Cybersecurity researchers have found that ransomware attacks targeting ESXi systems are also leveraging the access to repurpose the appliances as a conduit to tunnel traffic to command-and-control (C2) infrastructure and… Read More »Ransomware Targets ESXi Systems via Stealthy SSH Tunnels for C2 Operations
DeepSeek, the Chinese AI startup that has captured much of the artificial intelligence (AI) buzz in recent days, said it’s restricting registrations on the service, citing malicious attacks. “Due to… Read More »Top-Rated Chinese AI App DeepSeek Limits Registrations Amid Cyberattacks
Apple has released software updates to address several security flaws across its portfolio, including a zero-day vulnerability that it said has been exploited in the wild. The vulnerability, tracked as… Read More »Apple Patches Actively Exploited Zero-Day Affecting iPhones, Macs, and More
Multiple security vulnerabilities have been disclosed in GitHub Desktop as well as other Git-related projects that, if successfully exploited, could permit an attacker to gain unauthorized access to a user’s… Read More »GitHub Desktop Vulnerability Risks Credential Leaks via Malicious Remote URLs
Welcome to your weekly cybersecurity scoop! Ever thought about how the same AI meant to protect our hospitals could also compromise them? This week, we’re breaking down the sophisticated world… Read More »⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [27 January]
The Open Web Application Security Project has recently introduced a new Top 10 project – the Non-Human Identity (NHI) Top 10. For years, OWASP has provided security professionals and developers… Read More »Do We Really Need The OWASP NHI Top 10?
A previously unknown threat actor has been observed copying the tradecraft associated with the Kremlin-aligned Gamaredon hacking group in its cyber attacks targeting Russian-speaking entities. The campaign has been attributed… Read More »GamaCopy Mimics Gamaredon Tactics in Cyber Espionage Targeting Russian Entities
Threat hunters have detailed an ongoing campaign that leverages a malware loader called MintsLoader to distribute secondary payloads such as the StealC information stealer and a legitimate open-source network computing… Read More »MintsLoader Delivers StealC Malware and BOINC in Targeted Cyber Attacks
A high-severity security flaw has been disclosed in Meta’s Llama large language model (LLM) framework that, if successfully exploited, could allow an attacker to execute arbitrary code on the llama-stack… Read More »Meta’s Llama Framework Flaw Exposes AI Systems to Remote Code Execution Risks
A group of academics has disclosed details of over 100 security vulnerabilities impacting LTE and 5G implementations that could be exploited by an attacker to disrupt access to service and… Read More »RANsacked: Over 100 Security Flaws Found in LTE and 5G Network Implementations