Zhong Stealer Malware exploits ZenDesk
Zhong Stealer is a newly identified malware that poses significant threats to the fintech and cryptocurrency sectors. Discovered during a phishing campaign between December 20 and 24, 2024, this sophisticated…
CISA adds Oracle PLM and Adobe ColdFusion flaws to its KEV
The Cybersecurity and Infrastructure Security Agency (CISA) has recently added two significant vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog. These vulnerabilities, affecting Adobe ColdFusion and Oracle Agile Product Lifecycle…
Cisco detailed Salt Typhoon Attack on Telecom Networks
The Salt Typhoon cyber espionage campaign has been meticulously analyzed by Cisco Talos, revealing a highly sophisticated operation targeting global telecommunications networks. This campaign, attributed to a suspected Beijing-linked threat…
Google Released PoC for CVE-2025-0110 PAN OS Flaw
Google's Project Zero and Mandiant cybersecurity teams have jointly released a proof-of-concept (PoC) exploit for a significant security vulnerability identified in Palo Alto Networks' PAN-OS OpenConfig plugin. This vulnerability, tracked…
Posted inSecurity NewsLetter
TheCyberThrone Security Weekly Review – February 22, 2025
Welcome to TheCyberThrone cybersecurity week in review will be posted covering the important security happenings. This review is for the week ending Saturday, February 22, 2025. XCSSET Malware Targeting macOS…
FrigidStealer Malware Targeting macOS
FrigidStealer is a newly identified macOS malware that targets users through fake browser updates. This sophisticated malware campaign is attributed to the threat actor TA2727 and leverages advanced techniques to…
Snake Keylogger Targeting Browsers
The Snake Keylogger campaign has evolved, introducing a new variant that specifically targets popular web browsers such as Google Chrome, Microsoft Edge, and Mozilla Firefox. This sophisticated malware employs advanced…
CVE-2025-24989 added to CISA KEV
CVE-2025-24989 is a high security vulnerability that has been added to the Known Exploited Vulnerabilities (KEV) Catalog by the Cybersecurity and Infrastructure Security Agency (CISA). This inclusion highlights the urgency…