A critical security issue has been disclosed in the Exim mail transfer agent that could enable threat actors to deliver malicious attachments to target users’ inboxes. The vulnerability, tracked as… Read More »Critical Exim Mail Server Vulnerability Exposes Millions to Malicious Attachments
Two Russian-born Australian citizens have been arrested and charged in the country for spying on behalf of Russia as part of a “complex” law enforcement operation codenamed BURGAZADA. This includes… Read More »Australian Defence Force Private and Husband Charged with Espionage for Russia
In today’s digital age, passwords serve as the keys to our most sensitive information, from social media accounts to banking and business systems. This immense power brings with it significant… Read More »Ever Wonder How Hackers Really Steal Passwords? Discover Their Tactics in This Webinar
The U.S. Department of Justice (DoJ) said it seized two internet domains and searched nearly 1,000 social media accounts that Russian threat actors allegedly used to covertly spread pro-Kremlin disinformation… Read More »U.S. Seizes Domains Used by AI-Powered Russian Bot Farm for Disinformation
Threat actors have been observed publishing a new wave of malicious packages to the NuGet package manager as part of an ongoing campaign that began in August 2023, while also… Read More »60 New Malicious Packages Uncovered in NuGet Supply Chain Attack
Palo Alto Networks has released security updates to address five security flaws impacting its products, including a critical bug that could lead to an authentication bypass. Cataloged as CVE-2024-5910 (CVSS… Read More »Palo Alto Networks Patches Critical Flaw in Expedition Migration Tool
The China-linked advanced persistent threat (APT) group codenamed APT41 is suspected to be using an “advanced and upgraded version” of a known malware called StealthVector to deliver a previously undocumented… Read More »Chinese APT41 Upgrades Malware Arsenal with DodgeBox and MoonWalk
Spanish language victims are the target of an email phishing campaign that delivers a new remote access trojan (RAT) called Poco RAT since at least February 2024. The attacks primarily… Read More »New Poco RAT Targets Spanish-Speaking Victims in Phishing Campaign
Today, all organizations are exposed to the threat of cyber breaches, irrespective of their scale. Historically, larger companies were frequent targets due to their substantial resources, sensitive data, and regulatory… Read More »Streamlined Security Solutions: PAM for Small to Medium-sized Businesses
Multiple threat actors have been observed exploiting a recently disclosed security flaw in PHP to deliver remote access trojans, cryptocurrency miners, and distributed denial-of-service (DDoS) botnets. The vulnerability in question… Read More »PHP Vulnerability Exploited to Spread Malware and Launch DDoS Attacks