Your blog category
A previously undocumented threat actor with likely ties to Chinese-speaking groups has predominantly singled out drone manufacturers in Taiwan as part of a cyber attack campaign that commenced in 2024.… Read More »TIDRONE Espionage Group Targets Taiwan Drone Makers in Cyber Campaign
The U.S. government and a coalition of international partners have officially attributed a Russian hacking group tracked as Cadet Blizzard to the General Staff Main Intelligence Directorate (GRU) 161st Specialist… Read More »U.S. Offers $10 Million for Info on Russian Cadet Blizzard Hackers Behind Major Attacks
Two men have been indicted in the U.S. for their alleged involvement in managing a dark web marketplace called WWH Club that specializes in the sale of sensitive personal and… Read More »FBI Cracks Down on Dark Web Marketplace Managed by Russian and Kazakh Nationals
Threat actors affiliated with North Korea have been observed leveraging LinkedIn as a way to target developers as part of a fake job recruiting operation. These attacks employ coding tests… Read More »North Korean Threat Actors Deploy COVERTCATCH Malware via LinkedIn Job Scams
SonicWall has revealed that a recently patched critical security flaw impacting SonicOS may have come under active exploitation, making it essential that users apply the patches as soon as possible.… Read More »SonicWall Urges Users to Patch Critical Firewall Flaw Amid Possible Exploitation
Threat actors have long leveraged typosquatting as a means to trick unsuspecting users into visiting malicious websites or downloading booby-trapped software and packages. These attacks typically involve registering domains or… Read More »GitHub Actions Vulnerable to Typosquatting, Exposing Developers to Hidden Malicious Code
A recently disclosed security flaw in OSGeo GeoServer GeoTools has been exploited as part of multiple campaigns to deliver cryptocurrency miners, botnet malware such as Condi and JenX, and a… Read More »GeoServer Vulnerability Targeted by Hackers to Deliver Backdoors and Botnet Malware
The 2024 State of the vCISO Report continues Cynomi’s tradition of examining the growing popularity of virtual Chief Information Security Officer (vCISO) services. According to the independent survey, the demand… Read More »The State of the Virtual CISO Report: MSP/MSSP Security Strategies for 2025
Cybersecurity researchers have discovered yet another critical security flaw in the LiteSpeed Cache plugin for WordPress that could allow unauthenticated users to take control of arbitrary accounts. The vulnerability, tracked… Read More »Critical Security Flaw Found in LiteSpeed Cache Plugin for WordPress
Telegram CEO Pavel Durov has broken his silence nearly two weeks after his arrest in France, stating the charges are misguided. “If a country is unhappy with an internet service,… Read More »Pavel Durov Criticizes Outdated Laws After Arrest Over Telegram Criminal Activity