Author: Eagl3Sec

A sophisticated new variant of the MacSync macOS information stealer has been uncovered that bypasses Apple’s built-in security protections by exploiting legitimate code-signing and notarization processes. According to researchers at…

A newly disclosed, high-severity security flaw in MongoDB, the widely used NoSQL database, has sent shockwaves through the cybersecurity and developer communities. The vulnerability, tracked as CVE-2025-14847 and dubbed “MongoBleed”,…

As organizations brace for an ever-expanding threat landscape, a new warning from software security leader JFrog highlights a counterintuitive yet critical danger: the very security tools designed to protect your…

In a shocking incident that rocked the cryptocurrency community just days after Christmas 2025, a security breach involving the Trust Wallet Chrome extension has resulted in nearly $7 million worth…

In one of the most technically sophisticated cyber espionage campaigns uncovered in 2025, researchers have attributed a long-running malware distribution effort to a China-linked advanced persistent threat (APT) group dubbed…

A critical security vulnerability has been disclosed in LangChain Core, the foundational Python package used in building large language model (LLM)‑powered applications, raising alarm across the AI and software development…

In this week’s edition of the ThreatsDay Bulletin, cybersecurity researchers warn of a rapidly shifting threat landscape where traditional attack vectors are fused with advanced stealth techniques, artificial intelligence (AI)…

New findings from blockchain intelligence firm TRM Labs confirm that the far-reaching consequences of the 2022 LastPass data breach have continued to unfold years later — with threat actors cracking…

Fortinet, a leading vendor of network security appliances and firewalls, has issued an urgent warning that threat actors are actively exploiting serious vulnerabilities in multiple Fortinet products — including FortiOS…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical security flaw affecting Digiever DS-2105 Pro network video recorders (NVRs) to its Known Exploited Vulnerabilities (KEV) Catalog, based…