News & Announcements

A vulnerability has been detected in a form-data library on npm. With the identifier CVE-2025-7783, this vulnerability affects millions of web applications and APIs using JavaScript/Node.js globally, especially in backend systems, microservices and serverless. ​ The root cause comes from an insecure “boundary” generation in the “form_data.js” file, line 347: boundary += Math.floor(Math.random() * 10).toString(16); […]

Sophos has just announced five independent security vulnerabilities in its Sophos Firewall product, including two serious ones that allow remote code execution without authentication. The announcement, released on July 21, 2025, emphasized that these vulnerabilities affect certain configurations, although the percentage of affected devices remains below 1% in most cases. The two most serious vulnerabilities […]

Pursuant to the Circular No. 08/2022/TT-BGDDT dated June 06,2012 of the Minister of Education and Training on promulgation of Regulations on admission to undergraduate programs and early childhood education college programs; Pursuant to the Circular No. 06/2025/TT-BGDDT dated March 19,2015 of the Minister of Education and Training on amendments to some Articles of the Regulation […]

A serious flaw in the quality management software ETQ Reliance allowed the attacker to gain full access to the administration system simply by adding a space to the login name. Tracked with code CVE-2025-34143, the vulnerability was of the strangest authentication – through – elimination ever discovered in enterprise software. Simply enter ” SYSTEM ” […]

Microsoft has issued an emergency security alert after detecting a deliberate attack campaign targeting the SharePoint Server on – premises, starting July 7, 2025. Three Chinese hacker groups, including Linen Typhoon, Violet Typhoon and Storm-2603, were identified behind the operation. The attacks take advantage of a series of severe vulnerabilities allowing for the ability to […]

Cybercriminals don’t disappear, they just change the way they attack. While the Lumma Infostealer recovered quickly after being destroyed, the SVF Botnet showed new levels of danger targeting the SSH Linux server. Here’s WhiteHat’s detailed synthesis of two recent emerging threats. 1. Lumma Infostealer re-emerged strongly after scan​ In May 2025, international law enforcement seized […]

At the end of the summer of 2025, cybersecurity citizens continue to see a new wave of cyberattacks that target the “heart” of corporate network access control systems. Cisco has just confirmed serious vulnerabilities in the Identity Services Engine (ISE) platform and the ISE Passive Identity Connector (I SE-PIC) are being de facto exploited. Some […]

A sophisticated cyber espionage campaign led by the Advanced Agent Cluster of the Lazarus Group has just been exposed by the Sekoia Threat Detection and Response (TDR) group. The campaign, titled “ClickFake Interview”, uses a deliberate psychological manipulation technique called ClickFix to spread GolangGhost malware, targeting organizations in the cryptocurrency and technology sectors. ClickFake Interview […]

A new cyberattack operation has been discovered by cybersecurity experts, using a seemingly harmless Windows shortcut file (.LNK ), to spread malicious information theft DeerStealer. The campaign was not only technically sophisticated but also hit a major flaw in user behavior, the habit of opening files of “reports,” “orders,” or “invoices” that are emailed without […]

A vulnerability was recently discovered in the popular decompression software 7-Zip, which could cause the application to collapse completely when processing a maliciously edited RAR5 file. While this does not allow hackers to gain control of the machine, it is sufficient to create a Do Not Service (DoS) situation, causing the software or system to […]

Recently, the Cyble Research & Intelligence Labs (CRIL) team discovered a global – scale scam called Scanception, which uses QR code – tagged PDFs to trick users into scanning codes and thereby gaining account permissions, even when multifactor authentication (MFA) is enabled. ​ Operation Scanception has not been attributed to a specific group, but is […]

A zero-day vulnerability (CVE-2025-53770) was recently discovered in Microsoft SharePoint Server. The vulnerability is being exploited on a large scale out of practice, affecting dozens of organizations, including multinational corporations and government agencies. This is a highly technical attack that can be difficult to detect and can have serious consequences if not addressed in a […]

A new attack technique has been discovered, allowing the hacker group PoisonSeed to bypass the protection mechanism of the FIDO security key which is considered the “gold standard” in non-password authentication and anti-phishing today. The speciality of this technique lies not in exploiting the vulnerability in the FIDO protocol but in the way the attacker […]

Recently, the software developer CrushFTP – the FTP – supported enterprise file transfer server platform, SFTp, HTTP/S, warned of a serious zero – day vulnerability (CVE 2025 54309), which allowed hackers to take remote administration over the web interface. ​ ​ The breach, designated CVE-2025-54309, was rated high-level hazardous (CVSS 9.0) and has been actively […]

A worldwide crackdown on cybercrime has been launched in close coordination between Microsoft, the FBI, Europol and many of the world’s leading cybersecurity organizations. The campaign has dealt a severe blow to the Lumma Infostealer malware distribution network – a dangerous malware that has silently stolen data from hundreds of thousands of computers globally for […]

A worldwide crackdown coordinated by Microsoft, the FBI, Europol and several leading cybersecurity organizations has brought down the Lumma Infostealer malware distribution network, a malware that is quietly stealing data from hundreds of thousands of computers around the world. ​ ​ Lumma, also known as LummaC2, is a “malware-as-a-service” type of malicious code, built as […]

Recently, cybersecurity experts discovered a new type of malware called MDifyLoader, which is used in cyberattacks targeting Ivanti Connect Secure (ICS) devices. ​ ​ Discovered between December 2024 and July 2035, this attack exploits two security vulnerabilities in the ICS to infect and spread dangerous malicious codes such as Cobalt Strike, VShell and Fscan: MDifyLoader […]