Your blog category
Threat actors are actively exploiting a now-patched, critical security flaw impacting the Atlassian Confluence Data Center and Confluence Server to conduct illicit cryptocurrency mining on susceptible instances. “The attacks involve… Read More »Atlassian Confluence Vulnerability Exploited in Crypto Mining Campaigns
Chinese-speaking users are the target of a “highly organized and sophisticated attack” campaign that is likely leveraging phishing emails to infect Windows systems with Cobalt Strike payloads. “The attackers managed… Read More »New Cyberattack Targets Chinese-Speaking Businesses with Cobalt Strike Payloads
A comprehensive guide authored by Dean Parsons emphasizes the growing need for specialized ICS security measures in the face of rising cyber threats. With a staggering 50% increase in ransomware… Read More »SANS Institute Unveils Critical Infrastructure Strategy Guide for 2024: A Call to Action for Securing ICS/OT Environments
Threat actors with ties to North Korea have been observed publishing a set of malicious packages to the npm registry, indicating “coordinated and relentless” efforts to target developers with malware… Read More »North Korean Hackers Target Developers with Malicious npm Packages
Cybersecurity researchers have flagged multiple in-the-wild exploit campaigns that leveraged now-patched flaws in Apple Safari and Google Chrome browsers to infect mobile users with information-stealing malware. “These campaigns delivered n-day… Read More »Russian Hackers Exploit Safari and Chrome Flaws in High-Profile Cyberattack
A non-profit supporting Vietnamese human rights has been the target of a multi-year campaign designed to deliver a variety of malware on compromised hosts. Cybersecurity company Huntress attributed the activity… Read More »Vietnamese Human Rights Group Targeted in Multi-Year Cyberattack by APT32
A years-old high-severity flaw impacting AVTECH IP cameras has been weaponized by malicious actors as a zero-day to rope them into a botnet. CVE-2024-7029 (CVSS score: 8.7), the vulnerability in… Read More »Unpatched AVTECH IP Camera Flaw Exploited by Hackers for Botnet Attacks
Attackers are increasingly using new phishing toolkits (open-source, commercial, and criminal) to execute adversary-in-the-middle (AitM) attacks. AitM enables attackers to not just harvest credentials but steal live sessions, allowing them… Read More »How AitM Phishing Attacks Bypass MFA and EDR—and How to Fight Back
U.S. cybersecurity and intelligence agencies have called out an Iranian hacking group for breaching multiple organizations across the country and coordinating with affiliates to deliver ransomware. The activity has been… Read More »U.S. Agencies Warn of Iranian Hacking Group’s Ongoing Ransomware Attacks
French prosecutors on Wednesday formally charged CEO Pavel Durov with facilitating a litany of criminal activity on the popular messaging platform and placed him under formal investigation following his arrest… Read More »French Authorities Charge Telegram CEO with Facilitating Criminal Activities on Platform