This week’s ThreatsDay Bulletin covers USB malware, fake crypto scams, CastleRAT, new cyber laws, and falling ransomware ...

Holiday peaks trigger sharp rises in credential-stuffing and account-takeover attempts; layered controls and strong password ...

Active exploits target Sneeit plugin CVE-2025-6389 and ICTBroadcast CVE-2025-2611, enabling RCE, backdoors, and Frost DDoS ...

Researchers detail FvncBot, SeedSnatcher, and a stronger ClayRat that widen Android data theft and device control tactics.

MuddyWater’s UDPGangster malware uses macro phishing & UDP channels for remote control, data theft, payload delivery in ...

GTG-1002 shows how AI can scale intrusions fast. Here’s why static OAuth trust is risky for SaaS and how to verify apps and tokens nonstop.

Intellexa’s Predator spyware targeted a Pakistani lawyer, as new leaks show wide global use of zero-day exploits and advanced ...

More than 30 security flaws in AI-powered IDEs allow data leaks and remote code execution, showing major risks in modern ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday formally added a critical security flaw impacting ...

Guide shows MSPs use trust, clear language, and evidence to address common cybersecurity objections and build partnerships.

A zero-click browser attack uses polite email instructions to trigger agents that delete real files from Google Drive.

CISA details China-linked BRICKSTORM malware that enables persistent, stealthy access in VMware and Windows systems.