026-02-11T18:46:01+00:00https://sodiumcyber.com/over-60-software-vendors-issue-security-fixes-across-os-cloud-and-network-platforms/2026-02-11T18:46:01+00:00https://sodiumcyber.com/exposed-training-open-the-door-for-crypto-mining-in-fortune-500-cloud-environments/2026-02-11T18:46:01+00:00https://sodiumcyber.com/microsoft-patches-59-vulnerabilities-including-six-actively-exploited-zero-days/2026-02-11T18:46:01+00:00https://sodiumcyber.com/google-reports-state-backed-hackers-using-gemini-ai-for-recon-and-attack-support/2026-02-12T18:46:24+00:00https://sodiumcyber.com/lazarus-campaign-plants-malicious-packages-in-npm-and-pypi-ecosystems/2026-02-12T18:46:24+00:00https://sodiumcyber.com/threatsday-bulletin-ai-prompt-rce-claude-0-click-renengine-loader-auto-0-days-25-stories/2026-02-12T18:46:24+00:00https://sodiumcyber.com/the-ctem-divide-why-84-of-security-programs-are-falling-behind/2026-02-12T18:46:24+00:00https://sodiumcyber.com/83-of-ivanti-epmm-exploits-linked-to-single-ip-on-bulletproof-hosting-infrastructure/2026-02-12T18:46:24+00:00https://sodiumcyber.com/google-ties-suspected-russian-actor-to-canfail-malware-attacks-on-ukrainian-orgs/2026-02-13T18:46:32+00:00https://sodiumcyber.com/the-openclaw-experiment-is-a-warning-shot-for-enterprise-ai-security/2026-02-13T18:46:32+00:00https://sodiumcyber.com/google-links-china-iran-russia-north-korea-to-coordinated-defense-sector-cyber-operations/2026-02-13T18:46:32+00:00https://sodiumcyber.com/uat-9921-deploys-voidlink-malware-to-target-technology-and-financial-sectors/2026-02-13T18:46:32+00:00https://sodiumcyber.com/microsoft-discloses-dns-based-clickfix-attack-using-nslookup-for-malware-staging/2026-02-15T18:47:59+00:00https://sodiumcyber.com/weekly-recap-outlook-add-ins-hijack-0-day-patches-wormable-botnet-ai-malware/2026-02-16T18:49:35+00:00https://sodiumcyber.com/safe-and-inclusive-e-society-how-lithuania-is-bracing-for-ai-driven-cyber-fraud/2026-02-16T18:49:35+00:00https://sodiumcyber.com/new-zerodayrat-mobile-spyware-enables-real-time-surveillance-and-data-theft/2026-02-16T18:49:35+00:00https://sodiumcyber.com/new-chrome-zero-day-cve-2026-2441-under-active-attack-patch-released/2026-02-16T18:49:35+00:00https://sodiumcyber.com/researchers-show-copilot-and-grok-can-be-abused-as-malware-c2-proxies/2026-02-17T18:59:56+00:00https://sodiumcyber.com/keenadu-firmware-backdoor-infects-android-tablets-via-signed-ota-updates/2026-02-17T18:59:56+00:00https://sodiumcyber.com/smartloader-attack-uses-trojanized-oura-mcp-server-to-deploy-stealc-infostealer/2026-02-17T18:59:56+00:00https://sodiumcyber.com/webinar-how-modern-soc-teams-use-ai-and-context-to-investigate-cloud-breaches-faster/2026-02-17T18:59:56+00:00https://sodiumcyber.com/my-day-getting-my-hands-dirty-with-an-ndr-system/2026-02-17T18:59:56+00:00https://sodiumcyber.com/citizen-lab-finds-cellebrite-tool-used-on-kenyan-activists-phone-in-police-custody/2026-02-18T19:00:31+00:00https://sodiumcyber.com/grandstream-gxp1600-voip-phones-exposed-to-unauthenticated-remote-code-execution/2026-02-18T19:00:31+00:00https://sodiumcyber.com/critical-flaws-found-in-four-vs-code-extensions-with-over-125-million-installs/2026-02-18T19:00:31+00:00https://sodiumcyber.com/cybersecurity-tech-predictions-for-2026-operating-in-a-world-of-permanent-instability/2026-02-18T19:00:31+00:00https://sodiumcyber.com/dell-recoverpoint-for-vms-zero-day-cve-2026-22769-exploited-since-mid-2024/2026-02-18T19:00:31+00:00https://sodiumcyber.com/promptspy-android-malware-abuses-gemini-ai-to-automate-recent-apps-persistence/2026-02-19T19:05:03+00:00https://sodiumcyber.com/interpol-operation-red-card-2-0-arrests-651-in-african-cybercrime-crackdown/2026-02-19T19:05:03+00:00https://sodiumcyber.com/microsoft-patches-cve-2026-26119-privilege-escalation-in-windows-admin-center/2026-02-19T19:05:03+00:00https://sodiumcyber.com/threatsday-bulletin-openssl-rce-foxit-0-days-copilot-leak-ai-password-flaws-20-stories/2026-02-19T19:05:03+00:00https://sodiumcyber.com/from-exposure-to-exploitation-how-ai-collapses-your-response-window/2026-02-19T19:05:03+00:00https://sodiumcyber.com/beyondtrust-flaw-used-for-web-shells-backdoors-and-data-exfiltration/2026-02-20T19:06:58+00:00https://sodiumcyber.com/cline-cli-2-3-0-supply-chain-attack-installed-openclaw-on-developer-systems/2026-02-20T19:06:58+00:00https://sodiumcyber.com/clickfix-campaign-abuses-compromised-sites-to-deploy-mimicrat-malware/2026-02-20T19:06:58+00:00https://sodiumcyber.com/identity-cyber-scores-the-new-metric-shaping-cyber-insurance-in-2026/2026-02-20T19:06:58+00:00https://sodiumcyber.com/ukrainian-national-sentenced-to-5-years-in-north-korea-it-worker-fraud-case/2026-02-20T19:06:58+00:00https://sodiumcyber.com/ai-assisted-threat-actor-compromises-600-fortigate-devices-in-55-countries/2026-02-21T19:17:02+00:00https://sodiumcyber.com/anthropic-launches-claude-code-security-for-ai-powered-vulnerability-scanning/2026-02-21T19:17:02+00:00https://sodiumcyber.com/cisa-adds-two-actively-exploited-roundcube-flaws-to-kev-catalog/2026-02-21T19:17:02+00:00https://sodiumcyber.com/ec-council-expands-ai-certification-portfolio-to-strengthen-u-s-ai-workforce-readiness-and-security/2026-02-21T19:17:02+00:00https://sodiumcyber.com/wormable-xmrig-campaign-uses-byovd-exploit-and-time-based-logic-bomb/2026-02-23T19:19:09+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-double-tap-skimmers-promptspy-ai-30tbps-ddos-docker-malware-more/2026-02-23T19:19:09+00:00https://sodiumcyber.com/how-exposed-endpoints-increase-risk-across-llm-infrastructure/2026-02-23T19:19:09+00:00https://sodiumcyber.com/malicious-npm-packages-harvest-crypto-keys-ci-secrets-and-api-tokens/2026-02-23T19:19:09+00:00https://sodiumcyber.com/muddywater-targets-mena-organizations-with-ghostfetch-char-and-http_vip/2026-02-23T19:19:09+00:00https://sodiumcyber.com/uac-0050-targets-european-financial-institution-with-spoofed-domain-and-rms-malware/2026-02-24T19:21:24+00:00https://sodiumcyber.com/identity-prioritization-isnt-a-backlog-problem-its-a-risk-math-problem/2026-02-24T19:21:24+00:00https://sodiumcyber.com/lazarus-group-uses-medusa-ransomware-in-middle-east-and-u-s-healthcare-attacks/2026-02-24T19:21:24+00:00https://sodiumcyber.com/unsolicitedbooker-targets-central-asian-telecoms-with-lucidoor-and-marssnake-backdoors/2026-02-24T19:21:24+00:00https://sodiumcyber.com/anthropic-says-chinese-ai-firms-used-16-million-claude-queries-to-copy-model/2026-02-24T19:21:24+00:00https://sodiumcyber.com/google-disrupts-unc2814-gridtide-campaign-after-53-breaches-across-42-countries/2026-02-25T19:21:28+00:00https://sodiumcyber.com/claude-code-flaws-allow-remote-code-execution-and-api-key-exfiltration/2026-02-25T19:21:28+00:00https://sodiumcyber.com/slh-offers-500-1000-per-call-to-recruit-women-for-it-help-desk-vishing-attacks/2026-02-25T19:21:28+00:00https://sodiumcyber.com/top-5-ways-broken-triage-increases-business-risk-instead-of-reducing-it/2026-02-25T19:21:28+00:00https://sodiumcyber.com/malicious-nuget-packages-stole-asp-net-data-npm-package-dropped-malware/2026-02-25T19:21:28+00:00https://sodiumcyber.com/aeternum-c2-botnet-stores-encrypted-commands-on-polygon-blockchain-to-evade-takedown/2026-02-26T19:30:04+00:00https://sodiumcyber.com/uat-10027-targets-u-s-education-and-healthcare-with-dohdoor-backdoor/2026-02-26T19:30:04+00:00https://sodiumcyber.com/threatsday-bulletin-kali-linux-claude-chrome-crash-traps-winrar-flaws-lockbit-15-stories/2026-02-26T19:30:04+00:00https://sodiumcyber.com/expert-recommends-prepare-for-pqc-right-now/2026-02-26T19:30:04+00:00https://sodiumcyber.com/microsoft-warns-developers-of-fake-next-js-job-repos-delivering-in-memory-malware/2026-02-26T19:30:04+00:00https://sodiumcyber.com/900-sangoma-freepbx-instances-compromised-in-ongoing-web-shell-attacks/2026-02-27T19:34:00+00:00https://sodiumcyber.com/malicious-go-crypto-module-steals-passwords-deploys-rekoobe-backdoor/2026-02-27T19:34:00+00:00https://sodiumcyber.com/scarcruft-uses-zoho-workdrive-and-usb-malware-to-breach-air-gapped-networks/2026-02-27T19:34:00+00:00https://sodiumcyber.com/trojanized-gaming-tools-spread-java-based-rat-via-browser-and-chat-platforms/2026-02-27T19:34:00+00:00https://sodiumcyber.com/meta-files-lawsuits-against-brazil-china-vietnam-advertisers-over-celeb-bait-scams/2026-02-27T19:34:00+00:00https://sodiumcyber.com/clawjacked-flaw-lets-malicious-sites-hijack-local-openclaw-ai-agents-via-websocket/2026-02-28T19:34:12+00:00https://sodiumcyber.com/thousands-of-public-google-cloud-api-keys-exposed-with-gemini-access-after-api-enablement/2026-02-28T19:34:12+00:00https://sodiumcyber.com/pentagon-designates-anthropic-supply-chain-risk-over-ai-military-dispute/2026-02-28T19:34:12+00:00https://sodiumcyber.com/doj-seizes-61-million-in-tether-linked-to-pig-butchering-crypto-scams/2026-02-28T19:34:12+00:00https://sodiumcyber.com/new-chrome-vulnerability-let-malicious-extensions-escalate-privileges-via-gemini-panel/2026-03-02T19:46:24+00:00https://sodiumcyber.com/google-develops-merkle-tree-certificates-to-enable-quantum-resistant-https-in-chrome/2026-03-02T19:46:24+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-sd-wan-0-day-critical-cves-telegram-probe-smart-tv-proxy-sdk-and-more/2026-03-02T19:46:24+00:00https://sodiumcyber.com/how-to-protect-your-saas-from-bot-attacks-with-safeline-waf/2026-03-02T19:46:24+00:00https://sodiumcyber.com/apt28-tied-to-cve-2026-21513-mshtml-0-day-exploited-before-feb-2026-patch-tuesday/2026-03-02T19:46:24+00:00https://sodiumcyber.com/fake-tech-support-spam-deploys-customized-havoc-c2-across-organizations/2026-03-03T19:48:19+00:00https://sodiumcyber.com/building-a-high-impact-tier-1-the-3-steps-cisos-must-follow/2026-03-03T19:48:19+00:00https://sodiumcyber.com/open-source-cyberstrikeai-deployed-in-ai-driven-fortigate-attacks-across-55-countries/2026-03-03T19:48:19+00:00https://sodiumcyber.com/ai-agents-the-next-wave-identity-dark-matter-powerful-invisible-and-unmanaged/2026-03-03T19:48:19+00:00https://sodiumcyber.com/starkiller-phishing-suite-uses-aitm-reverse-proxy-to-bypass-multi-factor-authentication/2026-03-03T19:48:19+00:00https://sodiumcyber.com/149-hacktivist-ddos-attacks-hit-110-organizations-in-16-countries-after-middle-east-conflict/2026-03-04T19:50:05+00:00https://sodiumcyber.com/coruna-ios-exploit-kit-uses-23-exploits-across-five-chains-targeting-ios-13-17-2-1/2026-03-04T19:50:05+00:00https://sodiumcyber.com/new-rfp-template-for-ai-usage-control-and-ai-governance/2026-03-04T19:50:05+00:00https://sodiumcyber.com/fake-laravel-packages-on-packagist-deploy-rat-on-windows-macos-and-linux/2026-03-04T19:50:05+00:00https://sodiumcyber.com/apt41-linked-silver-dragon-targets-governments-using-cobalt-strike-and-google-drive-c2/2026-03-04T19:50:06+00:00https://sodiumcyber.com/cisco-confirms-active-exploitation-of-two-catalyst-sd-wan-manager-vulnerabilities/2026-03-05T19:51:52+00:00https://sodiumcyber.com/preparing-for-the-quantum-era-post-quantum-cryptography-webinar-for-security-leaders/2026-03-05T19:51:52+00:00https://sodiumcyber.com/threatsday-bulletin-ddr5-bot-scalping-samsung-tv-tracking-reddit-privacy-fine-more/2026-03-05T19:51:52+00:00https://sodiumcyber.com/dust-specter-targets-iraqi-officials-with-new-splitdrop-and-ghostform-malware/2026-03-05T19:51:52+00:00https://sodiumcyber.com/where-multi-factor-authentication-stops-and-credential-abuse-starts/2026-03-05T19:51:52+00:00https://sodiumcyber.com/transparent-tribe-uses-ai-to-mass-produce-malware-implants-in-campaign-targeting-india/2026-03-06T19:53:27+00:00https://sodiumcyber.com/multi-stage-voidgeist-malware-delivering-xworm-asyncrat-and-xeno-rat/2026-03-06T19:53:27+00:00https://sodiumcyber.com/the-msp-guide-to-using-ai-powered-risk-management-to-scale-cybersecurity/2026-03-06T19:53:27+00:00https://sodiumcyber.com/iran-linked-muddywater-hackers-target-u-s-networks-with-new-dindoor-backdoor/2026-03-06T19:53:27+00:00https://sodiumcyber.com/china-linked-hackers-use-terndoor-peertime-bruteentry-in-south-american-telecom-attacks/2026-03-06T19:53:27+00:00https://sodiumcyber.com/openai-codex-security-scanned-1-2-million-commits-and-found-10561-high-severity-issues/2026-03-07T19:53:35+00:00https://sodiumcyber.com/anthropic-finds-22-firefox-vulnerabilities-using-claude-opus-4-6-ai-model/2026-03-07T19:53:35+00:00https://sodiumcyber.com/malicious-npm-package-posing-as-openclaw-installer-deploys-rat-steals-macos-credentials/2026-03-09T19:55:22+00:00https://sodiumcyber.com/unc4899-breached-crypto-firm-after-developer-airdropped-trojanized-file-to-work-device/2026-03-09T19:55:22+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-qualcomm-0-day-ios-exploit-chains-airsnitch-attack-vibe-coded-malware/2026-03-09T19:55:22+00:00https://sodiumcyber.com/can-the-security-platform-finally-deliver-for-the-mid-market/2026-03-09T19:55:22+00:00https://sodiumcyber.com/chrome-extension-turns-malicious-after-ownership-transfer-enabling-code-injection-and-data-theft/2026-03-09T19:55:22+00:00https://sodiumcyber.com/how-to-stop-ai-data-leaks-a-webinar-guide-to-auditing-modern-agentic-workflows/2026-03-10T19:57:22+00:00https://sodiumcyber.com/fortigate-devices-exploited-to-breach-networks-and-steal-service-account-credentials/2026-03-10T19:57:22+00:00https://sodiumcyber.com/kadnap-malware-infects-14000-edge-devices-to-power-stealth-proxy-botnet/2026-03-10T19:57:22+00:00https://sodiumcyber.com/new-leakylooker-flaws-in-google-looker-studio-could-enable-cross-tenant-sql-queries/2026-03-10T19:57:22+00:00https://sodiumcyber.com/the-zero-day-scramble-is-avoidable-a-guide-to-attack-surface-reduction/2026-03-10T19:57:22+00:00https://sodiumcyber.com/researchers-trick-perplexitys-comet-ai-browser-into-phishing-scam-in-under-four-minutes/2026-03-11T19:57:25+00:00https://sodiumcyber.com/critical-n8n-flaws-allow-remote-code-execution-and-exposure-of-stored-credentials/2026-03-11T19:57:25+00:00https://sodiumcyber.com/meta-disables-150k-accounts-linked-to-southeast-asia-scam-centers-in-global-crackdown/2026-03-11T19:57:25+00:00https://sodiumcyber.com/dozens-of-vendors-patch-security-flaws-across-enterprise-software-and-network-devices/2026-03-11T19:57:25+00:00https://sodiumcyber.com/what-boards-must-demand-in-the-age-of-ai-automated-exploitation/2026-03-11T19:57:25+00:00https://sodiumcyber.com/rust-based-venon-malware-targets-33-brazilian-banks-with-credential-stealing-overlays/2026-03-12T20:07:01+00:00https://sodiumcyber.com/hive0163-uses-ai-assisted-slopoly-malware-for-persistent-access-in-ransomware-attacks/2026-03-12T20:07:01+00:00https://sodiumcyber.com/how-to-scale-phishing-detection-in-your-soc-3-steps-for-cisos/2026-03-12T20:07:02+00:00https://sodiumcyber.com/threatsday-bulletin-oauth-trap-edr-killer-signal-phishing-zombie-zip-ai-platform-hack-more/2026-03-12T20:07:02+00:00https://sodiumcyber.com/attackers-dont-just-send-phishing-emails-they-weaponize-your-socs-workload/2026-03-12T20:07:02+00:00https://sodiumcyber.com/chinese-hackers-target-southeast-asian-militaries-with-applechris-and-memfun-malware/2026-03-13T20:11:09+00:00https://sodiumcyber.com/meta-to-shut-down-instagram-end-to-end-encrypted-chat-support-starting-may-2026/2026-03-13T20:11:09+00:00https://sodiumcyber.com/interpol-dismantles-45000-malicious-ips-arrests-94-in-global-cybercrime/2026-03-13T20:11:09+00:00https://sodiumcyber.com/storm-2561-spreads-trojan-vpn-clients-via-seo-poisoning-to-steal-credentials/2026-03-13T20:11:09+00:00https://sodiumcyber.com/investigating-a-new-click-fix-variant/2026-03-13T20:11:09+00:00https://sodiumcyber.com/openclaw-ai-agent-flaws-could-enable-prompt-injection-and-data-exfiltration/2026-03-14T20:15:37+00:00https://sodiumcyber.com/glassworm-supply-chain-attack-abuses-72-open-vsx-extensions-to-target-developers/2026-03-14T20:15:37+00:00https://sodiumcyber.com/glassworm-attack-uses-stolen-github-tokens-to-force-push-malware-into-python-repos/2026-03-16T20:31:07+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-chrome-0-days-router-botnets-aws-breach-rogue-ai-agents-more/2026-03-16T20:31:07+00:00https://sodiumcyber.com/why-security-validation-is-becoming-agentic/2026-03-16T20:31:07+00:00https://sodiumcyber.com/clickfix-campaigns-spread-macsync-macos-infostealer-via-fake-ai-tool-installers/2026-03-16T20:31:07+00:00https://sodiumcyber.com/drillapp-backdoor-targets-ukraine-abuses-microsoft-edge-debugging-for-stealth-espionage/2026-03-16T20:31:07+00:00https://sodiumcyber.com/ai-flaws-in-amazon-bedrock-langsmith-and-sglang-enable-data-exfiltration-and-rce/2026-03-17T20:32:09+00:00https://sodiumcyber.com/leaknet-ransomware-uses-clickfix-via-hacked-sites-deploys-deno-in-memory-loader/2026-03-17T20:32:09+00:00https://sodiumcyber.com/ai-is-everywhere-but-cisos-are-still-securing-it-with-yesterdays-skills-and-tools-study-finds/2026-03-17T20:32:09+00:00https://sodiumcyber.com/konni-deploys-endrat-through-phishing-uses-kakaotalk-to-propagate-malware/2026-03-17T20:32:09+00:00https://sodiumcyber.com/cisa-flags-actively-exploited-wing-ftp-vulnerability-leaking-server-paths/2026-03-17T20:32:09+00:00https://sodiumcyber.com/ofac-sanctions-dprk-it-worker-network-funding-wmd-programs-through-fake-remote-jobs/2026-03-18T20:32:30+00:00https://sodiumcyber.com/interlock-ransomware-exploits-cisco-fmc-zero-day-cve-2026-20131-for-root-access/2026-03-18T20:32:30+00:00https://sodiumcyber.com/critical-unpatched-telnetd-flaw-cve-2026-32746-enables-unauthenticated-root-rce/2026-03-18T20:32:30+00:00https://sodiumcyber.com/claude-code-security-and-magecart-getting-the-threat-model-right/2026-03-18T20:32:30+00:00https://sodiumcyber.com/9-critical-ip-kvm-flaws-enable-unauthenticated-root-access-across-four-vendors/2026-03-18T20:32:30+00:00https://sodiumcyber.com/speagle-malware-hijacks-cobra-docguard-to-steal-data-via-compromised-servers/2026-03-19T20:43:59+00:00https://sodiumcyber.com/54-edr-killers-use-byovd-to-exploit-34-signed-vulnerable-drivers-and-disable-security/2026-03-19T20:43:59+00:00https://sodiumcyber.com/threatsday-bulletin-fortigate-raas-citrix-exploits-mcp-abuse-livechat-phish-more/2026-03-19T20:43:59+00:00https://sodiumcyber.com/new-perseus-android-banking-malware-monitors-notes-apps-to-extract-sensitive-data/2026-03-19T20:43:59+00:00https://sodiumcyber.com/how-ceros-gives-security-teams-visibility-and-control-in-claude-code/2026-03-19T20:43:59+00:00https://sodiumcyber.com/trivy-security-scanner-github-actions-breached-75-tags-hijacked-to-steal-ci-cd-secrets/2026-03-20T20:45:16+00:00https://sodiumcyber.com/critical-langflow-flaw-cve-2026-33017-triggers-attacks-within-20-hours-of-disclosure/2026-03-20T20:45:17+00:00https://sodiumcyber.com/google-adds-24-hour-wait-for-unverified-app-sideloading-to-reduce-malware-and-scams/2026-03-20T20:45:17+00:00https://sodiumcyber.com/the-importance-of-behavioral-analytics-in-ai-enabled-cyber-attacks/2026-03-20T20:45:17+00:00https://sodiumcyber.com/magento-polyshell-flaw-enables-unauthenticated-uploads-rce-and-account-takeover/2026-03-20T20:45:17+00:00https://sodiumcyber.com/fbi-warns-russian-hackers-target-signal-whatsapp-in-mass-phishing-attacks/2026-03-21T20:46:01+00:00https://sodiumcyber.com/oracle-patches-critical-cve-2026-21992-enabling-unauthenticated-rce-in-identity-manager/2026-03-21T20:46:01+00:00https://sodiumcyber.com/trivy-supply-chain-attack-triggers-self-spreading-canisterworm-across-47-npm-packages/2026-03-21T20:46:01+00:00https://sodiumcyber.com/cisa-flags-apple-craft-cms-laravel-bugs-in-kev-orders-patching-by-april-3-2026/2026-03-21T20:46:01+00:00https://sodiumcyber.com/north-korean-hackers-abuse-vs-code-auto-run-tasks-to-deploy-stoatwaffle-malware/2026-03-23T20:48:21+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-ci-cd-backdoor-fbi-buys-location-data-whatsapp-ditches-numbers-more/2026-03-23T20:48:21+00:00https://sodiumcyber.com/we-found-eight-attack-vectors-inside-aws-bedrock-heres-what-attackers-can-do-with-them/2026-03-23T20:48:21+00:00https://sodiumcyber.com/microsoft-warns-irs-phishing-hits-29000-users-deploys-rmm-malware/2026-03-23T20:48:21+00:00https://sodiumcyber.com/trivy-hack-spreads-infostealer-via-docker-triggers-worm-and-kubernetes-wiper/2026-03-23T20:48:21+00:00https://sodiumcyber.com/teampcp-backdoors-litellm-versions-1-82-7-1-82-8-likely-via-trivy-ci-cd-compromise/2026-03-24T20:57:47+00:00https://sodiumcyber.com/tax-search-ads-deliver-screenconnect-malware-using-huawei-driver-to-disable-edr/2026-03-24T20:57:47+00:00https://sodiumcyber.com/5-learnings-from-the-first-ever-gartner-market-guide-for-guardian-agents/2026-03-24T20:57:47+00:00https://sodiumcyber.com/hackers-use-fake-resumes-to-steal-enterprise-credentials-and-deploy-crypto-miner/2026-03-24T20:57:47+00:00https://sodiumcyber.com/the-hidden-cost-of-cybersecurity-specialization-losing-foundational-skills/2026-03-24T20:57:47+00:00https://sodiumcyber.com/leakbase-admin-arrested-in-russia-over-massive-stolen-credential-marketplace/2026-03-25T21:01:17+00:00https://sodiumcyber.com/glassworm-malware-uses-solana-dead-drops-to-deliver-rat-and-steal-browser-crypto-data/2026-03-25T21:01:17+00:00https://sodiumcyber.com/the-kill-chain-is-obsolete-when-your-ai-agent-is-the-threat/2026-03-25T21:01:17+00:00https://sodiumcyber.com/russian-hacker-sentenced-to-2-years-for-ta551-botnet-driven-ransomware-attacks/2026-03-25T21:01:17+00:00https://sodiumcyber.com/device-code-phishing-hits-340-microsoft-365-orgs-across-five-countries-via-oauth-abuse/2026-03-25T21:01:17+00:00https://sodiumcyber.com/china-linked-red-menshen-uses-stealthy-bpfdoor-implants-to-spy-via-telecom-networks/2026-03-26T21:14:41+00:00https://sodiumcyber.com/webinar-stop-guessing-learn-to-validate-your-defenses-against-real-attacks/2026-03-26T21:14:41+00:00https://sodiumcyber.com/claude-extension-flaw-enabled-zero-click-xss-prompt-injection-via-any-website/2026-03-26T21:14:41+00:00https://sodiumcyber.com/masters-of-imitation-how-hackers-and-art-forgers-perfect-the-art-of-deception/2026-03-26T21:14:41+00:00https://sodiumcyber.com/threatsday-bulletin-pqc-push-ai-vuln-hunting-pirated-traps-phishing-kits-20-more-stories/2026-03-26T21:14:41+00:00https://sodiumcyber.com/apple-sends-lock-screen-alerts-to-outdated-iphones-over-active-web-based-exploits/2026-03-27T21:16:23+00:00https://sodiumcyber.com/teampcp-pushes-malicious-telnyx-versions-to-pypi-hides-stealer-in-wav-files/2026-03-27T21:16:23+00:00https://sodiumcyber.com/open-vsx-bug-let-malicious-vs-code-extensions-bypass-pre-publish-security-checks/2026-03-27T21:16:23+00:00https://sodiumcyber.com/aitm-phishing-targets-tiktok-business-accounts-using-cloudflare-turnstile-evasion/2026-03-27T21:16:23+00:00https://sodiumcyber.com/we-are-at-war/2026-03-27T21:16:23+00:00https://sodiumcyber.com/iran-linked-hackers-breach-fbi-directors-personal-email-hit-stryker-with-wiper-attack/2026-03-28T21:41:19+00:00https://sodiumcyber.com/citrix-netscaler-under-active-recon-for-cve-2026-3055-cvss-9-3-memory-overread-bug/2026-03-28T21:41:19+00:00https://sodiumcyber.com/cisa-adds-cve-2025-53521-to-kev-after-active-f5-big-ip-apm-exploitation/2026-03-28T21:41:19+00:00https://sodiumcyber.com/ta446-deploys-darksword-ios-exploit-kit-in-targeted-spear-phishing-campaign/2026-03-28T21:41:19+00:00https://sodiumcyber.com/openai-patches-chatgpt-data-exfiltration-flaw-and-codex-github-token-vulnerability/2026-03-30T21:47:31+00:00https://sodiumcyber.com/deepload-malware-uses-clickfix-and-wmi-persistence-to-steal-browser-credentials/2026-03-30T21:47:31+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-telecom-sleeper-cells-llm-jailbreaks-apple-forces-u-k-age-checks-and-more/2026-03-30T21:47:31+00:00https://sodiumcyber.com/3-soc-process-fixes-that-unlock-tier-1-productivity/2026-03-30T21:47:31+00:00https://sodiumcyber.com/russian-ctrl-toolkit-delivered-via-malicious-lnk-files-hijacks-rdp-via-frp-tunnels/2026-03-30T21:47:31+00:00https://sodiumcyber.com/android-developer-verification-rollout-begins-ahead-of-september-enforcement/2026-03-31T21:56:31+00:00https://sodiumcyber.com/trueconf-zero-day-exploited-in-attacks-on-southeast-asian-government-networks/2026-03-31T21:56:31+00:00https://sodiumcyber.com/vertex-ai-vulnerability-exposes-google-cloud-data-and-private-artifacts/2026-03-31T21:56:31+00:00https://sodiumcyber.com/the-ai-arms-race-why-unified-exposure-management-is-becoming-a-boardroom-priority/2026-03-31T21:56:31+00:00https://sodiumcyber.com/silver-fox-expands-asia-cyber-campaign-with-atlascross-rat-and-fake-domains/2026-03-31T21:56:31+00:00https://sodiumcyber.com/cert-ua-impersonation-campaign-spread-agewheeze-malware-to-1-million-emails/2026-04-01T21:59:29+00:00https://sodiumcyber.com/microsoft-warns-of-whatsapp-delivered-vbs-malware-hijacking-windows-via-uac-bypass/2026-04-01T21:59:29+00:00https://sodiumcyber.com/block-the-prompt-not-the-work-the-end-of-doctor-no/2026-04-01T21:59:29+00:00https://sodiumcyber.com/casbaneiro-phishing-targets-latin-america-and-europe-using-dynamic-pdf-lures/2026-04-01T21:59:29+00:00https://sodiumcyber.com/new-chrome-zero-day-cve-2026-5281-under-active-exploitation-patch-released/2026-04-01T21:59:29+00:00https://sodiumcyber.com/hackers-exploit-cve-2025-55182-to-breach-766-next-js-hosts-steal-credentials/2026-04-02T22:02:21+00:00https://sodiumcyber.com/cisco-patches-9-8-cvss-imc-and-ssm-flaws-allowing-remote-system-compromise/2026-04-02T22:02:21+00:00https://sodiumcyber.com/threatsday-bulletin-pre-auth-chains-android-rootkits-cloudtrail-evasion-10-more-stories/2026-04-02T22:02:21+00:00https://sodiumcyber.com/researchers-uncover-mining-operation-using-iso-lures-to-spread-rats-and-crypto-miners/2026-04-02T22:02:21+00:00https://sodiumcyber.com/the-state-of-trusted-open-source-report/2026-04-02T22:02:21+00:00https://sodiumcyber.com/china-linked-ta416-targets-european-governments-with-plugx-and-oauth-based-phishing/2026-04-03T22:02:45+00:00https://sodiumcyber.com/microsoft-details-cookie-controlled-php-web-shells-persisting-via-cron-on-linux-servers/2026-04-03T22:02:45+00:00https://sodiumcyber.com/unc1069-social-engineering-of-axios-maintainer-led-to-npm-supply-chain-attack/2026-04-03T22:02:45+00:00https://sodiumcyber.com/why-third-party-risk-is-the-biggest-gap-in-your-clients-security-posture/2026-04-03T22:02:45+00:00https://sodiumcyber.com/new-sparkcat-variant-in-ios-android-apps-steals-crypto-wallet-recovery-phrase-images/2026-04-03T22:02:45+00:00https://sodiumcyber.com/285-million-drift-hack-traced-to-six-month-dprk-social-engineering-operation/2026-04-05T22:12:07+00:00https://sodiumcyber.com/36-malicious-npm-packages-exploited-redis-postgresql-to-deploy-persistent-implants/2026-04-05T22:12:07+00:00https://sodiumcyber.com/fortinet-patches-actively-exploited-cve-2026-35616-in-forticlient-ems/2026-04-05T22:12:07+00:00https://sodiumcyber.com/iran-linked-password-spraying-campaign-targets-300-israeli-microsoft-365-organizations/2026-04-06T22:13:00+00:00https://sodiumcyber.com/dprk-linked-hackers-use-github-as-c2-in-multi-stage-attacks-targeting-south-korea/2026-04-06T22:13:00+00:00https://sodiumcyber.com/multi-os-cyberattacks-how-socs-close-a-critical-risk-in-3-steps/2026-04-06T22:13:00+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-axios-hack-chrome-0-day-fortinet-exploits-paragon-spyware-and-more/2026-04-06T22:13:00+00:00https://sodiumcyber.com/how-litellm-turned-developer-machines-into-credential-vaults-for-attackers/2026-04-06T22:13:01+00:00https://sodiumcyber.com/russian-state-linked-apt28-exploits-soho-routers-in-global-dns-hijacking-campaign/2026-04-07T22:18:10+00:00https://sodiumcyber.com/webinar-how-to-close-identity-gaps-in-2026-before-ai-exploits-enterprise-risk/2026-04-07T22:18:10+00:00https://sodiumcyber.com/docker-cve-2026-34040-lets-attackers-bypass-authorization-and-gain-host-access/2026-04-07T22:18:10+00:00https://sodiumcyber.com/over-1000-exposed-comfyui-instances-targeted-in-cryptomining-botnet-campaign/2026-04-07T22:18:10+00:00https://sodiumcyber.com/the-hidden-cost-of-recurring-credential-incidents/2026-04-07T22:18:10+00:00https://sodiumcyber.com/new-chaos-variant-targets-misconfigured-cloud-deployments-adds-socks-proxy/2026-04-08T22:21:06+00:00https://sodiumcyber.com/masjesu-botnet-emerges-as-ddos-for-hire-service-targeting-global-iot-devices/2026-04-08T22:21:06+00:00https://sodiumcyber.com/apt28-deploys-prismex-malware-in-campaign-targeting-ukraine-and-nato-allies/2026-04-08T22:21:06+00:00https://sodiumcyber.com/shrinking-the-iam-attack-surface-through-identity-visibility-and-intelligence-platforms-ivip/2026-04-08T22:21:06+00:00https://sodiumcyber.com/anthropics-claude-mythos-finds-thousands-of-zero-day-flaws-across-major-systems/2026-04-08T22:21:06+00:00https://sodiumcyber.com/engagelab-sdk-flaw-exposed-50m-android-users-including-30m-crypto-wallets/2026-04-09T22:24:43+00:00https://sodiumcyber.com/uat-10362-targets-taiwanese-ngos-with-lucidrook-malware-in-spear-phishing-campaigns/2026-04-09T22:24:43+00:00https://sodiumcyber.com/threatsday-bulletin-hybrid-p2p-botnet-13-year-old-apache-rce-and-18-more-stories/2026-04-09T22:24:43+00:00https://sodiumcyber.com/the-hidden-security-risks-of-shadow-ai-in-enterprises/2026-04-09T22:24:43+00:00https://sodiumcyber.com/adobe-reader-zero-day-exploited-via-malicious-pdfs-since-december-2025/2026-04-09T22:24:43+00:00https://sodiumcyber.com/glassworm-campaign-uses-zig-dropper-to-infect-multiple-developer-ides/2026-04-10T22:27:44+00:00https://sodiumcyber.com/browser-extensions-are-the-new-ai-consumption-channel-that-no-one-is-talking-about/2026-04-10T22:27:44+00:00https://sodiumcyber.com/google-rolls-out-dbsc-in-chrome-146-to-block-session-theft-on-windows/2026-04-10T22:27:44+00:00https://sodiumcyber.com/marimo-rce-flaw-cve-2026-39987-exploited-within-10-hours-of-disclosure/2026-04-10T22:27:44+00:00https://sodiumcyber.com/backdoored-smart-slider-3-pro-update-distributed-via-compromised-nextend-servers/2026-04-10T22:27:44+00:00https://sodiumcyber.com/citizen-lab-law-enforcement-used-webloc-to-track-500-million-devices-via-ad-data/2026-04-11T22:30:59+00:00https://sodiumcyber.com/cpuid-breach-distributes-stx-rat-via-trojanized-cpu-z-and-hwmonitor-downloads/2026-04-12T22:38:28+00:00https://sodiumcyber.com/adobe-patches-actively-exploited-acrobat-reader-flaw-cve-2026-34621/2026-04-12T22:38:28+00:00https://sodiumcyber.com/janelarat-malware-targets-latin-american-banks-with-14739-attacks-in-brazil-in-2025/2026-04-13T22:44:04+00:00https://sodiumcyber.com/fbi-and-indonesian-police-dismantle-w3ll-phishing-network-behind-20m-fraud-attempts/2026-04-13T22:44:04+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-fiber-optic-spying-windows-rootkit-ai-vulnerability-hunting-and-more/2026-04-13T22:44:04+00:00https://sodiumcyber.com/your-mttd-looks-great-your-post-alert-gap-doesnt/2026-04-13T22:44:04+00:00https://sodiumcyber.com/north-koreas-apt37-uses-facebook-social-engineering-to-deliver-rokrat-malware/2026-04-13T22:44:04+00:00https://sodiumcyber.com/new-php-composer-flaws-enable-arbitrary-command-execution-patches-released/2026-04-14T22:45:46+00:00https://sodiumcyber.com/google-adds-rust-based-dns-parser-into-pixel-10-modem-to-enhance-security/2026-04-14T22:45:46+00:00https://sodiumcyber.com/ai-driven-pushpaganda-scam-exploits-google-discover-to-spread-scareware-and-ad-fraud/2026-04-14T22:45:46+00:00https://sodiumcyber.com/mirax-android-rat-turns-devices-into-socks5-proxies-reaching-220000-via-meta-ads/2026-04-14T22:45:46+00:00https://sodiumcyber.com/analysis-of-216m-security-findings-shows-a-4x-increase-in-critical-risk-2026-report/2026-04-14T22:45:46+00:00https://sodiumcyber.com/n8n-webhooks-abused-since-october-2025-to-deliver-malware-via-phishing-emails/2026-04-15T22:51:44+00:00https://sodiumcyber.com/actively-exploited-nginx-ui-flaw-cve-2026-33032-enables-full-nginx-server-takeover/2026-04-15T22:51:44+00:00https://sodiumcyber.com/april-patch-tuesday-fixes-critical-flaws-across-sap-adobe-microsoft-fortinet-and-more/2026-04-15T22:51:45+00:00https://sodiumcyber.com/deterministic-agentic-ai-the-architecture-exposure-validation-requires/2026-04-15T22:51:45+00:00https://sodiumcyber.com/microsoft-issues-patches-for-sharepoint-zero-day-and-168-other-new-vulnerabilities/2026-04-15T22:51:45+00:00https://sodiumcyber.com/newly-discovered-powmix-botnet-hits-czech-workers-using-randomized-c2-traffic/2026-04-16T22:51:50+00:00https://sodiumcyber.com/threatsday-bulletin-defender-0-day-sonicwall-brute-force-17-year-old-excel-rce-and-15-more-stories/2026-04-16T22:51:50+00:00https://sodiumcyber.com/webinar-find-and-eliminate-orphaned-non-human-identities-in-your-environment/2026-04-16T22:51:50+00:00https://sodiumcyber.com/cisco-patches-four-critical-identity-services-webex-flaws-enabling-code-execution/2026-04-16T22:51:50+00:00https://sodiumcyber.com/hidden-passenger-how-taboola-routes-logged-in-banking-sessions-to-temu/2026-04-16T22:51:50+00:00https://sodiumcyber.com/three-microsoft-defender-zero-days-actively-exploited-two-still-unpatched/2026-04-17T22:54:09+00:00https://sodiumcyber.com/google-blocks-8-3b-policy-violating-ads-in-2025-launches-android-17-privacy-overhaul/2026-04-17T22:54:09+00:00https://sodiumcyber.com/nist-limits-cve-enrichment-after-263-surge-in-vulnerability-submissions/2026-04-17T22:54:09+00:00https://sodiumcyber.com/operation-poweroff-seizes-53-ddos-domains-exposes-3-million-criminal-accounts/2026-04-17T22:54:09+00:00https://sodiumcyber.com/apache-activemq-cve-2026-34197-added-to-cisa-kev-amid-active-exploitation/2026-04-17T22:54:09+00:00https://sodiumcyber.com/13-74m-hack-shuts-down-sanctioned-grinex-exchange-after-intelligence-claims/2026-04-18T22:57:01+00:00https://sodiumcyber.com/mirai-variant-nexcorium-exploits-cve-2024-3721-to-hijack-tbk-dvrs-for-ddos-botnet/2026-04-18T22:57:01+00:00https://sodiumcyber.com/sglang-cve-2026-5760-cvss-9-8-enables-rce-via-malicious-gguf-model-files/2026-04-20T22:58:07+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-vercel-hack-push-fraud-qemu-abused-new-android-rats-emerge-more/2026-04-20T22:58:07+00:00https://sodiumcyber.com/why-most-ai-deployments-stall-after-the-demo/2026-04-20T22:58:07+00:00https://sodiumcyber.com/anthropic-mcp-design-vulnerability-enables-rce-threatening-ai-supply-chain/2026-04-20T22:58:07+00:00https://sodiumcyber.com/researchers-detect-zionsiphon-malware-targeting-israeli-water-desalination-ot-systems/2026-04-20T22:58:07+00:00https://sodiumcyber.com/systembc-c2-server-reveals-1570-victims-in-the-gentlemen-ransomware-operation/2026-04-21T23:07:54+00:00https://sodiumcyber.com/22-bridgebreak-flaws-expose-thousands-of-lantronix-and-silex-serial-to-ip-converters/2026-04-21T23:07:54+00:00https://sodiumcyber.com/ransomware-negotiator-pleads-guilty-to-aiding-blackcat-attacks-in-2023/2026-04-21T23:07:54+00:00https://sodiumcyber.com/5-places-where-mature-socs-keep-mttr-fast-and-others-waste-time/2026-04-21T23:07:54+00:00https://sodiumcyber.com/ngate-campaign-targets-brazil-trojanizes-handypay-to-steal-nfc-data-and-pins/2026-04-21T23:07:54+00:00https://sodiumcyber.com/malicious-kics-docker-images-and-vs-code-extensions-hit-checkmarx-supply-chain/2026-04-22T23:08:48+00:00https://sodiumcyber.com/self-propagating-supply-chain-worm-hijacks-npm-packages-to-steal-developer-tokens/2026-04-22T23:08:48+00:00https://sodiumcyber.com/harvester-deploys-linux-gogra-backdoor-in-south-asia-using-microsoft-graph-api/2026-04-22T23:08:48+00:00https://sodiumcyber.com/lotus-wiper-malware-targets-venezuelan-energy-systems-in-destructive-attack/2026-04-22T23:08:49+00:00https://sodiumcyber.com/toxic-combinations-when-cross-app-permissions-stack-into-risk/2026-04-22T23:08:49+00:00https://sodiumcyber.com/unc6692-impersonates-it-helpdesk-via-microsoft-teams-to-deploy-snow-malware/2026-04-23T23:09:51+00:00https://sodiumcyber.com/bitwarden-cli-compromised-in-ongoing-checkmarx-supply-chain-campaign/2026-04-23T23:09:51+00:00https://sodiumcyber.com/threatsday-bulletin-290m-defi-hack-macos-lotl-abuse-proxysmart-sim-farms-25-new-stories/2026-04-23T23:09:51+00:00https://sodiumcyber.com/webinar-mythos-reality-check-beating-automated-exploitation-at-ai-speed/2026-04-23T23:09:51+00:00https://sodiumcyber.com/project-glasswing-proved-ai-can-find-the-bugs-whos-going-to-fix-them/2026-04-23T23:09:51+00:00https://sodiumcyber.com/firestarter-backdoor-hit-federal-cisco-firepower-device-survives-security-patches/2026-04-24T23:26:09+00:00https://sodiumcyber.com/nasa-employees-duped-in-chinese-phishing-scheme-targeting-u-s-defense-software/2026-04-24T23:26:09+00:00https://sodiumcyber.com/bridging-the-ai-agent-authority-gap-continuous-observability-as-the-decision-engine/2026-04-24T23:26:09+00:00https://sodiumcyber.com/26-fakewallet-apps-found-on-apple-app-store-targeting-crypto-seed-phrases/2026-04-24T23:26:09+00:00https://sodiumcyber.com/tropic-trooper-uses-trojanized-sumatrapdf-and-github-to-deploy-adaptixc2/2026-04-24T23:26:09+00:00https://sodiumcyber.com/researchers-uncover-pre-stuxnet-fast16-malware-targeting-engineering-software/2026-04-25T23:29:20+00:00https://sodiumcyber.com/cisa-adds-4-exploited-flaws-to-kev-sets-may-2026-federal-deadline/2026-04-25T23:29:20+00:00https://sodiumcyber.com/checkmarx-confirms-github-repository-data-posted-on-dark-web-after-march-23-attack/2026-04-27T23:45:51+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-fast16-malware-xchat-launch-federal-backdoor-ai-employee-tracking-more/2026-04-27T23:45:51+00:00https://sodiumcyber.com/mythos-changed-the-math-on-vulnerability-discovery-most-teams-arent-ready-for-the-remediation-side/2026-04-27T23:45:51+00:00https://sodiumcyber.com/phantomcore-exploits-trueconf-vulnerabilities-to-breach-russian-networks/2026-04-27T23:45:51+00:00https://sodiumcyber.com/researchers-uncover-73-fake-vs-code-extensions-delivering-glassworm-v2-malware/2026-04-27T23:45:51+00:00https://sodiumcyber.com/researchers-discover-critical-github-cve-2026-3854-rce-flaw-exploitable-via-single-git-push/2026-04-28T23:46:12+00:00https://sodiumcyber.com/brazilian-lofygang-resurfaces-after-three-years-with-minecraft-lofystealer-campaign/2026-04-28T23:46:13+00:00https://sodiumcyber.com/vect-2-0-ransomware-irreversibly-destroys-files-over-131kb-on-windows-linux-esxi/2026-04-28T23:46:13+00:00https://sodiumcyber.com/why-secure-data-movement-is-the-zero-trust-bottleneck-nobody-talks-about/2026-04-28T23:46:13+00:00https://sodiumcyber.com/critical-unpatched-flaw-leaves-hugging-face-lerobot-open-to-unauthenticated-rce/2026-04-28T23:46:13+00:00https://sodiumcyber.com/sap-related-npm-packages-compromised-in-credential-stealing-supply-chain-attack/2026-04-29T23:46:58+00:00https://sodiumcyber.com/new-wave-of-dprk-attacks-uses-ai-inserted-npm-malware-fake-firms-and-rats/2026-04-29T23:46:58+00:00https://sodiumcyber.com/webinar-how-to-automate-exposure-validation-to-match-the-speed-of-ai-attacks/2026-04-29T23:46:58+00:00https://sodiumcyber.com/what-to-look-for-in-an-exposure-management-platform-and-what-most-of-them-get-wrong/2026-04-29T23:46:58+00:00https://sodiumcyber.com/critical-cpanel-authentication-vulnerability-identified-update-your-server-immediately/2026-04-29T23:46:58+00:00https://sodiumcyber.com/pytorch-lightning-and-intercom-client-hit-in-supply-chain-attacks-to-steal-credentials/2026-04-30T23:48:02+00:00https://sodiumcyber.com/threatsday-bulletin-sms-blaster-busts-openemr-flaws-600k-roblox-hacks-and-25-more-stories/2026-04-30T23:48:02+00:00https://sodiumcyber.com/new-python-backdoor-uses-tunneling-service-to-steal-browser-and-cloud-credentials/2026-04-30T23:48:02+00:00https://sodiumcyber.com/etherrat-distribution-spoofing-administrative-tools-via-github-facades/2026-04-30T23:48:02+00:00https://sodiumcyber.com/new-linux-copy-fail-vulnerability-enables-root-access-on-major-distributions/2026-04-30T23:48:02+00:00https://sodiumcyber.com/30000-facebook-accounts-hacked-via-google-appsheet-phishing-campaign/2026-05-01T23:50:43+00:00https://sodiumcyber.com/cybercrime-groups-using-vishing-and-sso-abuse-in-rapid-saas-extortion-attacks/2026-05-01T23:50:43+00:00https://sodiumcyber.com/china-linked-hackers-target-asian-governments-nato-state-journalists-and-activists/2026-05-01T23:50:43+00:00https://sodiumcyber.com/top-five-sales-challenges-costing-msps-cybersecurity-revenue/2026-05-01T23:50:43+00:00https://sodiumcyber.com/two-cybersecurity-professionals-get-4-year-sentences-in-blackcat-ransomware-attacks/2026-05-01T23:50:43+00:00https://sodiumcyber.com/trellix-confirms-source-code-breach-with-unauthorized-repository-access/2026-05-02T23:52:10+00:00https://sodiumcyber.com/cisa-adds-actively-exploited-linux-root-access-bug-cve-2026-31431-to-kev/2026-05-03T23:52:23+00:00https://sodiumcyber.com/phishing-campaign-hits-80-orgs-using-simplehelp-and-screenconnect-rmm-tools/2026-05-04T23:56:27+00:00https://sodiumcyber.com/progress-patches-critical-moveit-automation-bug-enabling-authentication-bypass/2026-05-04T23:56:27+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-ai-powered-phishing-android-spying-tool-linux-exploit-github-rce-more/2026-05-04T23:56:27+00:00https://sodiumcyber.com/2026-the-year-of-ai-assisted-attacks/2026-05-04T23:56:27+00:00https://sodiumcyber.com/silver-fox-deploys-abcdoor-malware-via-tax-themed-phishing-in-india-and-russia/2026-05-04T23:56:27+00:00https://sodiumcyber.com/critical-apache-http-2-flaw-cve-2026-23918-enables-dos-and-potential-rce/2026-05-05T23:56:49+00:00https://sodiumcyber.com/daemon-tools-supply-chain-attack-compromises-official-installers-with-malware/2026-05-05T23:56:49+00:00https://sodiumcyber.com/china-linked-uat-8302-targets-governments-using-shared-apt-malware-across-regions/2026-05-05T23:56:49+00:00https://sodiumcyber.com/the-back-door-attackers-know-about-and-most-security-teams-still-havent-closed/2026-05-05T23:56:49+00:00https://sodiumcyber.com/metinfo-cms-cve-2026-29014-exploited-for-remote-code-execution-attacks/2026-05-05T23:56:49+00:00https://sodiumcyber.com/mirai-based-xlabs_v1-botnet-exploits-adb-to-hijack-iot-devices-for-ddos-attacks/2026-05-06T23:57:47+00:00https://sodiumcyber.com/muddywater-uses-microsoft-teams-to-steal-credentials-in-false-flag-ransomware-attack/2026-05-06T23:57:47+00:00https://sodiumcyber.com/the-hacker-news-launches-cybersecurity-stars-awards-2026-submissions-now-open/2026-05-06T23:57:47+00:00https://sodiumcyber.com/your-ai-agents-are-already-inside-the-perimeter-do-you-know-what-theyre-doing/2026-05-06T23:57:47+00:00https://sodiumcyber.com/googles-android-apps-get-public-verification-to-stop-supply-chain-attacks/2026-05-06T23:57:47+00:00https://sodiumcyber.com/ivanti-epmm-cve-2026-6973-rce-under-active-exploitation-grants-admin-level-access/2026-05-07T23:58:31+00:00https://sodiumcyber.com/pcpjack-credential-stealer-exploits-5-cves-to-spread-worm-like-across-cloud-systems/2026-05-07T23:58:31+00:00https://sodiumcyber.com/one-click-total-shutdown-the-patient-zero-webinar-on-killing-stealth-breaches/2026-05-07T23:58:31+00:00https://sodiumcyber.com/pan-os-rce-exploit-under-active-use-enabling-root-access-and-espionage/2026-05-07T23:58:31+00:00https://sodiumcyber.com/threatsday-bulletin-edge-plaintext-passwords-ics-0-days-patch-or-die-alerts-and-25-new-stories/2026-05-07T23:58:31+00:00https://sodiumcyber.com/tclbanker-banking-trojan-targets-financial-platforms-via-whatsapp-and-outlook-worms/2026-05-09T00:01:22+00:00https://sodiumcyber.com/fake-call-history-apps-stole-payments-from-users-after-7-3-million-play-store-downloads/2026-05-09T00:01:22+00:00https://sodiumcyber.com/quasar-linux-rat-steals-developer-credentials-for-software-supply-chain-compromise/2026-05-09T00:01:22+00:00https://sodiumcyber.com/one-missed-threat-per-week-what-25m-alerts-reveal-about-low-severity-risk/2026-05-09T00:01:22+00:00https://sodiumcyber.com/cpanel-whm-release-fixes-for-three-new-vulnerabilities-patch-now/2026-05-10T00:06:54+00:00https://sodiumcyber.com/ollama-out-of-bounds-read-vulnerability-allows-remote-process-memory-leak/2026-05-11T00:07:38+00:00https://sodiumcyber.com/teampcp-compromises-checkmarx-jenkins-ast-plugin-weeks-after-kics-supply-chain-attack/2026-05-12T00:07:48+00:00https://sodiumcyber.com/cpanel-cve-2026-41940-under-active-exploitation-to-deploy-filemanager-backdoor/2026-05-12T00:07:48+00:00https://sodiumcyber.com/hackers-used-ai-to-develop-first-known-zero-day-2fa-bypass-for-mass-exploitation/2026-05-12T00:07:48+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-linux-rootkit-macos-crypto-stealer-websocket-skimmers-and-more/2026-05-12T00:07:48+00:00https://sodiumcyber.com/your-purple-team-isnt-purple-its-just-red-and-blue-in-the-same-room/2026-05-12T00:07:48+00:00https://sodiumcyber.com/new-exim-bdat-vulnerability-exposes-gnutls-builds-to-potential-code-execution/2026-05-13T00:08:06+00:00https://sodiumcyber.com/rubygems-suspends-new-signups-after-hundreds-of-malicious-packages-are-uploaded/2026-05-13T00:08:06+00:00https://sodiumcyber.com/new-trickmo-variant-uses-ton-c2-and-socks5-to-create-android-network-pivots/2026-05-13T00:08:06+00:00https://sodiumcyber.com/webinar-what-the-riskiest-soc-alerts-go-unanswered-and-how-radiant-security-can-help/2026-05-13T00:08:06+00:00https://sodiumcyber.com/mini-shai-hulud-worm-compromises-tanstack-mistral-ai-guardrails-ai-more-packages/2026-05-13T00:08:06+00:00https://sodiumcyber.com/microsofts-mdash-ai-system-finds-16-windows-flaws-fixed-in-patch-tuesday/2026-05-14T00:12:51+00:00https://sodiumcyber.com/azerbaijani-energy-firm-hit-by-repeated-microsoft-exchange-exploitation/2026-05-14T00:12:51+00:00https://sodiumcyber.com/webinar-how-modern-attack-paths-cross-code-pipelines-and-cloud/2026-05-14T00:12:51+00:00https://sodiumcyber.com/most-remediation-programs-never-confirm-the-fix-actually-worked/2026-05-14T00:12:51+00:00https://sodiumcyber.com/microsoft-patches-138-vulnerabilities-including-dns-and-netlogon-rce-flaws/2026-05-14T00:12:51+00:00https://sodiumcyber.com/cisco-catalyst-sd-wan-controller-auth-bypass-actively-exploited-to-gain-admin-access/2026-05-15T00:13:16+00:00https://sodiumcyber.com/stealer-backdoor-found-in-3-node-ipc-versions-targeting-developer-secrets/2026-05-15T00:13:16+00:00https://sodiumcyber.com/threatsday-bulletin-pan-os-rce-mythos-curl-bug-ai-tokenizer-attacks-and-10-stories/2026-05-15T00:13:16+00:00https://sodiumcyber.com/ghostwriter-targets-ukrainian-government-with-geofenced-pdf-phishing-cobalt-strike/2026-05-15T00:13:16+00:00https://sodiumcyber.com/praisonai-cve-2026-44338-auth-bypass-targeted-within-hours-of-disclosure/2026-05-15T00:13:16+00:00https://sodiumcyber.com/turla-turns-kazuar-backdoor-into-modular-p2p-botnet-for-persistent-access/2026-05-16T00:15:39+00:00https://sodiumcyber.com/four-openclaw-flaws-enable-data-theft-privilege-escalation-and-persistence/2026-05-16T00:15:39+00:00https://sodiumcyber.com/what-45-days-of-watching-your-own-tools-will-tell-you-about-your-real-attack-surface/2026-05-16T00:15:39+00:00https://sodiumcyber.com/tanstack-supply-chain-attack-hits-two-openai-employee-devices-forces-macos-updates/2026-05-16T00:15:39+00:00https://sodiumcyber.com/on-prem-microsoft-exchange-server-cve-2026-42897-exploited-via-crafted-email/2026-05-16T00:15:39+00:00https://sodiumcyber.com/funnel-builder-flaw-under-active-exploitation-enables-woocommerce-checkout-skimming/2026-05-17T00:22:32+00:00https://sodiumcyber.com/nginx-cve-2026-42945-exploited-in-the-wild-causing-worker-crashes-and-possible-rce/2026-05-18T00:34:36+00:00https://sodiumcyber.com/grafana-github-token-breach-led-to-codebase-download-and-extortion-attempt/2026-05-18T00:34:36+00:00https://sodiumcyber.com/interpol-operation-ramz-disrupts-mena-cybercrime-networks-with-201-arrests/2026-05-19T00:48:19+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-exchange-0-day-npm-worm-fake-ai-repo-cisco-exploit-and-more/2026-05-19T00:48:19+00:00https://sodiumcyber.com/how-to-reduce-phishing-exposure-before-it-turns-into-business-disruption/2026-05-19T00:48:20+00:00https://sodiumcyber.com/developer-workstations-are-now-part-of-the-software-supply-chain/2026-05-19T00:48:20+00:00https://sodiumcyber.com/ivanti-fortinet-sap-vmware-n8n-patch-rce-sql-injection-privilege-escalation-flaws/2026-05-19T00:48:20+00:00https://sodiumcyber.com/trapdoor-android-ad-fraud-scheme-hit-659-million-daily-bid-requests-using-455-apps/2026-05-20T00:51:30+00:00https://sodiumcyber.com/dirtydecrypt-poc-released-for-linux-kernel-cve-2026-31635-lpe-vulnerability/2026-05-20T00:51:30+00:00https://sodiumcyber.com/the-new-phishing-click-how-oauth-consent-bypasses-mfa/2026-05-20T00:51:30+00:00https://sodiumcyber.com/drupal-to-release-urgent-core-security-updates-on-may-20-sites-told-to-prepare/2026-05-20T00:51:30+00:00https://sodiumcyber.com/seppmail-secure-e-mail-gateway-vulnerabilities-enable-rce-and-mail-traffic-access/2026-05-20T00:51:30+00:00https://sodiumcyber.com/microsoft-open-sources-rampart-and-clarity-to-secure-ai-agents-during-development/2026-05-21T00:58:37+00:00https://sodiumcyber.com/microsoft-takes-down-malware-signing-service-behind-ransomware-attacks/2026-05-21T00:58:37+00:00https://sodiumcyber.com/webworm-deploys-echocreep-and-graphworm-backdoors-using-discord-and-ms-graph-api/2026-05-21T00:58:37+00:00https://sodiumcyber.com/agent-ai-is-coming-are-you-ready/2026-05-21T00:58:37+00:00https://sodiumcyber.com/github-breached-employee-device-hack-led-to-exfiltration-of-3800-internal-repos/2026-05-21T00:58:37+00:00https://sodiumcyber.com/showboat-linux-malware-hits-middle-east-telecom-with-socks5-proxy-backdoor/2026-05-22T01:03:20+00:00https://sodiumcyber.com/threatsday-bulletin-linux-rootkits-router-0-day-ai-intrusions-scam-kits-and-25-new-stories/2026-05-22T01:03:20+00:00https://sodiumcyber.com/microsoft-warns-of-two-actively-exploited-defender-vulnerabilities/2026-05-22T01:03:20+00:00https://sodiumcyber.com/when-identity-is-the-attack-path/2026-05-22T01:03:20+00:00https://sodiumcyber.com/9-year-old-linux-kernel-flaw-enables-root-command-execution-on-major-distros/2026-05-22T01:03:20+00:00https://sodiumcyber.com/first-vpn-dismantled-in-global-takedown-over-use-by-25-ransomware-groups/2026-05-23T01:04:17+00:00https://sodiumcyber.com/ghostwriter-targets-ukraine-government-entities-with-prometheus-phishing-malware/2026-05-23T01:04:17+00:00https://sodiumcyber.com/megalodon-github-attack-targets-5561-repos-with-malicious-ci-cd-workflows/2026-05-23T01:04:17+00:00https://sodiumcyber.com/making-vulnerable-drivers-exploitable-without-hardware-the-byovd-perspective/2026-05-23T01:04:17+00:00https://sodiumcyber.com/kimwolf-ddos-botnet-operator-arrested-in-canada-over-ddos-for-hire-attacks/2026-05-23T01:04:17+00:00https://sodiumcyber.com/npm-adds-2fa-gated-publishing-and-package-install-controls-against-supply-chain-attacks/2026-05-24T01:04:39+00:00https://sodiumcyber.com/packagist-supply-chain-attack-infects-8-packages-using-github-hosted-linux-malware/2026-05-24T01:04:39+00:00https://sodiumcyber.com/claude-mythos-ai-finds-10000-high-severity-flaws-in-widely-used-software/2026-05-24T01:04:39+00:00https://sodiumcyber.com/laravel-lang-php-packages-compromised-to-deliver-cross-platform-credential-stealer/2026-05-24T01:04:39+00:00https://sodiumcyber.com/litespeed-cpanel-plugin-cve-2026-48172-exploited-to-run-scripts-as-root/2026-05-24T01:04:39+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-linux-flaws-defender-0-days-router-botnets-and-supply-chain-chaos/2026-05-26T01:10:20+00:00https://sodiumcyber.com/ghost-cms-cve-2026-26980-exploited-to-hijack-700-sites-for-clickfix-attacks/2026-05-26T01:10:20+00:00https://sodiumcyber.com/the-alert-firehose-finally-meets-its-match/2026-05-26T01:10:20+00:00https://sodiumcyber.com/lazarus-deploys-remotepe-memory-only-rat-against-financial-and-crypto-firms/2026-05-26T01:10:20+00:00https://sodiumcyber.com/trapdoor-supply-chain-attack-spreads-credential-stealing-malware-via-npm-pypi-and-cratesio/2026-05-26T01:10:20+00:00https://sodiumcyber.com/muddywater-uses-dll-side-loading-in-espionage-campaign-targeting-9-countries/2026-05-27T01:10:36+00:00https://sodiumcyber.com/thn-webinar-new-ai-ddos-attacks-are-smarter-learn-how-to-fight-back/2026-05-27T01:10:36+00:00https://sodiumcyber.com/microsoft-patches-sharepoint-rce-flaw-cve-2026-45659-across-server-versions/2026-05-27T01:10:36+00:00https://sodiumcyber.com/mfa-prompt-bombing-why-your-second-factor-isnt-saving-you/2026-05-27T01:10:36+00:00https://sodiumcyber.com/cert-in-recommends-12-hour-patching-for-internet-facing-flaws-amid-ai-assisted-attacks/2026-05-27T01:10:36+00:00https://sodiumcyber.com/grandoreiro-malware-and-btmob-rat-campaigns-target-windows-and-android-users/2026-05-28T01:16:36+00:00https://sodiumcyber.com/malicious-npm-package-stole-files-from-claude-ai-user-directory-via-github/2026-05-28T01:16:36+00:00https://sodiumcyber.com/5-steps-to-managing-shadow-ai-tools-without-slowing-down-employees/2026-05-28T01:16:36+00:00https://sodiumcyber.com/glassworm-malware-takedown-disrupts-developer-supply-chain-attack-infrastructure/2026-05-28T01:16:36+00:00https://sodiumcyber.com/3-soc-steps-that-shut-down-incident-risks-early/2026-05-28T01:16:36+00:00https://sodiumcyber.com/critical-gogs-rce-vulnerability-lets-any-authenticated-user-execute-arbitrary-code/2026-05-29T01:22:33+00:00https://sodiumcyber.com/threat-actors-exploit-critical-forticlient-ems-flaw-to-deploy-credential-stealer/2026-05-29T01:22:33+00:00https://sodiumcyber.com/microsoft-slams-public-zero-day-disclosures-amid-github-researcher-account-removal/2026-05-29T01:22:33+00:00https://sodiumcyber.com/threatsday-bulletin-claude-security-plugin-azure-priv-esc-kali365-mfa-bypass-fifa-scams-15-more/2026-05-29T01:22:33+00:00https://sodiumcyber.com/new-ai-usage-report-enterprise-ai-risk-is-heavily-concentrated-among-a-small-group-of-ai-power-users/2026-05-29T01:22:33+00:00https://sodiumcyber.com/chatgphish-vulnerability-turns-chatgpt-web-summaries-into-a-phishing-surface/2026-05-30T01:22:54+00:00https://sodiumcyber.com/attackers-use-llm-agent-for-post-exploitation-after-marimo-cve-2026-39987-exploit/2026-05-30T01:22:55+00:00https://sodiumcyber.com/new-russian-linked-greyvibe-targets-ukraine-with-ai-powered-cyberattacks/2026-05-30T01:22:55+00:00https://sodiumcyber.com/what-2000-exposed-vibe-coded-apps-reveal-about-the-limits-of-most-security-stacks/2026-05-30T01:22:55+00:00https://sodiumcyber.com/malicious-sicoob-nuget-steals-banking-credentials-as-npm-packages-target-cloud-secrets/2026-05-30T01:22:55+00:00https://sodiumcyber.com/pan-os-globalprotect-authentication-bypass-cve-2026-0257-under-active-exploitation/2026-05-31T01:26:49+00:00https://sodiumcyber.com/dutch-authorities-dismantle-botnet-linked-to-17-million-infected-devices/2026-06-01T01:28:23+00:00https://sodiumcyber.com/miasma-supply-chain-attack-compromises-red-hat-npm-packages-with-credential-stealing-worm/2026-06-02T01:54:00+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-new-linux-flaw-pan-os-exploit-ai-powered-attacks-oauth-phishing-and-more/2026-06-02T01:54:00+00:00https://sodiumcyber.com/china-aligned-groups-ramp-up-attacks-dragon-weave-hits-czech-republic-taiwan/2026-06-02T01:54:00+00:00https://sodiumcyber.com/the-security-growth-platform-why-msps-are-moving-beyond-vciso-tools/2026-06-02T01:54:00+00:00https://sodiumcyber.com/openai-codex-authentication-tokens-stolen-in-codexui-android-npm-supply-chain-attack/2026-06-02T01:54:01+00:00https://sodiumcyber.com/google-june-2026-android-update-patches-124-flaws-one-actively-exploited/2026-06-03T01:58:55+00:00https://sodiumcyber.com/gamaredon-exploits-winrar-to-deliver-gammaworm-and-gammasteel-against-ukraine/2026-06-03T01:58:55+00:00https://sodiumcyber.com/oracle-weblogic-cve-2024-21182-added-to-kev-catalog-after-active-exploitation/2026-06-03T01:58:55+00:00https://sodiumcyber.com/ai-driven-exploitation-is-destroying-vulnerability-management-heres-how-to-handle-it/2026-06-03T01:58:55+00:00https://sodiumcyber.com/how-leading-organizations-are-turning-edr-into-operational-resilience/2026-06-03T01:58:55+00:00https://sodiumcyber.com/whatsapp-slack-notifications-could-hijack-google-gemini-on-android/2026-06-04T02:02:06+00:00https://sodiumcyber.com/google-doubleclick-abused-in-new-malspam-campaign-to-deliver-desckvb-rat/2026-06-04T02:02:06+00:00https://sodiumcyber.com/beyond-the-zero-day-see-your-network-like-an-attacker-webinar-with-hd-moore/2026-06-04T02:02:06+00:00https://sodiumcyber.com/microsoft-365-android-apps-let-any-app-steal-account-tokens-via-leftover-debug-flag/2026-06-04T02:02:06+00:00https://sodiumcyber.com/autonomous-ai-tool-finds-2-year-old-rce-flaw-in-redis-cve-2026-23479/2026-06-04T02:02:06+00:00https://sodiumcyber.com/cisco-patches-cve-2026-20230-in-unified-cm-as-exploit-code-goes-public/2026-06-05T02:02:38+00:00https://sodiumcyber.com/claude-code-github-action-flaw-let-one-malicious-issue-hijack-repositories/2026-06-05T02:02:38+00:00https://sodiumcyber.com/agentic-ai-is-transforming-defense-but-only-secure-it-infrastructure-will-maximize-it/2026-06-05T02:02:38+00:00https://sodiumcyber.com/threatsday-bulletin-ai-agents-gone-wrong-sketchy-c2-tools-clickfix-tricks-js-backdoors-20-new-stories/2026-06-05T02:02:38+00:00https://sodiumcyber.com/china-linked-ta4922-expands-phishing-attacks-to-u-k-germany-italy-and-south-africa/2026-06-05T02:02:38+00:00https://sodiumcyber.com/ironworm-and-new-miasma-worm-variant-hit-npm-in-supply-chain-attacks/2026-06-06T02:02:59+00:00https://sodiumcyber.com/android-spyware-asin-targets-arabic-users-via-fake-news-pdf-and-war-map-apps/2026-06-06T02:02:59+00:00https://sodiumcyber.com/new-threat-cluster-op-512-targets-microsoft-iis-servers-with-custom-web-shell-framework/2026-06-06T02:02:59+00:00https://sodiumcyber.com/only-10-of-socs-say-theyre-getting-excellent-value-from-ai-heres-what-the-second-wave-has-to-deliver/2026-06-06T02:02:59+00:00https://sodiumcyber.com/hackers-exploit-critical-everest-forms-pro-wordpress-plugin-flaw-to-take-over-sites/2026-06-06T02:02:59+00:00https://sodiumcyber.com/new-chatgpt-lockdown-mode-limits-tools-that-could-enable-data-exfiltration/2026-06-07T02:06:31+00:00https://sodiumcyber.com/free-apps-are-quietly-turning-smart-tvs-into-web-scraping-proxies-for-ai/2026-06-07T02:06:31+00:00https://sodiumcyber.com/cisa-adds-actively-exploited-solarwinds-serv-u-dos-flaw-to-kev-catalog/2026-06-07T02:06:31+00:00https://sodiumcyber.com/ai-agent-uncovers-21-zero-days-in-ffmpeg-chrome-patches-record-429-bugs/2026-06-07T02:06:31+00:00https://sodiumcyber.com/miasma-worm-hits-73-microsoft-github-repositories-in-major-supply-chain-attack/2026-06-07T02:06:31+00:00https://sodiumcyber.com/one-character-linux-kernel-flaw-enables-local-root-access-exploits-now-public/2026-06-09T02:08:41+00:00https://sodiumcyber.com/meta-blocks-nso-groups-new-whatsapp-phishing-attack-files-contempt-order/2026-06-09T02:08:41+00:00https://sodiumcyber.com/critical-check-point-vpn-flaw-exploited-to-bypass-passwords-in-ikev1-setups/2026-06-09T02:08:41+00:00https://sodiumcyber.com/ai-phishing-is-crushing-socs-with-alert-volume-how-to-reduce-tier-1-overload/2026-06-09T02:08:41+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-instagram-account-hacks-android-zero-day-github-worm-and-more/2026-06-09T02:08:41+00:00https://sodiumcyber.com/meta-to-use-off-site-business-data-for-feed-and-ai-personalization/2026-06-10T02:09:07+00:00https://sodiumcyber.com/veeam-backup-replication-rce-flaw-lets-domain-users-run-remote-code/2026-06-10T02:09:07+00:00https://sodiumcyber.com/microsoft-restores-some-github-repos-keeps-others-offline-as-miasma-probe-continues/2026-06-10T02:09:07+00:00https://sodiumcyber.com/winrar-flaw-exploited-by-russia-aligned-groups-to-deploy-stealers-in-ukraine/2026-06-10T02:09:07+00:00https://sodiumcyber.com/researchers-build-self-replicating-ai-worm-that-operates-entirely-on-local-open-weight-models/2026-06-10T02:09:07+00:00https://sodiumcyber.com/china-linked-jdy-botnet-expands-to-1500-devices-for-cyber-reconnaissance/2026-06-11T02:12:49+00:00https://sodiumcyber.com/ivanti-fortinet-and-sap-release-patches-for-multiple-critical-vulnerabilities/2026-06-11T02:12:49+00:00https://sodiumcyber.com/unpatched-langflow-flaw-cve-2026-5027-exploited-for-unauthenticated-rce/2026-06-11T02:12:49+00:00https://sodiumcyber.com/cisa-adds-cisco-chrome-and-arista-flaws-to-kev-catalog-amid-active-exploitation/2026-06-11T02:12:49+00:00https://sodiumcyber.com/your-automated-pentest-looks-clean-see-what-it-missed-in-this-expert-webinar/2026-06-11T02:12:49+00:00https://sodiumcyber.com/shinyhunters-exploits-oracle-peoplesoft-zero-day-cve-2026-35273-to-breach-universities/2026-06-12T02:14:08+00:00https://sodiumcyber.com/new-attacks-trick-openclaw-ai-agent-into-running-code-and-leaking-secrets/2026-06-12T02:14:08+00:00https://sodiumcyber.com/new-greatxml-exploit-bypasses-windows-bitlocker-via-recovery-partition-xml-files/2026-06-12T02:14:08+00:00https://sodiumcyber.com/the-gentlemen-ransomware-claims-478-victims-can-spread-like-a-worm/2026-06-12T02:14:08+00:00https://sodiumcyber.com/cybersecurity-stars-awards-2026-winners-announced-across-95-categories/2026-06-12T02:14:08+00:00https://sodiumcyber.com/over-400-arch-linux-aur-packages-hijacked-to-deploy-infostealer-and-ebpf-rootkit/2026-06-13T02:14:46+00:00https://sodiumcyber.com/google-sues-chinese-smishing-network-accused-of-using-gemini-ai-in-phishing/2026-06-13T02:14:46+00:00https://sodiumcyber.com/china-linked-hackers-backdoored-linux-login-software-to-hide-for-nearly-a-decade/2026-06-13T02:14:47+00:00https://sodiumcyber.com/agentjacking-attack-tricks-ai-coding-agents-into-running-malicious-code/2026-06-13T02:14:47+00:00https://sodiumcyber.com/rethinking-mdr-as-attackers-and-defenders-embrace-ai/2026-06-13T02:14:47+00:00https://sodiumcyber.com/critical-splunk-enterprise-flaw-lets-attackers-run-code-without-authentication/2026-06-14T02:16:37+00:00https://sodiumcyber.com/u-s-orders-anthropic-to-suspend-fable-5-and-mythos-5-access-for-foreign-nationals/2026-06-14T02:16:37+00:00https://sodiumcyber.com/chinese-hackers-abused-google-workspace-rules-to-steal-research-and-defense-emails/2026-06-16T02:22:08+00:00https://sodiumcyber.com/north-korean-hackers-are-turning-developer-tools-into-malware-delivery-channels/2026-06-16T02:22:08+00:00https://sodiumcyber.com/litellm-vulnerability-chain-lets-low-privilege-users-take-over-ai-gateway-servers/2026-06-16T02:22:08+00:00https://sodiumcyber.com/one-click-microsoft-365-copilot-flaw-could-have-let-attackers-steal-emails-files-and-mfa-codes/2026-06-16T02:22:09+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-chrome-0-day-unifi-exploits-macos-stealers-vpn-flaw-and-more/2026-06-16T02:22:09+00:00https://sodiumcyber.com/google-vertex-ai-sdk-flaw-let-attackers-hijack-model-uploads-via-bucket-squatting/2026-06-17T02:22:43+00:00https://sodiumcyber.com/clickfix-campaigns-expand-malware-delivery-with-new-loaders-and-fake-update-lures/2026-06-17T02:22:43+00:00https://sodiumcyber.com/new-rokarolla-android-malware-steals-pins-sms-codes-and-crypto-wallet-funds/2026-06-17T02:22:43+00:00https://sodiumcyber.com/survey-94-of-incidents-involve-anonymized-infrastructure-teams-are-still-reactive/2026-06-17T02:22:43+00:00https://sodiumcyber.com/attackers-exploit-three-fortinet-fortisandbox-flaws-one-patched-last-week/2026-06-17T02:22:43+00:00https://sodiumcyber.com/crypto-clipper-campaign-abuses-fake-reviews-ai-narrators-and-virustotal-comments/2026-06-18T02:24:24+00:00https://sodiumcyber.com/microsoft-confirms-rogueplanet-defender-zero-day-says-patch-is-in-development/2026-06-18T02:24:24+00:00https://sodiumcyber.com/junior-hacker-used-tailscale-and-openssh-to-keep-access-after-his-c2-went-offline/2026-06-18T02:24:24+00:00https://sodiumcyber.com/adversarial-exposure-validation-turns-security-visibility-into-confident-prioritization/2026-06-18T02:24:24+00:00https://sodiumcyber.com/malicious-jetbrains-plugins-steal-ai-api-keys-as-chrome-extensions-capture-chatbot-chats/2026-06-18T02:24:24+00:00https://sodiumcyber.com/f5-patches-two-critical-nginx-open-source-flaws-enabling-remote-code-execution/2026-06-19T02:26:01+00:00https://sodiumcyber.com/orphaned-ai-agents-how-to-find-hidden-access-risks-inside-your-network/2026-06-19T02:26:01+00:00https://sodiumcyber.com/threatsday-bulletin-claude-chat-abuse-nastyc2-npm-packages-device-code-phishing-25-more-stories/2026-06-19T02:26:01+00:00https://sodiumcyber.com/microsoft-details-windows-clipper-malware-campaign-using-usb-lnk-worm-and-tor-based-c2/2026-06-19T02:26:01+00:00https://sodiumcyber.com/inc-ransomware-emerges-as-major-raas-threat-in-2026-with-830-victims-since-2023/2026-06-19T02:26:01+00:00https://sodiumcyber.com/unpatchable-usbliter8-exploit-breaks-apple-a12-and-a13-securerom-boot-chain/2026-06-20T02:26:57+00:00https://sodiumcyber.com/the-gentlemen-raas-uses-gentlekiller-edr-framework-targeting-400-security-processes/2026-06-20T02:26:57+00:00https://sodiumcyber.com/autojack-attack-lets-one-web-page-hijack-ai-agent-for-host-code-execution/2026-06-20T02:26:57+00:00https://sodiumcyber.com/operation-endgame-disrupts-socgholish-servers-cleans-14971-wordpress-sites/2026-06-20T02:26:57+00:00https://sodiumcyber.com/cisa-warns-fortinet-customers-as-fortibleed-hits-86644-fortigate-devices/2026-06-20T02:26:57+00:00https://sodiumcyber.com/hackers-exploit-gravity-smtp-wordpress-plugin-bug-to-expose-api-keys/2026-06-21T02:27:06+00:00https://sodiumcyber.com/shapedplugin-wordpress-pro-plugins-backdoored-in-supply-chain-attack/2026-06-23T02:35:16+00:00https://sodiumcyber.com/researchers-detail-difytap-flaws-in-dify-that-could-expose-ai-chats-across-tenants/2026-06-23T02:35:16+00:00https://sodiumcyber.com/29-year-old-squid-proxy-bug-squidbleed-can-leak-cleartext-http-requests/2026-06-23T02:35:16+00:00https://sodiumcyber.com/new-oxloader-loader-uses-malicious-google-ads-to-deliver-castlestealer/2026-06-23T02:35:16+00:00https://sodiumcyber.com/google-sets-sept-30-deadline-for-android-developer-verification-in-four-countries/2026-06-23T02:35:16+00:00https://sodiumcyber.com/fortibleed-targeted-fortigate-firewalls-in-110-million-credential-harvesting-operation/2026-06-24T02:35:17+00:00https://sodiumcyber.com/fake-ai-agent-skill-passed-security-scans-and-reportedly-reached-26000-agents/2026-06-24T02:35:17+00:00https://sodiumcyber.com/trump-order-sets-2030-deadline-for-federal-post-quantum-crypto-migration/2026-06-24T02:35:17+00:00https://sodiumcyber.com/github-updates-actions-checkout-to-block-common-pwn-request-attack-patterns/2026-06-24T02:35:17+00:00https://sodiumcyber.com/agentic-ai-the-weapon-that-no-longer-needs-a-warrior/2026-06-24T02:35:17+00:00https://sodiumcyber.com/cisa-warns-critical-lantronix-eds5000-flaw-is-being-actively-exploited/2026-06-25T02:35:28+00:00https://sodiumcyber.com/amadey-and-stealc-malware-network-disrupted-27m-stolen-credentials-recovered/2026-06-25T02:35:28+00:00https://sodiumcyber.com/cordyceps-ci-cd-flaws-expose-300-github-repositories-to-supply-chain-attacks/2026-06-25T02:35:28+00:00https://sodiumcyber.com/dawn-of-the-apex-agentic-adversary/2026-06-25T02:35:28+00:00https://sodiumcyber.com/doj-seizes-huione-cloud-account-tied-to-cyber-scam-money-laundering/2026-06-25T02:35:28+00:00https://sodiumcyber.com/chrome-ad-blocker-with-10m-installs-found-with-dormant-script-injection-capability/2026-06-26T02:37:15+00:00https://sodiumcyber.com/threatsday-bulletin-smart-tv-proxyware-24-year-curl-bug-ai-crime-forums-13-more-stories/2026-06-26T02:37:15+00:00https://sodiumcyber.com/surviving-the-mythos-era-richard-bejtlich-on-the-case-for-ndr/2026-06-26T02:37:15+00:00https://sodiumcyber.com/new-gaslight-macos-malware-uses-prompt-injection-to-disrupt-ai-assisted-analysis/2026-06-26T02:37:15+00:00https://sodiumcyber.com/new-mistic-backdoor-linked-to-kongtuke-in-clickfix-and-modelorat-campaigns/2026-06-26T02:37:15+00:00https://sodiumcyber.com/fbi-warns-russian-intelligence-hackers-target-signal-backup-recovery-keys/2026-06-27T02:37:28+00:00https://sodiumcyber.com/new-sharkloader-malware-deploys-cobalt-strike-in-strikeshark-cyberattacks/2026-06-27T02:37:28+00:00https://sodiumcyber.com/chinese-speaking-apt-deploys-new-tinyrct-backdoor-in-southeast-asia-campaign/2026-06-27T02:37:28+00:00https://sodiumcyber.com/new-linux-pedit-cow-exploit-enables-root-access-by-poisoning-cached-binaries/2026-06-27T02:37:28+00:00https://sodiumcyber.com/amazon-q-developer-flaw-could-let-malicious-repos-run-code-via-mcp-configs/2026-06-27T02:37:28+00:00https://sodiumcyber.com/ukraine-says-russian-intelligence-used-fake-support-texts-to-steal-messaging-credentials/2026-06-28T02:45:09+00:00https://sodiumcyber.com/openai-previews-gpt-5-6-sol-with-restricted-access-and-stronger-cyber-safeguards/2026-06-28T02:45:09+00:00https://sodiumcyber.com/malicious-perplexity-chrome-extension-intercepted-searches-and-address-bar-input/2026-06-30T02:52:21+00:00https://sodiumcyber.com/whatsapp-is-finally-getting-usernames-to-help-keep-phone-numbers-private/2026-06-30T02:52:21+00:00https://sodiumcyber.com/mustang-panda-uses-zoho-workdrive-as-command-channel-in-indian-government-attacks/2026-06-30T02:52:21+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-linux-kernel-flaws-ai-malware-tricks-turla-backdoor-infostealers-and-more/2026-06-30T02:52:21+00:00https://sodiumcyber.com/236000-dcloud-uni-app-sites-used-in-crypto-scams-phishing-and-wallet-drainers/2026-06-30T02:52:21+00:00https://sodiumcyber.com/microsoft-warns-poisoned-mcp-tool-descriptions-can-make-ai-agents-leak-data/2026-07-01T02:52:55+00:00https://sodiumcyber.com/rustduck-botnet-rebuilds-in-rust-to-hijack-routers-and-servers-for-ddos/2026-07-01T02:52:55+00:00https://sodiumcyber.com/langflow-rce-exploited-to-deploy-monero-miner-on-exposed-ai-app-endpoints/2026-07-01T02:52:55+00:00https://sodiumcyber.com/silent-swap-crypto-clipper-uses-fake-google-notes-extension-to-replace-wallet-addresses/2026-07-01T02:52:55+00:00https://sodiumcyber.com/guardfall-exposes-open-source-ai-coding-agents-to-decades-old-shell-injection-risks/2026-07-01T02:52:55+00:00https://sodiumcyber.com/unpatched-argo-cd-repo-server-flaw-could-let-attackers-take-over-kubernetes-clusters/2026-07-02T02:53:07+00:00https://sodiumcyber.com/19-year-old-scattered-spider-suspect-extradited-to-face-u-s-hacking-charges/2026-07-02T02:53:07+00:00https://sodiumcyber.com/seo-poisoned-software-sites-abuse-screenconnect-to-deploy-asyncrat/2026-07-02T02:53:07+00:00https://sodiumcyber.com/veildrop-malware-chain-uses-blogger-platform-to-deliver-purelogs-stealer/2026-07-02T02:53:07+00:00https://sodiumcyber.com/ousaban-banking-trojan-targets-iberian-bank-users-with-fake-pdf-lures/2026-07-02T02:53:07+00:00https://sodiumcyber.com/google-disrupts-netnut-residential-proxy-network-spanning-2-million-home-devices/2026-07-03T02:54:07+00:00https://sodiumcyber.com/ransomware-groups-turn-to-citrix-bleed-2-byovd-and-supply-chain-credentials/2026-07-03T02:54:07+00:00https://sodiumcyber.com/threatsday-ai-compute-hijacking-apple-email-flaw-bluehammer-ransomware-14-stories/2026-07-03T02:54:07+00:00https://sodiumcyber.com/toddycat-linked-umbrij-malware-abuses-oauth-to-access-gmail-via-google-api/2026-07-03T02:54:07+00:00https://sodiumcyber.com/identity-lifecycle-management-wasnt-built-for-ai-agents/2026-07-03T02:54:07+00:00https://sodiumcyber.com/unpatched-flaws-disclosed-in-filesystem-bundled-into-millions-of-embedded-devices/2026-07-04T02:54:47+00:00https://sodiumcyber.com/new-bad-epoll-linux-kernel-flaw-lets-unprivileged-users-gain-root-hits-android/2026-07-04T02:54:47+00:00https://sodiumcyber.com/new-avalon-malware-framework-packs-crownx-ransomware-capabilities/2026-07-04T02:54:47+00:00https://sodiumcyber.com/north-korea-linked-npm-packages-mimic-rollup-polyfills-to-steal-developer-secrets/2026-07-04T02:54:47+00:00https://sodiumcyber.com/armored-likho-targets-government-agencies-power-sector-with-busysnake-stealer/2026-07-04T02:54:47+00:00https://sodiumcyber.com/u-s-government-entity-paid-kairos-1-million-in-data-theft-extortion-case/2026-07-05T02:55:43+00:00https://sodiumcyber.com/north-korean-hackers-publish-108-malicious-packages-and-extensions-in-polinrider-campaign/2026-07-05T02:55:43+00:00https://sodiumcyber.com/iran-linked-hackers-use-new-cavern-c2-framework-to-target-israeli-organizations/2026-07-07T02:59:22+00:00https://sodiumcyber.com/16-year-old-linux-kvm-flaw-lets-guest-vms-escape-to-host-on-intel-and-amd-x86-systems/2026-07-07T02:59:22+00:00https://sodiumcyber.com/threat-actors-probe-gitea-docker-flaw-cve-2026-20896-13-days-after-disclosure/2026-07-07T02:59:22+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-proxy-botnets-browser-ransomware-ai-agent-tricks-fake-poc-malware-and-more/2026-07-07T02:59:22+00:00https://sodiumcyber.com/how-to-evaluate-an-ai-soc-platform-in-2026-6-capabilities-that-separate-leaders-from-bolt-on-ai-solutions/2026-07-07T02:59:22+00:00https://sodiumcyber.com/redwing-maas-packages-android-bank-fraud-as-a-telegram-rental-service/2026-07-08T02:59:29+00:00https://sodiumcyber.com/rogue-agent-flaw-could-have-let-attackers-hijack-google-dialogflow-cx-chatbots/2026-07-08T02:59:29+00:00https://sodiumcyber.com/debull-tooling-abuses-microsoft-device-code-flow-to-target-m365-accounts/2026-07-08T02:59:29+00:00https://sodiumcyber.com/public-github-issue-could-trick-github-agentic-workflows-into-leaking-private-repo-data/2026-07-08T02:59:29+00:00https://sodiumcyber.com/court-filing-reveals-windows-device-id-helped-fbi-trace-alleged-scattered-spider-hacker/2026-07-08T02:59:29+00:00https://sodiumcyber.com/ai-coding-agents-found-triggering-endpoint-security-rules-built-to-catch-attackers/2026-07-09T03:01:03+00:00https://sodiumcyber.com/new-hallusquatting-attack-could-trick-ai-coding-assistants-into-installing-botnet-malware/2026-07-09T03:01:03+00:00https://sodiumcyber.com/ubiquiti-patches-critical-unifi-flaws-across-connect-talk-access-protect-and-os/2026-07-09T03:01:03+00:00https://sodiumcyber.com/new-ghost-phishing-wave-is-breaking-traditional-email-security/2026-07-09T03:01:03+00:00https://sodiumcyber.com/scmbanker-malware-uses-clickfix-lures-to-target-mexican-banking-users/2026-07-09T03:01:03+00:00https://sodiumcyber.com/dormant-github-accounts-help-attackers-blend-in-while-mapping-corporate-orgs/2026-07-10T03:02:46+00:00https://sodiumcyber.com/new-gigawiper-windows-backdoor-bundles-disk-wiping-fake-ransomware-and-spyware/2026-07-10T03:02:46+00:00https://sodiumcyber.com/npm-12-disables-install-scripts-by-default-to-reduce-supply-chain-risk/2026-07-10T03:02:46+00:00https://sodiumcyber.com/threatsday-cloud-bucket-hijacking-windows-lpe-chain-global-fraud-bust-17-more-stories/2026-07-10T03:02:46+00:00https://sodiumcyber.com/ai-attacks-move-in-minutes-join-this-webinar-on-building-a-defense-that-keeps-up/2026-07-10T03:02:46+00:00https://sodiumcyber.com/urgent-progress-tells-sharefile-customers-to-shut-down-storage-zone-controllers-over-security-threat/2026-07-11T03:06:14+00:00https://sodiumcyber.com/injective-labs-github-compromise-pushes-wallet-key-stealing-npm-packages/2026-07-11T03:06:14+00:00https://sodiumcyber.com/six-new-u-boot-flaws-could-let-malicious-images-crash-devices-or-run-code-at-boot/2026-07-11T03:06:14+00:00https://sodiumcyber.com/laser-attack-resets-tangem-wallet-passwords-on-cards-that-cant-be-patched/2026-07-11T03:06:14+00:00https://sodiumcyber.com/researcher-details-whatsapp-to-host-attack-chain-using-three-openclaw-flaws/2026-07-11T03:06:14+00:00https://sodiumcyber.com/compromised-jscrambler-8-14-0-npm-release-drops-rust-infostealer-during-install/2026-07-12T03:06:51+00:00https://sodiumcyber.com/hackers-weaponize-balochistan-police-portal-in-multi-group-espionage-campaigns/2026-07-12T03:06:51+00:00https://sodiumcyber.com/critical-zimbra-flaw-could-let-crafted-emails-run-malicious-code-in-user-sessions/2026-07-12T03:06:51+00:00https://sodiumcyber.com/crashstealer-macos-malware-uses-notarized-dropper-to-pass-gatekeeper-checks/2026-07-14T03:10:41+00:00https://sodiumcyber.com/google-and-microsoft-pull-modheader-with-1-6-million-installs-after-dormant-collector-found/2026-07-14T03:10:41+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-sharefile-threat-citrix-bleed-2-ransomware-ai-coding-attacks-and-more/2026-07-14T03:10:41+00:00https://sodiumcyber.com/new-memghost-attack-plants-persistent-false-memories-in-ai-agents-through-one-email/2026-07-14T03:10:41+00:00https://sodiumcyber.com/forg365-phaas-targets-microsoft-365-with-device-code-and-aitm-session-theft/2026-07-14T03:10:42+00:00https://sodiumcyber.com/microsoft-patches-record-622-flaws-including-two-zero-days-under-active-attack/2026-07-15T03:11:43+00:00https://sodiumcyber.com/sap-patches-cvss-9-9-netweaver-abap-flaw-that-could-expose-or-modify-data/2026-07-15T03:11:43+00:00https://sodiumcyber.com/researchers-say-claude-for-chrome-flaw-lets-rogue-extensions-trigger-gmail-reads/2026-07-15T03:11:43+00:00https://sodiumcyber.com/labubarat-masquerades-as-nvidia-software-to-control-windows-hosts/2026-07-15T03:11:43+00:00https://sodiumcyber.com/rabbitmq-flaws-could-leak-oauth-secrets-and-expose-cross-tenant-queue-metadata/2026-07-15T03:11:43+00:00https://sodiumcyber.com/tuxbot-v3-evolution-shows-signs-of-llm-assisted-iot-botnet-development/2026-07-16T03:15:37+00:00https://sodiumcyber.com/okobot-malware-framework-injects-seed-phrase-phishing-into-ledger-and-trezor-apps/2026-07-16T03:15:37+00:00https://sodiumcyber.com/firefox-chrome-adobe-and-vmware-updates-fix-multiple-critical-security-flaws/2026-07-16T03:15:37+00:00https://sodiumcyber.com/sase-has-an-ai-blind-spot-inspecting-packets-is-no-longer-enough/2026-07-16T03:15:37+00:00https://sodiumcyber.com/researcher-drops-new-windows-zero-day-poc-hours-after-microsoft-patch-tuesday/2026-07-16T03:15:37+00:00https://sodiumcyber.com/two-scattered-spider-hackers-get-5-5-years-each-for-29-million-tfl-hack/2026-07-17T03:20:30+00:00https://sodiumcyber.com/threatsday-game-cheat-spyware-24-hour-ransomware-chrome-sync-stalking-12-more-stories/2026-07-17T03:20:31+00:00https://sodiumcyber.com/n8n-token-exchange-flaw-could-let-attackers-log-in-as-users-from-another-issuer/2026-07-17T03:20:31+00:00https://sodiumcyber.com/new-telepuz-malware-spreads-via-clickfix-to-steal-data-and-run-commands/2026-07-17T03:20:31+00:00https://sodiumcyber.com/new-clicklock-macos-stealer-kills-apps-every-210ms-until-victims-type-their-password/2026-07-17T03:20:31+00:00https://sodiumcyber.com/new-wp2shell-wordpress-core-flaw-lets-unauthenticated-attackers-run-code/2026-07-18T03:44:17+00:00https://sodiumcyber.com/openssl-hollowbyte-flaw-could-freeze-server-memory-with-11-byte-tls-requests/2026-07-18T03:44:17+00:00https://sodiumcyber.com/seven-malicious-vite-npm-packages-use-blockchain-c2-to-deliver-a-rat/2026-07-18T03:44:17+00:00https://sodiumcyber.com/new-nadmesh-botnet-hunts-exposed-ai-services-for-cloud-keys-and-kubernetes-tokens/2026-07-18T03:44:17+00:00https://sodiumcyber.com/goldeneyedog-subgroup-linked-to-digicert-breach-and-code-signing-certificate-theft/2026-07-18T03:44:17+00:00https://sodiumcyber.com/critical-nginx-vulnerability-can-crash-workers-and-may-allow-remote-code-execution/2026-07-20T03:51:22+00:00https://sodiumcyber.com/uac-0145-uses-clickfix-captchas-to-infect-ukrainian-devices-wih-malware/2026-07-20T03:51:22+00:00https://sodiumcyber.com/sonicwall-sma-zero-days-exploited-before-disclosure-to-gain-root-access/2026-07-20T03:51:22+00:00https://sodiumcyber.com/fakegit-campaign-uses-7600-github-repositories-to-spread-smartloader-malware/2026-07-21T03:56:16+00:00https://sodiumcyber.com/exposed-server-reveals-ai-assisted-phishing-toolkit-behind-webdav-malware-campaign/2026-07-21T03:56:16+00:00https://sodiumcyber.com/hollowgraph-malware-hides-c2-and-stolen-files-in-microsoft-365-events-dated-2050/2026-07-21T03:56:16+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-wordpress-rce-sonicwall-0-days-ai-service-attacks-sharepoint-0-day-and-more/2026-07-21T03:56:16+00:00https://sodiumcyber.com/russian-intelligence-hacks-ip-cameras-to-spy-on-military-logistics-across-nato-states-and-ukraine/2026-07-21T03:56:16+00:00https://sodiumcyber.com/apple-fixes-hide-my-email-bug-that-exposed-real-addresses-in-mail-logs/2026-07-22T03:57:12+00:00https://sodiumcyber.com/aws-kiro-flaw-let-a-poisoned-web-page-rewrite-its-config-and-run-code/2026-07-22T03:57:12+00:00https://sodiumcyber.com/google-launches-gemini-3-5-flash-cyber-ai-to-find-and-fix-software-vulnerabilities/2026-07-22T03:57:12+00:00https://sodiumcyber.com/critical-sharepoint-rce-cve-2026-50522-under-active-exploitation-after-public-poc/2026-07-22T03:57:12+00:00https://sodiumcyber.com/qilin-ransomware-attackers-exploit-pan-os-authentication-bypass-for-initial-access/2026-07-22T03:57:12+00:00https://sodiumcyber.com/github-cuts-public-bug-bounty-payouts-moves-top-rewards-to-vip-tier/2026-07-23T04:09:04+00:00https://sodiumcyber.com/ubuntu-snap-confine-flaw-could-give-local-users-root-on-default-desktop-installs/2026-07-23T04:09:04+00:00https://sodiumcyber.com/adobe-acrobat-extension-flaw-let-malicious-sites-read-whatsapp-web-data/2026-07-23T04:09:04+00:00https://sodiumcyber.com/hackers-exploit-windmill-flaw-to-read-arbitrary-server-files-without-authentication/2026-07-23T04:09:04+00:00https://sodiumcyber.com/the-fastest-path-to-ai-adoption-runs-through-security/2026-07-23T04:09:04+00:00https://sodiumcyber.com/russian-espionage-group-exploited-zimbra-zero-day-to-steal-mail-and-2fa-codes/2026-07-24T04:09:08+00:00https://sodiumcyber.com/threatsday-android-spyware-plc-attacks-ai-image-prompt-injection-12-more-stories/2026-07-24T04:09:08+00:00https://sodiumcyber.com/claude-cowork-flaw-could-let-ai-agent-escape-its-vm-and-access-mac-files/2026-07-24T04:09:08+00:00https://sodiumcyber.com/chaos-ransomware-uses-msarat-to-route-c2-traffic-through-headless-chrome-and-edge/2026-07-24T04:09:08+00:00https://sodiumcyber.com/china-nexus-jadeprox-uses-new-triback-loader-in-government-and-healthcare-attacks/2026-07-24T04:09:08+00:00https://sodiumcyber.com/bluenoroff-zoom-phishing-kit-profiles-crypto-wallets-before-malware-delivery/2026-07-25T04:10:35+00:00https://sodiumcyber.com/certighost-exploit-lets-low-privileged-active-directory-users-impersonate-a-domain-controller/2026-07-25T04:10:35+00:00https://sodiumcyber.com/chatgpt-agentforger-flaw-could-deploy-rogue-workspace-agents-via-a-phishing-link/2026-07-25T04:10:35+00:00https://sodiumcyber.com/bing-images-flaws-let-crafted-svgs-run-commands-as-system-on-microsofts-servers/2026-07-25T04:10:35+00:00https://sodiumcyber.com/seeing-ai-agents-is-not-enough-security-teams-must-enforce-what-they-can-do/2026-07-25T04:10:35+00:00https://sodiumcyber.com/malvertising-sends-malware-in-pieces-then-makes-the-browser-build-the-executable/2026-07-26T04:19:39+00:00https://sodiumcyber.com/fastjson-1-x-rce-vulnerability-targeted-in-attacks-with-no-patched-available/2026-07-26T04:19:39+00:00https://sodiumcyber.com/researcher-publishes-gitlab-rce-poc-letting-authenticated-users-run-commands-as-git/2026-07-26T04:19:39+00:00https://sodiumcyber.com/ctm360-research-reveals-how-insurance-phishing-has-evolved-into-real-time-account-hijacking/2026-07-26T04:19:39+00:00https://sodiumcyber.com/cl0p-affiliates-target-internet-exposed-ptc-windchill-and-flexplm-with-unauthenticated-rce/2026-07-26T04:19:39+00:00https://sodiumcyber.com/nvidia-forms-37-member-open-secure-ai-alliance-and-open-sources-nooa-framework/2026-07-28T04:22:20+00:00https://sodiumcyber.com/dysphoria-iot-botnet-adds-blockchain-c2-and-victim-relays-after-jackskid-disruption/2026-07-28T04:22:20+00:00https://sodiumcyber.com/public-exploit-released-for-patched-vbulletin-pre-auth-code-execution-flaw/2026-07-28T04:22:20+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-rogue-ai-agents-check-point-exploit-slopsquatting-clickfix-lures-and-more/2026-07-28T04:22:20+00:00https://sodiumcyber.com/n8n-sandbox-escape-lets-workflow-editors-run-os-commands-as-the-n8n-process/2026-07-28T04:22:20+00:00https://sodiumcyber.com/claude-ai-just-cracked-a-post-quantum-test-scheme-and-found-a-faster-7-round-aes-attack/2026-07-29T04:23:32+00:00https://sodiumcyber.com/tengu-botnet-reboots-compromised-linux-devices-when-defenders-kill-its-process/2026-07-29T04:23:32+00:00https://sodiumcyber.com/24650-internet-exposed-bmcs-disclose-ipmi-password-hashes-before-login/2026-07-29T04:23:32+00:00https://sodiumcyber.com/jfrog-confirms-openai-models-exploited-artifactory-zero-day-before-hugging-face-breach/2026-07-29T04:23:32+00:00https://sodiumcyber.com/critical-openwrt-dhcpv6-flaw-could-let-unauthenticated-attackers-run-code-as-root/2026-07-29T04:23:32+00:00https://sodiumcyber.com/critical-rails-flaw-could-let-unauthenticated-attackers-read-server-files-via-image-uploads/2026-07-30T04:26:44+00:00https://sodiumcyber.com/ruflo-mcp-flaw-lets-unauthenticated-attackers-run-commands-and-poison-ai-memory/2026-07-30T04:26:44+00:00https://sodiumcyber.com/three-critical-vmware-flaws-allow-auth-bypass-code-execution-and-vm-escape/2026-07-30T04:26:44+00:00https://sodiumcyber.com/coordinated-cyberattack-targets-30-minnesota-water-systems-as-one-plant-goes-offline/2026-07-30T04:26:44+00:00https://sodiumcyber.com/nine-year-fraud-campaign-clones-russian-company-sites-to-steal-advance-payments/2026-07-30T04:26:44+00:00https://sodiumcyber.com/dprk-linked-macos-malvertising-uses-fake-updates-to-deliver-crypto-stealing-malware/2026-07-31T04:36:31+00:00https://sodiumcyber.com/threatsday-ai-powered-hacking-370-chrome-flaws-sonicwall-attacks-dns-hijacking-22-more-stories/2026-07-31T04:36:31+00:00https://sodiumcyber.com/azure-cosmos-db-flaw-exposed-platform-wide-key-that-could-access-any-database/2026-07-31T04:36:31+00:00https://sodiumcyber.com/microsoft-copilot-for-word-can-copy-hidden-prompts-into-new-documents/2026-07-31T04:36:31+00:00https://sodiumcyber.com/the-network-has-become-the-control-plane-for-ai-security/2026-07-31T04:36:31+00:00https://sodiumcyber.com/suspected-chinese-speaking-hackers-target-central-asian-governments-with-octlurk-and-silklurk/2026-08-01T04:40:41+00:00https://sodiumcyber.com/hollowframe-loader-deploys-matryoshka-backdoor-in-spear-phishing-attack-on-law-firm/2026-08-01T04:40:41+00:00https://sodiumcyber.com/cheap-android-tv-boxes-pose-as-phones-and-turn-owners-broadband-into-proxies/2026-08-01T04:40:41+00:00https://sodiumcyber.com/three-recent-chrome-releases-fix-1442-flaws-more-than-prior-23-updates-combined/2026-08-01T04:40:41+00:00https://sodiumcyber.com/researchers-report-84-flaws-in-4g-and-5g-cores-including-a-session-hijacking-flaw/2026-08-01T04:40:41+00:00https://sodiumcyber.com/coldcard-hardware-wallet-flaw-linked-to-70-million-bitcoin-theft-in-41-minutes/2026-08-02T04:41:32+00:00https://sodiumcyber.com/hackers-poison-adform-script-to-swap-crypto-wallet-addresses-across-customer-sites/2026-08-02T04:41:32+00:00https://sodiumcyber.com/adobe-campaign-classic-cvss-10-0-flaw-could-run-code-without-user-interaction/2026-08-02T04:41:32+00:00https://sodiumcyber.com/hijacked-hotel-wi-fi-pushes-fake-updates-to-deliver-surveillance-malware/2026-08-02T04:41:32+00:00https://sodiumcyber.com/18-malicious-npm-packages-deliver-cross-platform-rat-to-alibaba-tool-users/2026-08-04T04:45:47+00:00https://sodiumcyber.com/google-password-manager-attacks-could-let-malware-hijack-passkey-protected-accounts/2026-08-04T04:45:47+00:00https://sodiumcyber.com/inc-ransomware-emerges-as-dominant-actor-exploiting-sonicwall-sma-1000-flaws/2026-08-04T04:45:47+00:00https://sodiumcyber.com/%e2%9a%a1-weekly-recap-rogue-ai-models-88m-bitcoin-theft-water-system-attacks-and-dangling-dns-hijacks/2026-08-04T04:45:47+00:00https://sodiumcyber.com/fomo-in-the-soc-where-ai-platforms-like-claude-actually-fit/2026-08-04T04:45:47+00:00https://sodiumcyber.com/greatness-phaas-adds-device-code-phishing-to-bypass-mfa-and-steal-tokens/2026-08-05T04:53:25+00:00https://sodiumcyber.com/keyv-linked-npm-worm-poisons-hundreds-of-packages-plants-claude-code-and-vs-code-hooks/2026-08-05T04:53:25+00:00https://sodiumcyber.com/fake-adobe-and-zoom-updates-install-screenconnect-for-persistent-remote-access/2026-08-05T04:53:25+00:00https://sodiumcyber.com/when-vibe-hacking-turns-ai-into-the-junior-hacker-every-adversary-always-wanted/2026-08-05T04:53:25+00:00https://sodiumcyber.com/google-deletes-3-adk-ai-workflows-after-malicious-github-issue-could-trigger-privileged-agent/2026-08-05T04:53:25+00:00https://sodiumcyber.com/over-250-clickfix-domains-use-browser-fingerprinting-to-hide-macos-malware-lures/2026-08-06T04:56:17+00:00https://sodiumcyber.com/openai-disrupts-poipet-scam-network-using-chatgpt-across-multiple-fraud-schemes/2026-08-06T04:56:17+00:00https://sodiumcyber.com/poison-claude-sells-discounted-claude-access-while-its-operator-sees-every-customer-prompt/2026-08-06T04:56:17+00:00https://sodiumcyber.com/paperclip-ai-flaws-let-attackers-run-host-commands-via-malicious-agent-imports/2026-08-06T04:56:17+00:00https://sodiumcyber.com/veeam-terraform-mcp-django-patch-critical-flaws-led-by-cvss-10-0-cross-tenant-bug/2026-08-06T04:56:17+00:00https://sodiumcyber.com/new-zapscape-kvm-flaw-could-let-privileged-l1-guest-code-escape-to-linux-hosts/2026-08-07T05:17:43+00:00https://sodiumcyber.com/cisco-patches-12-sd-wan-and-ios-xe-flaws-including-three-9-8-cvss-score-bugs/2026-08-07T05:17:43+00:00https://sodiumcyber.com/new-interrupt-injection-attack-can-bypass-spectre-v2-defenses-on-intel-and-amd-cpus/2026-08-07T05:17:43+00:00https://sodiumcyber.com/threatsday-odysseus-rce-samsung-one-click-takeover-icloud-backdoor-fight-27-more-stories/2026-08-07T05:17:43+00:00https://sodiumcyber.com/over-4400-rockwell-plcs-exposed-online-22-found-in-water-attack-cities/2026-08-07T05:17:43+00:00https://sodiumcyber.com/nearly-800-malicious-npm-packages-deliver-cross-platform-rat-and-infostealer/2026-08-08T05:18:33+00:00https://sodiumcyber.com/clickfix-attacks-deliver-macos-stealer-that-can-drain-crypto-wallets/2026-08-08T05:18:33+00:00