ServicesBlogPricingContactContact Now

Grivyonx Intelligence Hub

Cyber Security News and Analysis - Page 32

Zero-days, ransomware, data breaches and active exploitation, explained with practical defence advice.

Cyber Security

148 npm Packages as Student Proxies Launch DDoS Botnet

A recent investigation uncovered a covert campaign involving 148 npm packages that pretended to be student web proxies. These malicious modules turned visitors' browsers into a distributed denial‑of‑service network for roughly two weeks in May, according to JFrog. While the developers who installed the packages were largely unaffected, the attackers leveraged the public registry as free hosting for a compromised proxy site, targeting students seeking to bypass network restrictions.

By Gourav Rajput

Cyber Security

Google & Microsoft Remove ModHeader Over Hidden Data Collector

Google and Microsoft have taken action against ModHeader, a widely-used Chrome and Edge extension with 1.6 million downloads, after security researchers uncovered a hidden data collection mechanism embedded in its official store version. The feature, currently inactive, could have tracked users' browsing habits through an empty whitelist.

By Gourav Rajput

Cyber Security

UK and EU Unite Against Russian Cyber Threats with Historic Sanctions

In an unprecedented move, the United Kingdom and European Union have coordinated their response to Russian cyber aggression by implementing synchronized sanctions against identified individuals and organizations. This landmark decision represents the first time both entities have jointly targeted Russian cyber actors responsible for disruptive digital operations and influence campaigns.

By Gourav Rajput

Cyber Security

CrashStealer macOS Malware Bypasses Gatekeeper via Notarized Dropper

Security researchers at Jamf Threat Labs have uncovered CrashStealer, a sophisticated macOS information stealer written in native C++ that leverages an Apple-notarized dropper to silently bypass Gatekeeper protections. Unlike typical AppleScript or Objective-C based threats, this malware validates user credentials locally before exfiltrating browser data, cryptocurrency wallets, and system credentials.

By Gourav Rajput

Cyber Security

Balochistan Police Portal Hacked in Espionage Campaigns

A sophisticated cyber espionage campaign has targeted Pakistani law enforcement agencies, with hackers compromising critical police infrastructure. Researchers have identified multiple threat actors potentially aligned with regional powers conducting sustained attacks between early 2024 and mid-2026.

By Gourav Rajput

Cyber Security

Zimbra Web Client XSS Flaw Poses Code Execution Threat

Zimbra has identified a serious stored cross‑site scripting flaw in its Classic Web Client that could let attackers embed malicious scripts in specially crafted emails, potentially executing arbitrary code while a user’s session is active. The company urges all customers to apply the latest security updates immediately.

By Gourav Rajput

Cyber Security

OpenAI Launches GPT-5.5 Bio Bug Bounty: What Researchers Need to Know

OpenAI has unveiled a novel initiative called the GPT-5.5 Bio Bug Bounty, inviting security researchers and bioinformatics experts to probe the latest iteration of its language model for vulnerabilities that could impact biological safety. The program marks a shift from traditional software bug hunts to a focus on preventing misuse of AI in life‑science contexts.

By Gourav Rajput

Cyber Security

Convicted Felons Target Zero‑Day Bugs: Cyber Startup Under Scrutiny

A cybersecurity startup that promised to scoop up zero‑day vulnerabilities is now in the spotlight after revelations that its founders are convicted felons and far‑right conspiracy theorists. The company, which raised millions of dollars, has ót ties to a series of shady ventures, including a defunct AI‑based lobbying platform and fake intelligence agencies. Industry analysts warn that the firm’s practices could undermine trust in the sector and pose legal risks for investors. Investigators are probing whether the startup’s aggressive acquisition strategy violates U.S. export controls and whether its leadership’s past misconduct puts clients and partners at risk.

By Gourav Rajput

Cyber Security

FBI Takes Down NetNut Proxy Network Linked to Massive Botnet

Federal law enforcement has disrupted a major cybercriminal infrastructure by seizing control of numerous domains tied to NetNut, a residential proxy service connected to the massive Popa botnet. This operation follows extensive security research revealing the platform's alleged involvement in compromising millions of devices without proper user consent. The investigation highlights growing concerns about proxy networks being weaponized for large-scale cyberattacks and digital fraud.

By Gourav Rajput

Cyber Security

The Gentlemen Ransomware: Inside the Rise of a Cybercrime Powerhouse

The Gentlemen ransomware group has rapidly become the second most active gang by victim count, leveraging an unprecedented 90% revenue share to recruit top-tier affiliates. This deep dive explores their operational model, recruitment tactics, and the forensic breadcrumbs that may unmask their elusive administrator.

By Gourav Rajput

Cyber Security

Hackers & Art Forgers: Mastering Deception in the Digital Age

The world of art forgery and cybercrime share a surprising common ground: the art of deception. By studying the notorious forger Elmyr de Hory, defenders can uncover timeless tactics that hackers still employ today. This article draws parallels and offers fresh insights for modern security teams.

By Gourav Rajput

Cyber Security

Zero-Click XSS in Claude Chrome Extension Exposed

Security researchers have identified a zero‑click cross‑site scripting vulnerability in Anthropic's Claude Chrome extension. The bug allowed any visited website to silently inject malicious prompts into the AI assistant, creating a new attack vector without user interaction.

By Gourav Rajput

Cyber Security

Validate Your Defenses: Stop Guessing, Start Testing

Most security teams rely on alerts, dashboards, and threat intel to gauge safety, but those signals often mask hidden gaps. A recent webinar showed how realistic attack simulations can expose blind spots and confirm that defenses truly work.

By Gourav Rajput

Cyber Security

Red Menshen’s BPFDoor Spyware: Inside Telecom Espionage

Red Menshen, a threat cluster with Chinese ties, has been quietly infiltrating telecom infrastructure using a custom implant called BPFDoor. The campaign targets government networks, leveraging the trusted position of telecom carriers to maintain long‑term access.

By Gourav Rajput

Cyber Security

Interlock Ransomware Hijacks Cisco FMC via Critical Zero-Day

Amazon Threat Intelligence has flagged an active Interlock ransomware campaign that is leveraging a newly disclosed Cisco Secure Firewall Management Center flaw (CVE-2026-20131). The vulnerability, rated 10.0 on the CVSS scale, enables unauthenticated attackers to gain root privileges on affected devices.

By Gourav Rajput

Cyber Security

Hackers Deploy 7‑Stage Phish on Outpost24 Exec

Outpost24, a well‑known cybersecurity firm, fell victim to a meticulously crafted seven‑stage phishing operation aimed at one of its C‑suite leaders. The attackers masqueraded as reputable brands, leveraging familiar domains to coax the executive into surrendering login details, underscoring the rising sophistication of social‑engineering attacks.

By Gourav Rajput