​The threat actors behind the BlackCat ransomware have shut down their darknet website and likely pulled an exit scam after uploading a bogus law enforcement seizure banner. “ALPHV/BlackCat did not get seized.… Read More »Exit Scam: BlackCat Ransomware Group Vanishes After $22 Million Payout

​Threat actors are targeting misconfigured and vulnerable servers running Apache Hadoop YARN, Docker, Atlassian Confluence, and Redis services as part of an emerging malware campaign designed to deliver a cryptocurrency… Read More »Hackers Exploit Misconfigured YARN, Docker, Confluence, Redis Servers for Crypto Mining

​An in-depth look into a proactive website security solution that continuously detects, prioritizes, and validates web threats, helping to mitigate security, privacy, and compliance risks.  [Reflectiz shields websites from client-side attacks,… Read More »A New Way To Manage Your Web Exposure: The Reflectiz Product Explained

​Every Google Workspace administrator knows how quickly Google Drive becomes a messy sprawl of loosely shared confidential information. This isn’t anyone’s fault; it’s inevitable as your productivity suite is purposefully… Read More »How to Find and Fix Risky Sharing in Google Drive

​Apple has released security updates to address several security flaws, including two vulnerabilities that it said have been actively exploited in the wild. The shortcomings are listed below – CVE-2024-23225 –… Read More »Urgent: Apple Issues Critical Updates for Actively Exploited Zero-Day Flaws

​A financial entity in Vietnam was the target of a previously undocumented threat actor called Lotus Bane that was first detected in March 2023. Singapore-headquartered Group-IB described the hacking outfit as an… Read More »New APT Group ‘Lotus Bane’ Behind Recent Attacks on Vietnam’s Financial Entities

​The cybercrime group called GhostSec has been linked to a Golang variant of a ransomware family called GhostLocker. “TheGhostSec and Stormous ransomware groups are jointly conducting double extortion ransomware attacks on… Read More »Alert: GhostSec and Stormous Launch Joint Ransomware Attacks in Over 15 Countries

​VMware has released patches to address four security flaws impacting ESXi, Workstation, and Fusion, including two critical flaws that could lead to code execution. Tracked as CVE-2024-22252 and CVE-2024-22253, the vulnerabilities… Read More »VMware Issues Security Patches for ESXi, Workstation, and Fusion Flaws

​North Korean threat actors have exploited the recently disclosed security flaws in ConnectWise ScreenConnect to deploy a new malware called TODDLERSHARK. According to a report shared by Kroll with The Hacker… Read More »Hackers Exploit ConnectWise ScreenConnect Flaws to Deploy TODDLERSHARK Malware