Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Transparent Tribe Launches New RAT Attacks Against Indian Government and Academia
Published: Jan 02, 2026
The threat actor Transparent Tribe has targeted Indian governmental, academic, and strategic entities with a remote access trojan (RAT) using deceptive delivery techniques like weaponized Windows shortcut files masquerading as PDFs. This campaign continues their history of cyber espionage since 2013, employing evolving RATs such as CapraRAT and Crimson RAT.
2. Cybercriminals Abuse Google Cloud Email Feature in Multi-Stage Phishing Campaign
Published: Jan 02, 2026
Attackers impersonate Google-generated messages by abusing Google Cloud’s Application Integration service to send phishing emails from a legitimate address, bypassing filters with notifications like voicemail alerts. Over 9,394 emails targeted 3,200 customers in the U.S., Asia-Pacific, and other regions in December 2025.
3. Adobe ColdFusion Servers Targeted in Coordinated Campaign
Published: January 2, 2026
GreyNoise has observed thousands of requests targeting a dozen vulnerabilities in Adobe ColdFusion during the Christmas 2025 holiday.
4. RondoDox Botnet Exploits Critical React2Shell Flaw to Hijack IoT Devices and Web Servers
Published: Jan 01, 2026
The RondoDox botnet has run a nine-month campaign exploiting the React2Shell vulnerability (CVE-2025-55182, CVSS 10.0) to enroll IoT devices and web apps, with about 90,300 susceptible instances worldwide as of December 2025. Emerging in early 2025, it uses new N-day security flaws to expand scale.
5. A scammer’s guide: How cybercriminals plot to rob a target in a week
Published: December 30, 2025
A handbook found during a police raid on a compound used by a cyberfraud gang in the Philippines offers detailed instructions in Chinese for conducting scams and reveals a blueprint for grooming and deception.
6. Two US cyber experts plead guilty to cooperating with notorious ransomware gang
Published: December 30, 2025
Two US cyber experts have pleaded guilty to cooperating with a notorious ransomware gang.
7. Fortinet Warns of New Attacks Exploiting Old Vulnerability
Published: December 29, 2025
Tracked as CVE-2020-12812, the exploited FortiOS flaw allows threat actors to bypass two-factor authentication.
8. Fresh MongoDB Vulnerability Exploited in Attacks
Published: December 29, 2025
Dubbed MongoBleed, the high-severity flaw allows unauthenticated, remote attackers to leak sensitive information from MongoDB servers.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using advanced security tools to monitor and protect your digital assets. Stay safe online!