An advanced persistent threat (APT) group called Void Banshee has been observed exploiting a recently disclosed security flaw in the Microsoft MHTML browser engine as a zero-day to deliver an… Read More »Void Banshee APT Exploits Microsoft MHTML Flaw to Spread Atlantida Stealer
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical security flaw impacting OSGeo GeoServer GeoTools to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of… Read More »CISA Warns of Actively Exploited RCE Flaw in GeoServer GeoTools Software
Russian security vendor Kaspersky has said it’s exiting the U.S. market nearly a month after the Commerce Department announced a ban on the sale of its software in the country… Read More »Kaspersky Exits U.S. Market Following Commerce Department Ban
Cybersecurity researchers said they discovered an accidentally leaked GitHub token that could have granted elevated access to the GitHub repositories of the Python language, Python Package Index (PyPI), and the… Read More »GitHub Token Leak Exposes Python’s Core Repositories to Potential Attacks
A threat actor that was previously observed using an open-source network mapping tool has greatly expanded their operations to infect over 1,500 victims. Sysdig, which is tracking the cluster under… Read More »CRYSTALRAY Hackers Infect Over 1,500 Victims Using Network Mapping Tool
Imagine you could gain access to any Fortune 100 company for $10 or less, or even for free. Terrifying thought, isn’t it? Or exciting, depending on which side of the… Read More »10,000 Victims a Day: Infostealer Garden of Low-Hanging Fruit
Retail banking institutions in Singapore have three months to phase out the use of one-time passwords (OTPs) for authentication purposes when signing into online accounts to mitigate the risk of… Read More »Singapore Banks to Phase Out OTPs for Online Logins Within 3 Months
Cybersecurity researchers have shed light on a new version of a ransomware strain called HardBit that comes packaged with new obfuscation techniques to deter analysis efforts. “Unlike previous versions, HardBit… Read More »New HardBit Ransomware 4.0 Uses Passphrase Protection to Evade Detection
American telecom service provider AT&T has confirmed that threat actors managed to access data belonging to “nearly all” of its wireless customers as well as customers of mobile virtual network… Read More »AT&T Confirms Data Breach Affecting Nearly All Wireless Customers
Cybersecurity researchers have shed light on a short-lived DarkGate malware campaign that leveraged Samba file shares to initiate the infections. Palo Alto Networks Unit 42 said the activity spanned the… Read More »DarkGate Malware Exploits Samba File Shares in Short-Lived Campaign