A new wave of international law enforcement actions has led to four arrests and the takedown of nine servers linked to the LockBit (aka Bitwise Spider) ransomware operation, marking the… Read More »LockBit Ransomware and Evil Corp Leaders Arrested and Sanctioned in Joint Global Effort
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Endpoint Manager (EPM) that the company patched in May to its Known Exploited Vulnerabilities (KEV)… Read More »Ivanti Endpoint Manager Flaw Actively Targeted, CISA Warns Agencies to Patch
A large-scale fraud campaign leveraged fake trading apps published on the Apple App Store and Google Play Store, as well as phishing sites, to defraud victims, per findings from Group-IB.… Read More »Fake Trading Apps Target Victims Globally via Apple App Store and Google Play
A spear-phishing email campaign has been observed targeting recruiters with a JavaScript backdoor called More_eggs, indicating persistent efforts to single out the sector under the guise of fake job applicant… Read More »Fake Job Applications Deliver Dangerous More_eggs Malware to HR Professionals
A previously undocumented threat actor called CeranaKeeper has been linked to a string of data exfiltration attacks targeting Southeast Asia. Slovak cybersecurity firm ESET, which observed campaigns targeting governmental institutions… Read More »China-Linked CeranaKeeper Targeting Southeast Asia with Data Exfiltration
Cybersecurity researchers have disclosed that 5% of all Adobe Commerce and Magento stores have been hacked by malicious actors by exploiting a security vulnerability dubbed CosmicSting. Tracked as CVE-2024-34102 (CVSS… Read More »Alert: Adobe Commerce and Magento Stores Under Attack from CosmicSting Exploit
A little over a dozen new security vulnerabilities have been discovered in residential and enterprise routers manufactured by DrayTek that could be exploited to take over susceptible devices. “These vulnerabilities… Read More »Alert: Over 700,000 DrayTek Routers Exposed to Hacking via 14 New Vulnerabilities
Dynamic malware analysis is a key part of any threat investigation. It involves executing a sample of a malicious program in the isolated environment of a malware sandbox to monitor… Read More »5 Must-Have Tools for Effective Dynamic Malware Analysis
Three different organizations in the U.S. were targeted in August 2024 by a North Korean state-sponsored threat actor called Andariel as part of a likely financially motivated attack. “While the… Read More »Andariel Hacking Group Shifts Focus to Financial Attacks on U.S. Organizations
A new set of malicious packages has been unearthed in the Python Package Index (PyPI) repository that masqueraded as cryptocurrency wallet recovery and management services, only to siphon sensitive data… Read More »PyPI Repository Found Hosting Fake Crypto Wallet Recovery Tools That Steal User Data