BeaverTail Phishing Campaign: The Threat of North Korean IT Workers
The rise of North Korean IT worker schemes has brought significant concerns, particularly with the emergence of the BeaverTail phishing...
News
US-CERT Vulnerability Summary for the Week of November 11, 2024
The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded in the past week. In some...
Bitfinex Hacker Ilya Lichtenstein Sentenced to Five Years for $4.5 Billion Crypto Heist
Ilya Lichtenstein, the mastermind behind one of the largest cryptocurrency heists in history, has been sentenced to five years in...
Palo Alto Networks Zero-Day Vulnerability Actively Exploited: A Critical Security Advisory
Palo Alto Networks has issued a critical security advisory regarding a newly identified zero-day vulnerability affecting its firewall management interfaces,...
O2’s Innovative AI Granny Tackles Scam Callers with Engaging Tales
O2 has introduced an innovative solution in the battle against fraudulent calls: a human-like AI granny designed to outsmart scammers....
Zero-Day Vulnerability Discovered by watchTowr in Fortinet Products
In an alarming revelation, watchTowr has identified a new zero-day vulnerability impacting Fortinet’s cybersecurity products, highlighting a serious security risk....
Ransomware Groups Exploit Cloud Services for Data Exfiltration and Attacks
Ransomware groups are increasingly turning to cloud services to execute their malicious activities, posing a significant threat to IT security....
Sitting Ducks DNS Attacks Threaten Over 1 Million Global Domains
The cyber threat known as 'Sitting Ducks' has put over a million domains at risk due to DNS misconfigurations, making...
Bank of England U-Turns on Critical Third Party Vulnerability Disclosure Rules
The Bank of England has revised its approach towards vulnerability disclosure rules for critical third party organizations, emphasizing cybersecurity resilience....
Telecom Hack Exposes US Officials: Chinese Espionage Campaign Unveiled
A significant telecom hack has compromised data of US officials, linking it to Chinese espionage efforts. Learn more about this...
Microsoft Power Pages: Misconfiguration Risks and Data Exposure
Misconfigurations in Microsoft Power Pages are exposing sensitive data, highlighting the need for stronger security measures. Misconfigurations within Microsoft Power...
API Security Threats: 83% of Companies Experience Security Incidents
API security is becoming increasingly critical, with an alarming 83% of firms reporting security incidents. Understanding the vulnerabilities is key...
Hive0145 Targets Europe with Sophisticated Strela Stealer Campaigns
The cybercriminal group Hive0145 is actively targeting Europe using advanced Strela Stealer malware to compromise sensitive email credentials. Ongoing campaigns...
Ethical Hacker or Not? Amazon MOVEit Leaker’s Controversial Claims
The Amazon MOVEit data leak has raised significant concerns over security practices, with the individual behind it claiming ethical motives....
Lazarus Group’s Code Smuggling Technique Exploits Extended Attributes in macOS
The Lazarus Group has unveiled a new code smuggling technique that exploits custom extended attributes on macOS systems, evading conventional...
AI Threat Worsening in 2025: Insights from Google Cloud
Google Cloud's latest insights highlight the escalating AI threat expected in 2025, emphasizing ongoing and new malicious uses of AI...
Microsoft Addresses Four Critical Zero-Days in November Patch Tuesday Updates
In November, Microsoft tackled significant security challenges, releasing updates for nearly 100 vulnerabilities, including four critical zero-days that demand immediate...
Halliburton Discloses $35 Million Ransomware Loss Impacting Energy Sector
In a significant revelation, Halliburton has announced that a ransomware attack in August resulted in a staggering $35 million loss,...
CISOs Turn to Personal Indemnity Insurance Amid Rising Breach Pressures
In response to increasing breach risks and intensified boardroom scrutiny, CISOs are increasingly relying on personal indemnity insurance. Discover the...
Citrix Zero-Day Vulnerability Enables Remote Code Execution: What You Need to Know
A critical new Citrix zero-day vulnerability poses a threat by allowing unauthenticated remote code execution (RCE) through Citrix’s Session Recording...
North Korea Hackers Use Flutter Framework for macOS Malware Delivery
North Korean hackers are creatively embedding malware in Flutter applications, targeting macOS devices in an unprecedented move. According to recent...
TA455’s Targeted Aerospace Campaign: Unveiling a Malware Job Scam
Discover how TA455, an Iranian-linked threat actor, is exploiting job recruitments to spread malware in the aerospace sector. This innovative...
GoIssue Phishing Tool Threatens GitHub Developers and Organizations
The newly discovered phishing tool, GoIssue, poses a serious risk to GitHub users and the software development community at large....
US-CERT Vulnerability Summary for the Week of November 4, 2024
The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded in the past week. In some...
