​Cybersecurity researchers have disclosed details of what has been described as a “highly sophisticated infection chain” targeting government organizations in Asia. The activity, detailed by Kaspersky this week, targeted a… Read More »NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection

​Malicious code on the website of prediction market Polymarket sold some signed-in traders’ positions and moved their funds to the hackers on October 29. The code had replaced a page-speed… Read More »Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script

​American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer data. However, the company noted that the breach… Read More »Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data

​The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active exploitation in… Read More »Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

​Threat actors are launching about 8,226 network-layer distributed denial-of-service (DDoS) attacks per hour, Cloudflare revealed Thursday. The web infrastructure and security company said it autonomously mitigated 18.2 million network-layer (L3)… Read More »Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%

​A malicious ChatGPT share link could run an attacker’s code in the logged-in session of anyone who opened it, allowing them to read their private conversations, researchers at the security firm… Read More »A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats

​Chinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX in attacks aimed at high-value targets simultaneously. The activity has been attributed… Read More »Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide

​Threat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches were released. The vulnerability, which does not have a CVE identifier, relates… Read More »WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours

​TeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer session, the computer that… Read More »TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them