Researchers found Chinese-linked attackers abused SonicWall VPN access and VMware ESXi zero-day flaws to escape VMs and gain ...

Cisco Talos reports China-linked UAT-7290 spying on telecoms since 2022 using Linux malware, edge exploits, and ORB ...

Mona.py is a python script that can be used to automate and speed up specific searches while developing exploits (typically for the Windows platform). It runs on Immunity Debugger and WinDBG, and ...

Chinese-speaking threat actors used a compromised SonicWall VPN appliance to deliver a VMware ESXi exploit toolkit that seems to have been developed more than a year before the targeted ...

一、一封“税务通知”邮件，打开后系统已沦陷 2025年12月中旬，印度德里一家中型制造企业的财务主管Priya Mehta收到了一封看似来自“印度所得税局（Income Tax Department）”的邮件。主题写着：“关于您公司2024-25财年税务申报的紧急通知”，附件是一个名为“tax_affairs.pdf.exe”的文件。 出于职业敏感，她点了进去——结果，这台连接公司内网的Windo ...

Terms often used in cybersecurity discussions and education, briefly defined. Your corrections, suggestions, and recommendations for additional entries are welcome: email the editor at [email protected].