Malicious Npm Package Mimics Nodemailer
Cybersecurity researchers recently unearthed a deceptive npm package, nodejs-smtp, that poses as the well-known email library nodemailer.
Tag: Cyber Alerts 2025
High Risk SQLi In WordPress Plugin
A serious SQL injection vulnerability in the WordPress Paid Membership Subscriptions plugin affects versions 2.15.1 and below, allowing attackers
Sitecore Exploit Chain Warning
Security researchers have recently uncovered three new vulnerabilities in the Sitecore Experience Platform, a popular enterprise-level content management system
AI Weaponized Nx Supply Chain Attack
A new supply chain attack, dubbed s1ngularity, targeted the popular JavaScript build system Nx, affecting thousands of developers and leading to the theft
North Korea APT37 Uses RokRAT In Phishing
North Korea's state-sponsored hacking group, ScarCruft (APT37), launched "Operation HanKook Phantom," a phishing campaign using a fake newsletter
Brokewell Android Malware In Fake Ads
ybercriminals have launched a sophisticated campaign on Meta's advertising platforms, luring unsuspecting users with a fraudulent offer for a free TradingView
New Zero Click Exploit Targets WhatsApp
WhatsApp has issued threat notifications to users who were targeted by advanced, "zero-click" spyware in the last 90 days.
AI Systems Used for Ransomware Attacks
Researchers at cybersecurity firm ESET have recently identified what they claim to be the first piece of AI-powered ransomware in the wild, dubbed PromptLock.
Coordinated Scans Target Microsoft RDP
An internet intelligence firm, GreyNoise, has reported a significant spike in scanning activity from nearly 2,000 IP addresses targeting Microsoft
Shadowcaptcha Exploits WordPress Sites
A large-scale cybercrime campaign, ShadowCaptcha, is leveraging social engineering and sophisticated delivery methods to infect users with a variety
© 2025 | CyberMaterial | All rights reserved