Malicious npm Packages Plant SSH Backdoors
Cybersecurity researchers have identified three malicious npm packages in the registry designed to mimic a popular Telegram bot library.
Cybersecurity researchers have identified three malicious npm packages in the registry designed to mimic a popular Telegram bot library.
ASUS has confirmed a critical security vulnerability in AiCloud routers, which could allow remote attackers to execute unauthorized functions.
A new malware-as-a-service platform, SuperCard X, targets Android devices using NFC relay attacks to facilitate fraudulent point-of-sale and ATM transactions.
A critical vulnerability, CVE-2025-32433, has been disclosed in the Erlang/OTP SSH, enabling unauthenticated remote code execution.
XorDDoS malware continues to pose significant risks, especially to the United States, which accounted for 71.3% of attacks between November 2023 and February...
CISA added a medium-severity Windows vulnerability, CVE-2025-24054, to its Known Exploited Vulnerabilities catalog. The vulnerability is a NTLM
The CrazyHunter hacker group has been targeting critical sectors in Taiwan, including healthcare, education, and industry. Since early 2025
State-sponsored hacking groups from Iran, North Korea, and Russia have increasingly used the ClickFix tactic in targeted malware campaigns
The Cybersecurity and Infrastructure Security Agency (CISA) issued a public warning regarding unauthorized access to a legacy Oracle Cloud environment.
Researchers have identified four vulnerabilities in Windows task scheduling, posing significant risks of privilege escalation and log tampering.
© 2025 | CyberMaterial | All rights reserved