Your blog category
The threat actors behind the Windows-based Grandoreiro banking trojan have returned in a global campaign since March 2024 following a law enforcement takedown in January. The large-scale phishing attacks, likely facilitated by… Read More »Grandoreiro Banking Trojan Resurfaces, Targeting Over 1,500 Banks Worldwide
The cryptojacking group known as Kinsing has demonstrated its ability to continuously evolve and adapt, proving to be a persistent threat by swiftly integrating newly disclosed vulnerabilities to exploit arsenal and expand… Read More »Kinsing Hacker Group Exploits More Flaws to Expand Botnet for Cryptojacking
Cybersecurity researchers have shed more light on a remote access trojan (RAT) known as Deuterbear used by the China-linked BlackTech hacking group as part of a cyber espionage campaign targeting the Asia-Pacific… Read More »China-Linked Hackers Adopt Two-Stage Infection Tactic to Deploy Deuterbear RAT
A new report from XM Cyber has found – among other insights – a dramatic gap between where most organizations focus their security efforts, and where the most serious threats actually reside. The new… Read More »New XM Cyber Research: 80% of Exposures from Misconfigurations, Less Than 1% from CVEs
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting D-Link routers to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The list… Read More »CISA Warns of Actively Exploited D-Link Router Vulnerabilities – Patch Now
The Kimsuky (aka Springtail) advanced persistent threat (APT) group, which is linked to North Korea’s Reconnaissance General Bureau (RGB), has been observed deploying a Linux version of its GoBear backdoor as part… Read More »Kimsuky APT Deploying Linux Backdoor Gomir in South Korean Cyber Attacks
Researchers have discovered a new security vulnerability stemming from a design flaw in the IEEE 802.11 Wi-Fi standard that tricks victims into connecting to a less secure wireless network and… Read More »New Wi-Fi Vulnerability Enables Network Eavesdropping via Downgrade Attacks
The North Korea-linked Kimsuky hacking group has been attributed to a new social engineering attack that employs fictitious Facebook accounts to targets via Messenger and ultimately delivers malware. “The threat actor created… Read More »North Korean Hackers Exploit Facebook Messenger in Targeted Malware Campaign
Security researchers have disclosed almost a dozen security flaws impacting the GE HealthCare Vivid Ultrasound product family that could be exploited by malicious actors to tamper with patient data and… Read More »Researchers Uncover 11 Security Flaws in GE HealthCare Ultrasound Machines
Google has rolled out fixes to address a set of nine security issues in its Chrome browser, including a new zero-day that has been exploited in the wild. Assigned the CVE identifier CVE-2024-4947, the vulnerability… Read More »Google Patches Yet Another Actively Exploited Chrome Zero-Day Vulnerability