Beware: Fake Google Meet Pages Deliver Infostealers in Ongoing ClickFix Campaign
Threat actors are leveraging fake Google Meet web pages as part of an ongoing malware campaign dubbed ClickFix to deliver...
News
Microsoft Reveals macOS Vulnerability that Bypasses Privacy Controls in Safari Browser
Microsoft has disclosed details about a now-patched security flaw in Apple's Transparency, Consent, and Control (TCC) framework in macOS that...
Nation States Linked to Two-Thirds of Attributable Malware Attacks
Recent data reveals that a staggering two-thirds of the attributable malware assaults on Netskope customers are linked to state-backed actors,...
CISA Seeks Feedback on Product Security Flaws Guidance for Organizations
The US Cybersecurity and Infrastructure Security Agency (CISA) is currently inviting feedback on its draft guidance regarding product security flaws....
NIS2 Deadline: Urgent Concerns Over Compliance Readiness
As the NIS2 Directive deadline looms, many organizations express doubts about their readiness to ensure compliance with new cybersecurity regulations....
RansomHub Surpasses LockBit as Leading Ransomware Group – Latest Insights
RansomHub has emerged as the leading ransomware operation in terms of successful attacks, according to the latest Symantec report. This...
Cicada3301 Ransomware: Targeting Critical Sectors in the US and UK
Cicada3301 ransomware has emerged as a formidable threat to businesses in crucial sectors within the US and UK since its...
US Charges Members of Anonymous Sudan in Major DDoS Cybercrime Network
US authorities have charged two Sudanese nationals associated with a prominent DDoS cybercrime network, Anonymous Sudan. US authorities have charged...
Iranian Hackers Intensify Attacks on Critical Infrastructure Using Brute Force Methods
A recent warning from intelligence and law enforcement agencies highlights the alarming trend of Iranian-backed cyber operations focusing on critical...
North Korea’s Fake IT Worker Schemes: New Tactics in Extortion
North Korea's fake IT worker schemes are evolving, as researchers uncover alarming new tactics aimed at extorting employers. Researchers from...
Russian RomCom Attacks Target Ukrainian Government with New SingleCamper RAT Variant
The Russian threat actor known as RomCom has been linked to a new wave of cyber attacks aimed at Ukrainian...
Researchers Uncover Cicada3301 Ransomware Operations and Its Affiliate Program
Cybersecurity researchers have gleaned additional insights into a nascent ransomware-as-a-service (RaaS) called Cicada3301 after successfully gaining access to the group's...
U.S. Charges Two Sudanese Brothers for Record 35,000 DDoS Attacks
Federal prosecutors in the U.S. have charged two Sudanese brothers with running a distributed denial-of-service (DDoS) botnet for hire that...
SideWinder APT Strikes Middle East and Africa With Stealthy Multi-Stage Attack
An advanced persistent threat (APT) actor with suspected ties to India has sprung forth with a flurry of attacks against...
Microsoft Monthly Security Update (June 2024)
Updated Risk, Description, Source and Related Links.CVE-2024-30088 is being exploited in the wild. This is a Windows Kernel Time-of-check Time-of-use (TOCTOU)...
Critical Kubernetes Image Builder Vulnerability Exposes Nodes to Root Access Risk
A critical security flaw has been disclosed in the Kubernetes Image Builder that, if successfully exploited, could be abused to...
F5 Products Multiple Vulnerabilities
Multiple vulnerabilities were identified in F5 Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of...
Encryption of Cookies in F5 BIG-IP Systems Urged by CISA
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a crucial call to action urging organizations to implement encryption...
Telekopye Scammers Exploit Booking.com and Airbnb Users
The rise of Telekopye scammers poses a significant threat to users of Booking.com and Airbnb, heightening the need for awareness...
US DoD Implements Stricter Cybersecurity Standards for Defense Contractors
The US Department of Defense (DoD) is enhancing its cybersecurity standards for defense contractors, requiring compliance through the Cybersecurity Maturity...
Casio Confirms Ransomware Attack and Data Breach Impacting Corporate Systems
Casio has confirmed a significant ransomware attack that has compromised its corporate systems and customer data, raising security concerns. Casio...
Game Freak Data Breach: Pokémon Developer Exposes 2,606 Employee Records
The recent data breach affecting Game Freak, the renowned developer behind the Pokémon franchise, reveals sensitive information of over 2,600...
Cerberus Android Banking Trojan: Insights into a New Multi-Stage Malicious Campaign
The Cerberus Android Banking Trojan has recently resurfaced, being deployed in a sophisticated new multi-stage malicious campaign targeting mobile users....
Unprepared for Post-Quantum Threat: Why Organizations Must Act Now
Organizations are lagging in their preparedness for the post-quantum threat, highlighted by a recent report from the Entrust Cybersecurity Institute....
