Your blog category
The nation-state threat actor known as SideWinder has been attributed to a new cyber espionage campaign targeting ports and maritime facilities in the Indian Ocean and Mediterranean Sea. The BlackBerry… Read More »New SideWinder Cyber Attacks Target Maritime Facilities in Multiple Countries
A recently patched security flaw impacting VMware ESXi hypervisors has been actively exploited by “several” ransomware groups to gain elevated permissions and deploy file-encrypting malware. The attacks involve the exploitation… Read More »VMware ESXi Flaw Exploited by Ransomware Groups for Admin Access
Cybersecurity researchers are warning about a new phishing campaign that targets Microsoft OneDrive users with the aim of executing a malicious PowerShell script. “This campaign heavily relies on social engineering… Read More »OneDrive Phishing Scam Tricks Users into Running Malicious PowerShell Script
Cybersecurity company Acronis is warning that a now-patched critical security flaw impacting its Cyber Infrastructure (ACI) product has been exploited in the wild. The vulnerability, tracked as CVE-2023-45249 (CVSS score:… Read More »Critical Flaw in Acronis Cyber Infrastructure Exploited in the Wild
An unknown threat actor has been linked to a massive scam campaign that exploited an email routing misconfiguration in email security vendor Proofpoint’s defenses to send millions of messages spoofing… Read More »Proofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Phishing Emails
Searchable Encryption has long been a mystery. An oxymoron. An unattainable dream of cybersecurity professionals everywhere. Organizations know they must encrypt their most valuable, sensitive data to prevent data theft… Read More »How Searchable Encryption Changes the Data Security Game
A threat actor known as Stargazer Goblin has set up a network of inauthentic GitHub accounts to fuel a Distribution-as-a-Service (DaaS) that propagates a variety of information-stealing malware and netting… Read More »‘Stargazer Goblin’ Creates 3,000 Fake GitHub Accounts for Malware Spread
The remote access trojan known as Gh0st RAT has been observed being delivered by an “evasive dropper” called Gh0stGambit as part of a drive-by download scheme targeting Chinese-speaking Windows users.… Read More »Gh0st RAT Trojan Targets Chinese Windows Users via Fake Chrome Site
Cybersecurity researchers have discovered a malicious package on the Python Package Index (PyPI) repository that targets Apple macOS systems with the goal of stealing users’ Google Cloud credentials from a… Read More »Malicious PyPI Package Targets macOS to Steal Google Cloud Credentials
French judicial authorities, in collaboration with Europol, have launched a so-called “disinfection operation” to rid compromised hosts of a known malware called PlugX. The Paris Prosecutor’s Office, Parquet de Paris,… Read More »French Authorities Launch Operation to Remove PlugX Malware from Infected Systems