UNC3569 Exploited Sogou Input Method to Install GRAYRABBIT Backdoor
UNC3569 exploited Sogou Input Method's sgbiz protocol and outdated Chromium browser to execute code and deploy GRAYRABBIT backdoor via DLL sideloading.
CyberWorldOps
Latest news
More news
Page 43 / 92 · 828 articles
GoldFactory Clones Android Banking Apps to Evade Fraud Controls in Indonesia
GoldFactory uses Gigabud and Vwork to clone Indonesian banking apps inside Android Work Profiles, evading fraud controls and causing $1M losses.
Three High-Severity Flaws Expose NextGen Mirth Connect Data and Credentials
CISA discloses three high-severity Mirth Connect flaws through 4.7.1, with SQL injection and XXE risking data theft and credential exposure.
Deceptive Android Apps Exploit Google Play Early Access to Hide User Warnings
Thousands of deceptive Android applications are abusing Google Play’s Early Access program to attract installs without exposing users to public reviews or
Mantax Otax Android Malware Encrypts Files, Spies on Victims, and Weaponizes Harassment
Mantax Otax Android malware encrypts files on Android 9 or older, steals SMS, screen data, and harasses victims. Distributed via APKs outside Google Play.
ShieldCrash PoC Claims to Bypass Microsoft’s Fix for Defender Privilege Flaw
ShieldCrash PoC claims bypass of Microsoft's fix for CVE-2026-69414, enabling SYSTEM-level file reads on patched Windows via Defender.
Cisco FMC Zero-Auth Flaws Exploited by Qilin Ransomware and Sandworm-Linked Hackers
Cisco FMC zero-auth flaws exploited by Qilin ransomware, Sandworm-linked hackers, and a third cluster for ransomware, credential theft, and espionage.
Check Point Patches Two Critical VPN Certificate Flaws Allowing Unauthenticated RCE
Check Point fixes two critical VPN certificate flaws, CVE-2026-85102 and CVE-2026-85103, with CVSS 9.8, enabling unauthenticated RCE on Security Gateways and Management.
U.S. Disrupts Xinbi Guarantee, Freezing $52.8 Million Tied to Global Scam Networks
U.S. authorities seize Telegram channels and crypto wallets, freeze $52.8M in USDT, and sanction Xinbi Guarantee, a marketplace enabling pig-butchering scams.