Cloud Software Group has disclosed a cross-site scripting (XSS) vulnerability affecting NetScaler ADC and NetScaler Gateway platforms. The flaw, tracked as CVE-2025-12101, poses a moderate security risk to organizations relying on these network appliances for authentication and secure access services. Field Value CVE ID CVE-2025-12101 Vulnerability Type Cross-Site Scripting (XSS) CWE Classification CWE-79: Improper Neutralization […]
Cybersecurity researchers at AhnLab Security Intelligence Center (ASEC) have uncovered a sophisticated attack campaign leveraging legitimate Remote Monitoring and Management (RMM) tools to deploy backdoor malware on unsuspecting users’ systems. The attacks abuse LogMeIn Resolve (GoTo Resolve) and PDQ Connect, transforming trusted administrative tools into weapons for data theft and remote system compromise. While the […]
Amazon’s threat intelligence team has uncovered a sophisticated cyber campaign exploiting previously undisclosed zero-day vulnerabilities in critical enterprise infrastructure. Advanced threat actors are actively targeting Cisco Identity Service Engine (ISE) and Citrix systems, deploying custom webshells to gain unauthorized administrative access to compromised networks. CVE ID Affected Product Severity Status CVE-2025-20337 Cisco Identity Service Engine […]
Cybersecurity researchers are calling attention to a large-scale spam campaign that has flooded the npm registry with thousands of fake packages since early 2024 as part of a likely financially motivated effort.
“The packages were systematically published over an extended period, flooding the npm registry with junk packages that survived in the ecosystem for almost two years,” Endor Labs
That text message you got about a “stuck package” from USPS, or an “unpaid road toll” notice, isn’t just random spam it’s become the signature move of an international criminal outfit that’s managed to swindle millions. Today, Google is launching a major campaign to turn the tide: filing a lawsuit to dismantle the infamous “Lighthouse” […]
A Chinese national has been sentenced to over 11 years in prison following one of the most significant cryptocurrency fraud investigations in history.
Zhimin Qian, 47, received an 11-year and eight-month sentence for possessing and transferring criminal property under the Proceeds of Crime Act 2002.
The case marks the culmination of a seven-year investigation by the Metropolitan Police Economic Crime team, resulting in the world’s largest confirmed cryptocurrency seizure.
Between 2014 and 2017, Qian orchestrated a massive fraud operation in China that victimized more than 128,000 individuals.
After converting illegally obtained funds into cash, jewelry, and Bitcoin, she fled to the United Kingdom using a false identity.
The scheme’s sophistication allowed Qian to disguise the origin of criminal proceeds through multiple conversion layers, making detection considerably more challenging for law enforcement agencies.
Following intelligence received in 2018 regarding suspicious financial activities in London, Metropolitan Police security analysts identified unusual patterns in cryptocurrency transactions linked to the case.
Investigators meticulously traced digital footprints across blockchain networks, ultimately recovering over 61,000 Bitcoin from Qian’s possession.
The seized cryptocurrency currently holds an estimated value of approximately £5 billion, representing the largest confirmed crypto seizure globally.
An accomplice, Seng Hok Ling, 47, of Matlock, Derbyshire, received a four-year and 11-month sentence for transferring criminal property.
Both defendants pleaded guilty, acknowledging the overwhelming evidence gathered during the comprehensive investigation conducted by the Metropolitan Police and Crown Prosecution Service.
Digital Trail Analysis and Asset Recovery
The investigation showcased advanced cryptocurrency forensics techniques employed by specialist teams. Every blockchain transaction generates an immutable record, allowing investigators to systematically track the movement of digital assets across multiple wallets and exchanges.
The Metropolitan Police worked closely with the Crown Prosecution Service, National Crime Agency, and Chinese law enforcement to build an extensive evidence portfolio.
These physical discoveries complemented the digital evidence, establishing a clear connection between traditional money laundering methods and cryptocurrency conversion strategies.
The Crown Prosecution Service continues pursuing civil recovery proceedings to permanently seize the remaining £4.8 billion in cryptocurrency and associated assets used to fund Qian’s extravagant lifestyle.
Follow us on Google News, LinkedIn, and X to Get More Instant Updates, Set CSN as a Preferred Source in Google.
A vulnerability has been discovered in Lite XL, a lightweight text editor, that could allow attackers to execute arbitrary code on affected systems.
Carnegie Mellon University experts identified CVE-2025-12120, which affects Lite XL versions 2.1.8 and earlier. The flaw exists in how Lite XL handles project configuration files.
How the Vulnerability Works
When users open a project directory, Lite XL automatically runs the .lite_project.lua file without asking for user confirmation.
This file is intended for project-specific settings and configurations, but it may contain executable Lua code.
The problem occurs because there is no verification step before execution. Users expect the configuration file to be harmless, but attackers can embed malicious Lua code within it.
Suppose an unsuspecting user opens a malicious project directory. In that case, this code runs immediately with the same privileges as the Lite XL application.
CVE ID
Product
Affected Versions
Vulnerability Type
CVE-2025-12120
Lite XL Text Editor
2.1.8 and earlier
Arbitrary Code Execution (ACE)
An attacker could distribute a seemingly legitimate project folder via GitHub, file-sharing services, or other platforms.
When a developer opens this project in Lite XL, the embedded malicious.lite_project, lua file executes silently.
The attacker could then steal sensitive data, modify files, install malware, or further compromise the user’s system.
This type of attack is hazardous because users often trust projects from known sources or repositories without carefully inspecting configuration files.
Any user running Lite XL version 2.1.8 or earlier is vulnerable, as reported by researchers at Carnegie Mellon University.
The impact depends on the user’s system permissions. In most cases, the attacker gains the same privileges as the Lite XL process, which could be significant if Lite XL runs with elevated permissions.
Users should immediately update Lite XL to a patched version as soon as it becomes available, and avoid opening untrusted project directories in Lite XL.
Inspect the contents of any .lite_project.lua file before opening projects from unknown sources. This vulnerability demonstrates the importance of understanding how applications handle configuration files, especially when they contain executable code.
Lite XL maintainers should implement confirmation prompts before executing project configuration files or turn off automatic execution entirely.
Recognition we believe underscores global customer trust and proven product excellence for security teams evaluating NDR solutions.
ThreatBook, a global leader in threat intelligence-based cybersecurity solutions, today announced that for its Threat Detection Platform (TDP), it has been recognized as a Strong Performer in the 2025 Gartner Peer Insights Voice of the Customer for Network Detection and Response (NDR).
This marks the third consecutive year that ThreatBook has received this distinction, which we believe underscores consistent customer satisfaction, product innovation, and operational excellence.
According to Gartner: “‘Voice of the Customer’ is a document that synthesizes Gartner Peer Insights reviews into insights for buyers of technology and services. This aggregated peer perspective, along with the individual detailed reviews, is complementary to Gartner expert research and can play a key role in your buying process. Peers are verified reviewers of a technology product or service, who not only rate the offering, but also provide valuable feedback to consider before making a purchase decision.”
“We’re thrilled to be recognized again as a Strong Performer in the Gartner Peer Insights ‘Voice of the Customer’ for NDR,” said Mr. Feng XUE, Chief Executive Officer of ThreatBook. “Our mission is to empower security teams with visibility and precision, especially in the Asia-Pacific region where attacks are becoming more sophisticated and targeted. We believe, this recognition reflects our customers’ trust in ThreatBook TDP’s ability to deliver real detection accuracy and operational resilience.”
Recognition Driven by Real-World Customer Feedback
To be included in the report, vendors must meet stringent inclusion criteria and are positioned within four quadrants based on user interest, product experience, and overall satisfaction — covering areas such as product capabilities, support, and delivery.
According to the research: “in the network detection and response market, Gartner Peer Insights published 1,263 reviews and ratings during the consideration period,” with 11 vendors ultimately meeting the inclusion standards. ThreatBook is among the few vendors recognized as a Strong Performer for three consecutive years. ThreatBook was among the few vendors to meet the full inclusion criteria and achieved 100% of customers willing to recommend ThreatBook TDP, based on 43 overall verified reviews submitted as of Aug 2025.
Enterprise users from finance, manufacturing, energy, services, and retail sectors across Asia-Pacific, North America, the Middle East, and Europe contributed feedback that rated ThreatBook TDP highly in overall product experience, detection precision, and operational efficiency.
TDP: Industry Leading Intelligence-Driven Detection and Response
As the market leader in China’s threat intelligence sector (iResearch, 2024 China Threat Intelligence Industry Development Report), ThreatBook integrates high-fidelity threat intelligence into its detection and response solutions.
ThreatBook TDP is a full-traffic, intelligence-driven NDR platform designed to provide visibility, context, and actionability at scale.
Key strengths include:
l High-Precision Detection – Built on ThreatBook’s proprietary global and APAC threat intelligence, TDP achieves industry-leading detection accuracy for targeted and advanced attacks.
l Operational Readiness – Automatically maps enterprise attack surfaces and reconstructs attack chains from an adversarial perspective for proactive defense.
l Closed-Loop Response – Integrates with a broad ecosystem of security tools, supporting automated blocking and orchestration with 99% effectiveness.
l User-Focused Experience – Offers an intuitive interface and multi-dimensional analytics to enhance SOC efficiency and decision-making.
Proven Across Industries and Regions
Today, ThreatBook TDP is deployed in thousands of leading enterprises across critical industries including finance, energy, power, internet, and smart manufacturing.
It has become a core detection and response system for enterprise and government SOCs, helping them achieve visibility, precision, and proactive defense in dynamic threat environments.
Full review: https://www.gartner.com/reviews/market/network-detection-and-response/vendor/threatbook/product/threatbook-tdp-ndr/review/view/6146934
Full Review: https://www.gartner.com/reviews/market/network-detection-and-response/vendor/threatbook/product/threatbook-tdp-ndr/review/view/6145510
Gartner, Voice of the Customer for Network Detection and Response, 30 October 2025
* Disclaimer: GARTNER and PEER INSIGHTS are registered trademarks of Gartner, Inc. and/or its affiliates in the U.S. and internationally and are used herein with permission. All rights reserved. Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose.
About ThreatBook
ThreatBook is a global cybersecurity company specializing in advanced threat intelligence, detection, and response. Founded in 2015, ThreatBook equips enterprises, governments, and service providers with the clarity and context needed to defend against evolving digital risks.
By combining artificial intelligence with deep threat intelligence, ThreatBook delivers real-time visibility, hyper-accurate detections, and early-warning insights against nation-state actors, cybercriminal groups, and emerging attack campaigns.
With unique vantage points from across the Asia Pacific region and beyond, ThreatBook provides intelligence coverage that bridges Eastern and Western threat landscapes, offering an unmatched perspective for global defenders.
ThreatBook: Act with Intelligence that Matters. To learn more, visit www.threatbook.io or follow us on LinkedIn.
Recognition we believe underscores global customer trust and proven product excellence for security teams evaluating NDR solutions. ThreatBook, a global leader in threat intelligence-based cybersecurity solutions, today announced that for its Threat Detection Platform (TDP), it has been recognized as a Strong Performer in the 2025 Gartner Peer Insights Voice of the Customer for Network Detection and Response […]
Air Force planners want ideas on building the service’s next conter-air missile at a cost of $500,000 per unit, although the service already has cheaper munitions in its inventory.
As part of the service’s Counter-Air Missile Program, or CAMP, the Air Force wants to develop a ground-launched missile that will set the groundwork for a “ low-cost air-to-air missile,” according to a Nov. 7 request for white papers posted on SAM.gov.
“The highest priority of this effort is the development and demonstration of an affordable, open system, modular, and highly producible ground-launched capability,” the notice from the Air Force Life Cycle Management Center reads, adding that work would start on ground-launch versions as a way to test the technology before pivoting to “future affordable air-to-air missile capabilities.”
The first phase of CAMP would focus on developing and demonstrating a ground-launched prototype in two years. Phase two would transition the missile into the program of record, and future phases would transition it to an air-to-air variant. Industry ideas are due by Dec. 2.
While technical details of the missile’s design and function are not included in the notice, it states the government will “trade exquisite capabilities for affordability and producibility in support of delivering quantities of 1,000-3,500 per year in full rate production.”
[[Related Posts]]
But it’s unclear how the new missile would be used with existing air-to-air and counter-drone munitions in the Air Force inventory.
The proposed cost is less than the service’s $1 million AIM-120D Advanced Medium-Range Air-To-Air Missile and comparable to the existing $472,000 AIM-9X Sidewinder, according to figures from the War Zone. But it is significantly more expensive than the service’s APKWS II jet-fired anti-drone rockets—the most costly components of those missiles run between $15,000 and $20,000.
Traditional ground or submarine- launched Tomahawk cruise missiles cost around $2.2 million, according to defense experts.
Air Force spokespeople did not immediately respond to questions about the proposed benefits of the program in relation to the price tag.
The call for industry ideas follows the passage of the reconciliation bill this summer, which allocated $250 million to develop, procure, and integrate Air Force low-cost counter-air capabilities. The notice was posted the same day as Defense Secretary Pete Hegseth’s speech to defense companies urging them to invest more and move faster on acquisition programs.
“This effort follows the strategic direction of the [Defense Department] to innovate warfighter advantage, accelerate production, and deliver at scale,” the notice reads.
The notice also mentioned the munition will be a part of the Air Force’s “new weapon class of Enterprise Test Vehicle”—the low-cost cruise missiles currently being pursued by the service in partnership with the Defense Innovation Unit. Anduril and Zone 5 Technologies were both selected to move to the second phase of the ETV program and are progressing towards a live-fire test this summer, DIU announced in September.
