Recent investigations by eSentire’s Threat Response Unit have uncovered a sophisticated cyberattack involving the Rust-based malware ChaosBot, which exploited compromised CiscoVPN credentials and an over-privileged Active Directory account. The attackers demonstrated advanced techniques, utilizing Discord for command and control, while bypassing security measures through phishing and credential theft. Key vulnerabilities identified include the dangers posed by over-privileged accounts and weak password policies. This incident underscores the critical need for organizations to implement robust cybersecurity protocols, …

Recent revelations from GreyNoise indicate a coordinated cyber exploitation campaign targeting Cisco Secure Firewalls, Palo Alto Networks firewalls, and Fortinet VPN devices, originating from the same subnets. The analysis highlighted a staggering 500% increase in scanning activity related to Palo Alto’s GlobalProtect portals, alongside over 1.3 million unique login attempts on Palo Alto firewalls within a single week. The campaigns exhibit shared TCP fingerprints and synchronized activity peaks, suggesting a common threat actor. Given the …

Securities and Exchange Board of India (SEBI) Chairman Tuhin Kanta Pandey announced the development of an action plan aimed at transitioning the regulated market ecosystem towards quantum-resilient cryptography. Speaking at the Global Fintech Fest 2025, he emphasized the imminent risks posed by advancements in quantum computing to conventional cryptographic methods and the necessity for phased replacement with post-quantum algorithms. This initiative aligns with a July 2025 whitepaper from MeitY, CERT-In, and cybersecurity firm SISA, which …

A recent campaign by the RondoDox botnet has exploited over 56 vulnerabilities across a range of devices, including routers from major manufacturers like Cisco, D-Link, and Netgear, as well as CCTV systems and industrial routers. This operation, characterized as a rapid “smash-and-grab,” peaked from September 22-24 and employed a loader-as-a-service model bundling RondoDox with Mirai and Morte malware, enabling remote control and DDoS attacks. Security experts from Trend Micro’s Zero Day Initiative have advised users …

A pro-Russian hacker group, known as TwoNet, recently boasted about a cyberattack on a Dutch water facility, which was later revealed to be a breach of a decoy system set up by cybersecurity researchers. The group, which emerged in early 2025, has escalated from DDoS attacks to targeting industrial control systems but demonstrated a lack of understanding of their operations. This incident reflects a disturbing trend of inexperienced hacktivists targeting critical infrastructure, a concern echoed …

A senior official from the Delhi Metro Rail Corporation (DMRC) has emphasized the need for enhanced cybersecurity following recent outages in metro networks across Europe, notably in Madrid, Barcelona, and Lisbon. These incidents, which paralyzed services and stranded thousands of passengers, have raised alarms about the vulnerabilities faced by urban transport systems due to increased digitalization. At the UITP India Urban Rail Conference, the official advocated for the establishment of a comprehensive database on cyber …