Your blog category
The supply chain attack targeting widely-used Polyfill[.]io JavaScript library is wider in scope than previously thought, with new findings from Censys showing that over 380,000 hosts are embedding a polyfill… Read More »Polyfill[.]io Attack Impacts Over 380,000 Hosts, Including Major Companies
Microsoft has revealed two security flaws in Rockwell Automation PanelView Plus that could be weaponized by remote, unauthenticated attackers to execute arbitrary code and trigger a denial-of-service (DoS) condition. “The… Read More »Microsoft Uncovers Critical Flaws in Rockwell Automation PanelView Plus
Brazil’s data protection authority, Autoridade Nacional de Proteção de Dados (ANPD), has temporarily banned Meta from processing users’ personal data to train the company’s artificial intelligence (AI) algorithms. The ANPD… Read More »Brazil Halts Meta’s AI Data Processing Amid Privacy Concerns
A coordinated law enforcement operation codenamed MORPHEUS has felled close to 600 servers that were used by cybercriminal groups and were part of an attack infrastructure associated with the Cobalt… Read More »Global Police Operation Shuts Down 600 Cybercrime Servers Linked to Cobalt Strike
Cloud communications provider Twilio has revealed that unidentified threat actors took advantage of an unauthenticated endpoint in Authy to identify data associated with Authy accounts, including users’ cell phone numbers.… Read More »Twilio’s Authy App Breach Exposes Millions of Phone Numbers
Recently the Office of the Director of National Intelligence (ODNI) unveiled a new strategy for open-source intelligence (OSINT) and referred to OSINT as the “INT of first resort”. Public and… Read More »The Emerging Role of AI in Open-Source Intelligence
Unknown threat actors have been observed exploiting a now-patched security flaw in Microsoft MSHTML to deliver a surveillance tool called MerkSpy as part of a campaign primarily targeting users in… Read More »Microsoft MSHTML Flaw Exploited to Deliver MerkSpy Spyware Tool
The loader-as-a-service (LaaS) known as FakeBat has become one of the most widespread loader malware families distributed using the drive-by download technique this year, findings from Sekoia reveal. “FakeBat primarily… Read More »FakeBat Loader Malware Spreads Widely Through Drive-by Download Attacks
An unnamed South Korean enterprise resource planning (ERP) vendor’s product update server has been found to be compromised to deliver a Go-based backdoor dubbed Xctdoor. The AhnLab Security Intelligence Center… Read More »South Korean ERP Vendor’s Server Hacked to Spread Xctdoor Malware
Cybersecurity researchers have discovered an attack campaign that targets various Israeli entities with publicly-available frameworks like Donut and Sliver. The campaign, believed to be highly targeted in nature, “leverage target-specific… Read More »Israeli Entities Targeted by Cyberattack Using Donut and Sliver Frameworks