Curly COMrades: New Cyber-Espionage Group Deploys Advanced Malware Against Government Targets.
Posted inCybersecurity News

Curly COMrades: New Cyber-Espionage Group Deploys Advanced Malware Against Government Targets.

A sophisticated new cyber-espionage threat group has emerged on the global cybersecurity landscape, utilizing advanced custom malware to infiltrate government organizations and critical infrastructure entities. Security researchers have identified this previously unknown actor as "Curly COMrades," a designation that reflects the group's distinctive operational characteristics and technical methodology.
Discovery of Google Chrome sandbox escape vulnerability nets researcher $250,000 reward.
Posted inCybersecurity News

Discovery of Google Chrome sandbox escape vulnerability nets researcher $250,000 reward.

A security researcher going by the handle "Micky" recently earned a record-breaking $250,000 reward from Google for discovering a critical Chrome sandbox escape vulnerability. This represents one of the highest bug bounty payouts in Google's Chrome Vulnerability Reward Program (VRP) history, matching the program's maximum possible award.
Charon Ransomware: APT-Level Sophistication Meets Enterprise Targeting
Posted inCybersecurity News

Charon Ransomware: APT-Level Sophistication Meets Enterprise Targeting

Charon is a newly discovered ransomware family that represents a concerning evolution in cyber threats, combining advanced persistent threat (APT) techniques with destructive ransomware operations. This sophisticated ransomware has been observed in targeted attacks against enterprises, particularly in the Middle East's public sector and aviation industry.
Dutch NCSC Confirms Active Exploitation of Citrix NetScaler CVE-2025-6543
Posted inCybersecurity News

Dutch NCSC Confirms Active Exploitation of Citrix NetScaler CVE-2025-6543

The Netherlands' National Cyber Security Centre (NCSC) has issued urgent warnings about sophisticated cyberattacks exploiting a critical zero-day vulnerability in Citrix NetScaler systems, identified as CVE-2025-6543. This vulnerability has been actively exploited to breach multiple critical organizations across the Netherlands since at least early May 2025.