Attackers launch dual campaign on GlobalProtect portals and SonicWall APIs

A hacking campaign is targeting GlobalProtect logins and scannig SonicWall APIs since December 2, 2025. A campaign began on December 2 targeting Palo Alto GlobalProtect portals with login attempts and scanning SonicWall SonicOS API endpoints. The activity came from over 7,000 IPs tied to German hosting provider 3xK GmbH, which operates its own BGP network […]

Waymo is Murder: NYT Pushes VC Doctor Pills to Erase the Dead

The New York Times has published sophisticated propaganda, structurally designed to manufacture consent with the murder machine known as Waymo. The Data on Self-Driving Cars Is Clear. We Have to Change Course. The entire function of this PR piece is to…

Maximum-severity XXE vulnerability discovered in Apache Tika

A maximum severity vulnerability in Apache Tika, tracked as CVE-2025-66516 (CVSS score of 10.0), allows XML external entity attacks. CVE-2025-66516 carries a maximum CVSS rating of 10.0 because it lets attackers trigger an XXE injection in Apache Tika’s core, PDF, and parser modules. An attacker can embed a malicious XFA file inside a PDF and […]

AZ Tesla in “Veered” Crash Head-on Into Dumptruck

The report makes it clear, Tesla caused a sudden veered acceleration event like a suicide attack. Based on the initial investigation, the driver of the Tesla was originally traveling eastbound on Cactus Road before veering left and driving the wrong wa…

Two CA Tesla Kill Two in “Veered” Crash

Two Teslas were engulfed in flames after a crash with a third car, killing the occupants of that car. The two Teslas involved were facing opposite directions, perpendicular to the lanes of the highway. The Lexus, where the two people died inside, was s…

CrowdStrike Identifies New China-Nexus Espionage Actor

CrowdStrike’s investigation shows that WARP PANDA initially infiltrated some victim networks as early as late 2023, later expanding operations.
The post CrowdStrike Identifies New China-Nexus Espionage Actor appeared first on TechRepublic.

New Variant of ClayRat Android Spyware Seize Full Device Control

The dangerous ClayRat Android spyware has evolved, gaining the ability to steal PINs, record screens, and disable security by abusing Accessibility Services. Users must beware of fake apps spreading through phishing sites and Dropbox.