Cybersecurity News, Analysis & Insights — Threat Digest

Vulnerabilities & CVEs ⚠️ Warning

90 Zero-Days in 2025: Enterprises Bleed While Browsers Breathe Easier

Forget the headlines about fewer browser hacks—your office router or firewall might be the real spy magnet this year. Google's zero-day count stabilized at 90, but enterprises now shoulder nearly half the pain.

5 min read 1 month, 2 weeks ago

🌐

Nation-State Threats ⚠️ Warning

Silver Dragon's Cyber Onslaught Hits Asian and European Governments – Wake-Up Call for the Rest of Us

Your government's email just got a lot more interesting to Beijing. Silver Dragon, Check Point's new name for a slick Chinese threat crew, is burrowing into Southeast Asian and European orgs with APT41 flair.

4 min read 1 month, 2 weeks ago

🎯

Threat Intelligence 📊 Objective

Check Point's 2025 Threat Intel: Real Edge or Echo Chamber?

Check Point Research's 2025 roundup promises untold stories from the cyber frontlines. We're dissecting if it's gold-standard intel — or polished PR.

5 min read 1 month, 2 weeks ago

Nation-State Threats ⚠️ Warning

Russian Military Hacks 5,000 Routers, Turns Home Networks into Spy Hubs

Microsoft spotted Russian military hackers infiltrating 5,000 home routers, hijacking DNS to spy on traffic and launch man-in-the-middle attacks. This isn't some fringe op; it's a scalable playbook exposing enterprise blind spots.

5 min read 1 month, 2 weeks ago

Threat Intelligence ⚠️ Warning

DarkSword: iOS Spy Tool Now Shared Freely Among Hackers and Spies

Imagine clicking a Snapchat link and handing spies your entire iPhone. That's DarkSword in action, now passed around like a hot potato among threat actors worldwide.

5 min read 1 month, 2 weeks ago

Threat Intelligence ⚠️ Warning

2.6 Million Records Leaked in Employee Benefits Breach: March 23 Threat Intel Roundup

Over 2.6 million individuals' health and benefits data potentially stolen from Navia Benefit Solutions. This week's threats show attackers pivoting hard to AI flaws and critical vulns.

5 min read 1 month, 2 weeks ago

Threat Intelligence ⚠️ Warning

Coruna: The iOS Exploit Kit That Slid from Spy Weapon to Chinese Scam Trap

Forget the tech jargon: if your iPhone's stuck on iOS 17 or older, some shady kit called Coruna could crack it wide open. It's hopped from government spies to online hustlers, proving zero-days don't stay elite for long.

5 min read 1 month, 2 weeks ago

🕳️

Vulnerabilities & CVEs ⚠️ Warning

n8n's Shared Credentials: The Open Door to Account Takeovers No One Saw Coming

Imagine trusting your workflows to n8n, only to find shared credentials handing attackers full control. This vuln exposes deep flaws in open-source automation.

4 min read 1 month, 2 weeks ago

Cloud Security ⚠️ Warning

ChatGPT's Secret Backdoor: Your Private Chats Are Leaking Out

Imagine spilling your medical history or tax secrets to ChatGPT, only for it to quietly beam them to a hacker's server. That's not sci-fi—it's happening right now through a sneaky flaw in its code sandbox.

5 min read 1 month, 2 weeks ago

Threat Intelligence ⚠️ Warning

ShinyHunters' Vishing Ring Eyes Your SaaS Logins – Old Tricks, Bigger Hauls

Hackers posing as IT help are dialing up the pressure on execs, tricking them into handing over SSO keys to vast SaaS troves. Mandiant's latest report peels back the curtain on ShinyHunters' ruthless expansion.

4 min read 1 month, 2 weeks ago

Vulnerabilities & CVEs ⚠️ Warning

React2Shell: CVE-2025-55182 Lets Hackers RCE Unpatched React Servers in One HTTP Shot

A single HTTP request flips your React server into a hacker's playground. Google Threat Intel spots China-nexus groups dropping backdoors via CVE-2025-55182—React2Shell—just days after disclosure.

5 min read 1 month, 2 weeks ago

☁️

Cloud Security ⚠️ Warning

Claude Code's Hidden Hooks Could Turn Your AI Projects into Hacker Havens

Picture this: you're collaborating on an AI-powered code project, sharing files like candy. Boom — attackers remotely execute code on your machine and snag your API keys. That's the nightmare Check Point just exposed in Claude Code.

5 min read 1 month, 2 weeks ago