XDSpy Exploits Windows LNK Zero Day
A sophisticated cyber espionage campaign attributed to the XDSpy threat actor has been discovered exploiting a new zero-day vulnerability. This previously
Tag: Cyber Alerts
CISA Warns Of Apple Zero Click Exploit
CISA has added a critical iOS zero-click vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, warning of active exploitation. This flaw, tracked
PyPI Malware Steals AWS, CI/CD, macOS Data
Cybersecurity researchers have uncovered a new threat lurking on the Python Package Index (PyPI) repository: a malicious package designed
Image Hiding in DNS TXT Records
A peculiar method has surfaced for embedding images within DNS TXT records, an approach that initially appears unconventional
IBM Backup Service Flaw Allows Elevated Access
A significant security flaw, identified as CVE-2025-33108, has been discovered in IBM’s Backup, Recovery, and Media Services (BRMS) for IBM i.
Simple Typo Breaks AI Safety Via TokenBreak
A novel attack technique called TokenBreak can be used to bypass a large language model's safety and content moderation guardrails. Cybersecurity researchers
VexTrio TDS Uses Adtech To Spread Malware
The threat actors behind the VexTrio Viper Traffic Distribution Service (TDS) have now been linked to other TDS services. These include Help TDS and Disposable TDS
Old Discord Links Now Lead To Malware
A sophisticated new attack vector exploits a critical flaw in Discord’s invitation system, allowing attackers to hijack expired invite links. This emerging threat leverages
SmartAttack Uses Sound To Steal PC Data
A new attack dubbed 'SmartAttack' uses smartwatches as a covert ultrasonic signal receiver to exfiltrate sensitive data from isolated systems.
Coordinated Brute Force Hits Tomcat Manager
A significant coordinated attack campaign has been recently targeting Apache Tomcat Manager interfaces with a high degree of precision.
© 2025 | CyberMaterial | All rights reserved