In The News

Malicious npm Packages Infect 3,200+ Cursor Users With Backdoor, Steal Credentials The Hacker [email protected] (The Hacker News)
May 9, 2025

Cybersecurity researchers have flagged three malicious npm packages that are designed to target the Apple macOS version of Cursor, a popular artificial intelligence (AI)-powered source code editor. "Disguised as developer tools …

Read More
No Comment

In The News


Beyond Vulnerability Management – Can You CVE What I CVE? The Hacker [email protected] (The Hacker News)
May 9, 2025

The Vulnerability Treadmill The reactive nature of vulnerability management, combined with delays from policy and process, strains security teams. Capacity is limited and patching everything immediately is a struggle. Our Vulnerability …

Read More
No Comment

Google Rolls Out On-Device AI Protections to Detect Scams in Chrome and Android The Hacker [email protected] (The Hacker News)
May 9, 2025

Google on Thursday announced it's rolling out new artificial intelligence (AI)-powered countermeasures to combat scams across Chrome, Search, and Android. The tech giant said it will begin using Gemini Nano, its …

Read More
No Comment

Chinese Hackers Exploit SAP RCE Flaw CVE-2025-31324, Deploy Golang-Based SuperShell The Hacker [email protected] (The Hacker News)
May 8, 2025

A China-linked unnamed threat actor dubbed Chaya_004 has been observed exploiting a recently disclosed security flaw in SAP NetWeaver. Forescout Vedere Labs, in a report published today, said it uncovered a …

Read More
No Comment

ISC Stormcast For Friday, May 9th, 2025 https://isc.sans.edu/podcastdetail/9444, (Fri, May 9th) SANS Internet Storm Center, InfoCON: green
May 8, 2025

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.  ​Read More

Read More
No Comment

SonicWall Issues Patch for Exploit Chain in SMA Devices darkreadingNate Nelson, Contributing Writer
May 8, 2025

Three vulnerabilities in SMA 100 gateways could facilitate root RCE attacks, and one of the vulnerabilities has already been exploited in the wild. Three vulnerabilities in SMA 100 gateways could facilitate …

Read More
No Comment

Email-Based Attacks Top Cyber-Insurance Claims darkreadingRob Wright
May 8, 2025

Cyber-insurance carrier Coalition said business email compromise and funds transfer fraud accounted for 60% of claims in 2024. Cyber-insurance carrier Coalition said business email compromise and funds transfer fraud accounted for …

Read More
No Comment

Operation PowerOFF Takes Down 9 DDoS-for-Hire Domains darkreadingKristina Beek, Associate Editor, Dark Reading
May 8, 2025

Four different countries, including the United States and Germany, were included in the latest international operation alongside Europol's support. Four different countries, including the United States and Germany, were included in …

Read More
No Comment

38,000+ FreeDrain Subdomains Found Exploiting SEO to Steal Crypto Wallet Seed Phrases The Hacker [email protected] (The Hacker News)
May 8, 2025

Cybersecurity researchers have exposed what they say is an "industrial-scale, global cryptocurrency phishing operation" engineered to steal digital assets from cryptocurrency wallets for several years. The campaign has been codenamed FreeDrain …

Read More
No Comment

Life Without CVEs? It’s Time to Act darkreadingKeith Ibarguen
May 8, 2025

Despite all MITRE has done for cybersecurity, it is clear we should not wait 11 months to discuss the future of the CVE database. It's simply too important for that. Despite …

Read More
No Comment