Inside Shanya, a packer-as-a-service fueling modern attacks on December 6, 2025 Posted by Gabor Szappanos
Researchers Uncover 30+ Flaws in AI Coding Tools Enabling Data Theft and RCE Attacks on December 6, 2025 Posted by The Hacker News
Drones to Diplomas: How Russia’s Largest Private University is Linked to a $25M Essay Mill on December 6, 2025 Posted by BrianKrebs
Critical React2Shell Flaw Added to CISA KEV After Confirmed Active Exploitation on December 6, 2025 Posted by The Hacker News
Posted in Hacking news ShadyPanda Turns Popular Browser Extensions with 4.3 Million Installs Into Spyware on December 1, 2025 The Hacker News
Posted in Hacking news ⚡ Weekly Recap: Hot CVEs, npm Worm Returns, Firefox RCE, M365 Email Raid & More on December 1, 2025 The Hacker News
Posted in Hacking news Webinar: The “Agentic” Trojan Horse: Why the New AI Browsers War is a Nightmare for Security Teams on December 1, 2025 The Hacker News
Posted in Hacking news New Albiriox MaaS Malware Targets 400+ Apps for On-Device Fraud and Screen Control on December 1, 2025 The Hacker News
Posted in Hacking news Tomiris Shifts to Public-Service Implants for Stealthier C2 in Attacks on Government Targets on November 30, 2025 The Hacker News
Posted in Hacking news CISA Adds Actively Exploited XSS Bug CVE-2021-26829 in OpenPLC ScadaBR to KEV on November 30, 2025 The Hacker News
Posted in Hacking news Legacy Python Bootstrap Scripts Create Domain-Takeover Risk in Multiple PyPI Packages on November 28, 2025 The Hacker News
Posted in Hacking news North Korean Hackers Deploy 197 npm Packages to Spread Updated OtterCookie Malware on November 28, 2025 The Hacker News
Posted in Hacking news MS Teams Guest Access Can Remove Defender Protection When Users Join External Tenants on November 28, 2025 The Hacker News