Attackers chained SQL injection with Oracle’s embedded Java capabilities to hide a custom post-exploitation toolkit inside ...

SMOKE#SCREEN uses fake Adobe and Zoom updates, document lures, and trusted cloud services to install ScreenConnect for persistent remote access.

Fake Xeno Executor installers are infecting unsuspecting Roblox players with malware that provides remote access and steals ...

A new "invisible" Xeno Executor is actually a highly capable RAT and a potent infostealer.

Huntress spotted a white whale - a malicious toolkit stored as a database object.

Cybersecurity researchers have uncovered a malware campaign that targets Roblox players through fake versions of the Xeno ...

Spread the loveWhen you’re trying to keep up with friends, guildmates, or even professional communities, Discord has become ...

The vulnerability abuses Active Storage, allowing unauthenticated attackers to read sensitive files and potentially take over ...

Boomerang is a free, cloud-based file-transfer tool that offers 1GB of storage and a 7 day download window. Sharing large ...

This week’s ThreatsDay Bulletin covers malicious packages, AI agent risks, phishing chains, exposed systems, router flaws, ...