Month: August 2025
-
Distribution of SmartLoader Malware via Github Repository Disguised as a Legitimate Project
A massive distribution of SmartLoader malware has been discovered through GitHub repositories masquerading as legitimate projects. These repositories focus on…
-
ToolShell: An allyoucaneat buffet for threat actors
A set of zero-day vulnerabilities in SharePoint Server, dubbed ToolShell, has been exploited in the wild since July 17, 2025.…
-
Unmasking AsyncRAT: Navigating the labyrinth of forks
AsyncRAT, an open-source remote access trojan, has evolved into a sprawling network of forks and variants since its 2019 release.…
-
Google confirms Salesforce CRM breach, faces extortion threat
Google disclosed a Salesforce Customer Relationship Management (CRM) breach exposing data of some prospective Google Ads customers.———————————————————————————————————————————–Google confirmed a breach…
-
Google Paid Ads for Fake Tesla Websites, (Sun, Aug 10th)
[Google Paid Ads for Fake Tesla Websites](/forums/diary/Google+Paid+Ads+for+Fake+Tesla+Websites/32186/)=======================================================================================================* * [](http://www.facebook.com/sharer.php?u=https%3A%2F%2Fisc.sans.edu%2Fforums%2Fdiary%2F32186 ‘Share on Facebook’)* [](http://twitter.com/share?text=Google%20Paid%20Ads%20for%20Fake%20Tesla%20Websites&url=https%3A%2F%2Fisc.sans.edu%2Fforums%2Fdiary%2F32186&via=SANS_ISC ‘Share on Twitter’) **Published** : 2025-08-10. **Last…
-
Researchers Detail Windows EPM Poisoning Exploit Chain Leading to Domain Privilege Escalation
Cybersecurity researchers have [presented](https://www.safebreach.com/blog/you-snooze-you-lose-winning-rpc-endpoints/) new findings related to a now-patched security issue in Microsoft’s Windows Remote Procedure Call (RPC) communication…
-
DEF CON hackers plug security holes in US water systems amid tsunami of threats
#### [Security](/security/)**8** DEF CON hackers plug security holes in US water systems amid tsunami of threats===============================================================================**8** Five pilot deployments are…
-
Bank of America Refused To Reimburse Georgia Customer After Hackers Hit Account. Then a News Station
Sometimes you have to keep fighting, and sometimes, going to the media to get coverage of your complaint will help.…
-
Federal judiciary says it is boosting security after cyberattack; researcher finds new leaks
CNN reports: Federal court officials said Thursday that the judicial branch is taking steps to improve online security — including…
-
Researchers Reveal ReVault Attack Targeting Dell ControlVault3 Firmware in 100+ Laptop Models
Cybersecurity researchers have uncovered multiple security flaws in Dell’s ControlVault3 firmware and its associated Windows APIs that could have been…