Threat Intelligence Center

Conceptual cybersecurity image illustrating chaos malware exploiting misconfigured cloud deployments with SOCKS proxy threats.

Security researchers have uncovered Chaos malware being deployed against misconfigured cloud environments by the Silver Fox threat actor. The latest variant incorporates SOCKS proxy capabilities, enabling attackers to establish persistent backdoor access and move laterally through compromised infrastructure. This malware is part of a broader toolkit that includes AISURU, Kaiji, and ValleyRAT.

Cybersecurity leaders analyzing AI model risks and threat vectors for effective data protection and digital security strategies.

Project Glasswing represents a significant development for security leaders responsible for AI model governance and deployment. As Claude Mythos Preview gains adoption, understanding Glasswing's implications becomes essential for managing emerging risks in AI infrastructure.

Conceptual image illustrating cybersecurity threats targeting Office 365 to compromise employee paycheck data.

Researchers have identified a targeted attack campaign by Storm-2755 that poisons Office 365 search results to redirect employees to fraudulent payroll portals. The attack leverages Axios HTTP client 1.7.9 to intercept and manipulate search traffic, enabling credential theft and direct paycheck interception.

Conceptual image illustrating cybersecurity threats from ClickFix malware and LummaC2 infostealer in digital security.

ClickFix is a malware campaign that exploits user trust by disguising malicious prompts as legitimate system messages or helpful notifications. Once executed, ClickFix deploys the LummaC2 infostealer, a credential-stealing tool designed to harvest sensitive data from infected systems.

Conceptual image illustrating cybersecurity gaps in incident response amid FortiGate CVE-2025-59718 threat vectors.

Incident response investigations into FortiGate CVE-2025-59718 exploitation have uncovered significant gaps in detection and containment capabilities across affected organizations. Analysis of compromised deployments reveals how attackers leveraged this vulnerability to establish persistence and move laterally through networks.

Cybersecurity image illustrating Grafana's AI bug patching for enhanced data protection and digital security against threats.

Grafana has released patches addressing a vulnerability in its AI functionality that posed a risk of user data exposure. The bug, present in specific versions of the platform, could have allowed unauthorized access to sensitive information through the AI feature set.

Conceptual image illustrating cybersecurity measures against DNS hijacks targeting Microsoft 365 logins for data protection.

Law enforcement agencies have disrupted FrostArmada, a DNS hijacking campaign that exploited compromised routers to intercept and redirect traffic, enabling credential theft from Microsoft 365 users across government, hosting provider, information technology, and law enforcement sectors.

Chaos Malware Targets Misconfigured Cloud Deployments with SOCKS Proxy

Project Glasswing Impacts Security Leaders Managing AI Model Risks

Storm-2755 Poisons Office 365 Search Results to Steal Employee Paychecks

ClickFix Malware Disguises as Friendly Prompts to Deploy LummaC2 Infostealer

FortiGate CVE-2025-59718 Exploitation Reveals Critical Incident Response Gaps

Grafana Patches AI Bug That Could Have Leaked User Data

Authorities Disrupt Router DNS Hijacks Stealing Microsoft 365 Logins

More Articles …

About Us

Services Near Me

Get the latest news!