February Patch Tuesday delivers 57 packages
After January’s deluge, a calmer update volume returns
Similar Posts
UK plans to shift fraud fight onto telecoms, tech companies
Bys sAlexander Martin reports: The British government on Monday unveiled a new fraud strategy that shifts more responsibility for stopping scams onto telecom companies, technology platforms and financial firms, but critics question whether it goes far enough. […] A centerpiece of the British strategy is a new Online Crime Centre, described by officials as a “disruption……
South Asian Ministries Hit by SideWinder APT Using Old Office Flaws and Custom Malware
Bys sHigh-level government institutions in Sri Lanka, Bangladesh, and Pakistan have emerged as the target of a new campaign orchestrated by a threat actor known as SideWinder. “The attackers used spear phishing emails paired with geofenced payloads to ensure that only victims in specific countries received the malicious content,” Acronis researchers Santiago Pontiroli, Jozsef Gegeny, and…
Hackers Spied on a Stock Exchange Executive’s Outlook Mailbox for Five Months
Bys sUnknown attackers spent at least five months inside the Outlook mailbox of a senior executive at a major global stock exchange, copying the inbox out in small, repeated batches and routing it through Dropbox and OneDrive so the traffic blended into normal cloud activity. Symantec and Carbon Black’s Threat Hunter Team reported the campaign this…
Microsoft Windows Vulnerability Exploited to Deploy PipeMagic RansomExx Malware
Bys sCybersecurity researchers have lifted the lid on the threat actors’ exploitation of a now-patched security flaw in Microsoft Windows to deploy the PipeMagic malware in RansomExx ransomware attacks. The attacks involve the exploitation of CVE-2025-29824, a privilege escalation vulnerability impacting the Windows Common Log File System (CLFS) that was addressed by Microsoft in April 2025,
New Threat Cluster OP-512 Targets Microsoft IIS Servers with Custom Web Shell Framework
Bys sCybersecurity researchers have discovered a previously unreported threat cluster dubbed OP-512 that has been observed targeting Microsoft Internet Information Services (IIS) servers to deploy a bespoke web shell framework. ReliaQuest has assessed with moderate to high confidence that the espionage-focused activity is linked to China. “OP-512 was highly likely conducting espionage through a
Silver Fox Expands Asia Cyber Campaign with AtlasCross RAT and Fake Domains
Bys sChinese-speaking users are the target of an active campaign that uses typosquatted domains impersonating trusted software brands to deliver a previously undocumented remote access trojan named AtlasCross RAT. “The operation covers VPN clients, encrypted messengers, video conferencing tools, cryptocurrency trackers, and e-commerce applications, with eleven confirmed delivery domains impersonating