RondoDox Botnet Exploits Critical 2018 Vulnerability to Hijack ASUS Routers

Cybersecurity firm VulnCheck reveals hackers are using a critical 2018 vulnerability to bypass authentication and hack over a million ASUS routers.

·

ASUS, Botnet, Cyber Attack, Cyber-Attacks, cybersecurity, IoT, Malware, Mirai, RondoDox, Routers, Security

¶¶¶¶¶

FBI Warns of Kali365 Phishing Service Targeting Microsoft 365 Account

FBI warns of Kali365, a PaaS scam kit that lets cybercriminals bypass MFA and hijack Microsoft 365 accounts without passwords.

·

Cyber Attack, Cyber Crime, cybersecurity, FBI, Fraud, Kali365, Microsoft 365, Phishing, Phishing Kit, Phishing Scam, SCAM, Scams and Fraud, Security

¶¶¶¶¶

5,561 GitHub Repositories Hit by Megalodon Supply Chain Attack in Six Hours

SafeDep uncovered the Megalodon attack targeting 5,561 GitHub repositories with malicious CI workflows and cloud credential theft.

·

Cyber Attack, Cyber-Attacks, cybersecurity, GitHub, Malware, Megalodon, SafeDep, Security, Supply Chain

¶¶¶¶¶

Deleted Google API Keys Remain Active up to 23 Minutes, Study Finds

Deleted Google API Keys remain active for up to 23 minutes after deletion, exposing GCP, Gemini, BigQuery, and Maps data to attackers.

·

Aikido Security, API, Cloud Security, cybersecurity, Google API Key, Google Cloud, Security, vulnerability

¶¶¶¶¶

Android Malware Spotted Subscribing Victims to Paid Services Without Consent

Cybersecurity researchers expose a 10-month global Android malware campaign using fake apps to secretly charge users through premium SMS bills.

·

Android, Cyber Attack, Cyber Crime, cybersecurity, Fraud, Malware, Privacy, SCAM, Scams and Fraud, Security, Zimperium, zLabs

¶¶¶¶¶

Microsoft’s Retired IE Tool MSHTA Now Being Used in Fileless Malware Attacks

Despite Internet Explorer’s retirement, hackers are abusing the legacy MSHTA utility in stealthy fileless malware attacks targeting Windows users.

·

Cyber Attack, cybersecurity, Fileless, LOLBIN, Malware, Microsoft, MSHTA, Security, vulnerability

¶¶¶¶¶

GitHub Breach: TeamPCP Steals 3,800 Repositories via VS Code Extension

GitHub Breach: TeamPCP stole 3,800 internal repositories through a malicious VS Code extension and is now selling the data online for $95,000.

·

Cyber Attack, Cyber Crime, cybersecurity, Data Breach, Data Breaches, Extension, GitHub, Security, TeamPCP, VS Code

¶¶¶¶¶

Verizon DBIR: AI Helped Hackers Exploit Vulnerabilities in 31% of Recent Breaches

Verizon DBIR 2026 reveals software vulnerabilities overtook stolen passwords in cyberattacks, with AI helping hackers exploit flaws within hours.

·

AI, Artificial Intelligence, Cyber Attack, Cyber Crime, cybersecurity, Data Breaches, Security, Verizon, Verizon DBIR, vulnerability

¶¶¶¶¶

Fake Word Phishing Reveals Enterprise Blind Spot in Trusted Remote Access Tools

Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings.

·

ANY.RUN, cybersecurity, Malware, Microsoft Word, Phishing, Phishing Scam, Security, SOC, Threat Intelligence

¶¶¶¶¶

Banana RAT Malware in Fake Invoices Hits Customers at 16 Brazilian Banks

Banana RAT malware hidden in fake invoices and security update screens targets customers at 16 Brazilian banks stealing data with QR fraud.

·

Banana RAT, Brazil, Cyber Crime, cybersecurity, Fraud, Malware, SCAM, Scams and Fraud, Security

¶¶¶¶¶

1010.cx

1010.cx

Category: Security