Category Archives: Threat Alerts
DarkSword iPhone Exploit: Millions of Devices at Risk from Fileless Zero-Day
Security researchers have identified the DarkSword iPhone exploit, a sophisticated fileless zero-day targeting millions of users globally through watering hole attacks on compromised websites. Continue reading
Apple Callback Phishing Campaign Exploits Official Account Alerts
A sophisticated Apple callback phishing campaign is leveraging official account alerts to bypass spam filters and trick users into contacting fraudulent support centers. Continue reading
Apple Pay fraud scam: Global users targeted by sophisticated social engineering
A dangerous Apple Pay fraud scam is currently targeting iPhone users globally by using fake SMS alerts and fraudulent investigators to bypass device security. Continue reading
Formbook Stealth Campaigns: DLL Sideloading and JavaScript Obfuscation
New security research details Formbook stealth campaigns utilizing DLL sideloading and heavily obfuscated JavaScript to bypass EDR systems and harvest credentials. Continue reading
Device Code Phishing: AI-Powered Attacks Target Microsoft OAuth
A sophisticated device code phishing campaign leverages generative AI to bypass traditional security measures and exploit Microsoft OAuth 2.0 authorization flows. Continue reading
ZionSiphon Malware Targeting Critical Water Infrastructure
Security researchers have discovered the ZionSiphon malware, a new cyber threat specifically designed to target and disrupt critical water infrastructure and OT systems. Continue reading
AI-Weaponized Reconnaissance Breach Exposed 415 Million Records
A sophisticated campaign utilizing AI-weaponized reconnaissance has compromised nine Mexican government agencies, leveraging advanced LLMs to automate high-speed data theft. Continue reading
Vercel Security Breach: Data Exposed via Third-Party Compromise
The latest Vercel security breach highlights the risks of third-party vulnerabilities after attackers gained access to sensitive employee records and internal database information. Continue reading
Apple Callback Phishing Exploits Official Notification Infrastructure
A sophisticated Apple callback phishing campaign is abusing legitimate account alerts to bypass spam filters and deliver fraudulent support lures to unsuspecting users. Continue reading