Microsoft has revealed that a Chinese threat actor it tracks as Storm-0940 is leveraging a botnet called Quad7 to orchestrate highly evasive password spray attacks. The tech giant has given… Read More »Microsoft Warns of Chinese Botnet Exploiting Router Flaws for Credential Theft
Microsoft is further delaying the release of its controversial Recall feature for Windows Copilot+ PCs, stating it’s taking the time to improve the experience. The development was first reported by… Read More »Microsoft Delays Windows Copilot+ Recall Release Over Privacy Concerns
Cybersecurity researchers have disclosed a new phishing kit that has been put to use in campaigns targeting Australia, Japan, Spain, the U.K., and the U.S. since at least September 2024.… Read More »New Phishing Kit Xiū gǒu Targets Users Across Five Countries With 2,000 Fake Sites
Did you know that advanced threat actors can infiltrate the identity systems of major organizations and extract sensitive data within days? It’s a chilling reality, becoming more common and concerning… Read More »Stop LUCR-3 Attacks: Learn Key Identity Security Tactics in This Expert Webinar
Cybersecurity researchers have discovered an improved version of an Apple iOS spyware called LightSpy that not only expands on its functionality, but also incorporates destructive capabilities to prevent the compromised… Read More »New LightSpy Spyware Version Targets iPhones with Increased Surveillance Tactics
LottieFiles has revealed that its npm package “lottie-player” was compromised as part of a supply chain attack, prompting it to release an updated version of the library. “On October 30th… Read More »LottieFiles Issues Warning About Compromised “lottie-player” npm Package
A high-severity security flaw has been disclosed in the LiteSpeed Cache plugin for WordPress that could allow an unauthenticated threat actor to elevate their privileges and perform malicious actions. The… Read More »LiteSpeed Cache Plugin Vulnerability Poses Significant Risk to WordPress Websites
In the modern, browser-centric workplace, the corporate identity acts as the frontline defense for organizations. Often referred to as “the new perimeter”, the identity stands between safe data management and… Read More »Enterprise Identity Threat Report 2024: Unveiling Hidden Threats to Corporate Identities
Threat actors in North Korea have been implicated in a recent incident that deployed a known ransomware family called Play, underscoring their financial motivations. The activity, observed between May and… Read More »North Korean Group Collaborates with Play Ransomware in Significant Cyber Attack
Cybersecurity researchers have uncovered an ongoing malvertising campaign that abuses Meta’s advertising platform and hijacked Facebook accounts to distribute information known as SYS01stealer. “The hackers behind the campaign use trusted… Read More »Malvertising Campaign Hijacks Facebook Accounts to Spread SYS01stealer Malware