An unnamed high-profile government organization in Southeast Asia emerged as the target of a “complex, long-running” Chinese state-sponsored cyber espionage operation codenamed Crimson Palace. “The overall goal behind the campaign… Read More »Chinese State-Backed Cyber Espionage Targets Southeast Asian Government
An analysis of a nascent ransomware strain called RansomHub has revealed it to be an updated and rebranded version of Knight ransomware, itself an evolution of another ransomware known as… Read More »Rebranded Knight Ransomware Targeting Healthcare and Businesses Worldwide
Zyxel has released security updates to address critical flaws impacting two of its network-attached storage (NAS) devices that have currently reached end-of-life (EoL) status. Successful exploitation of three of the… Read More »Zyxel Releases Patches for Firmware Vulnerabilities in EoL NAS Models
Popular video-sharing platform TikTok has acknowledged a security issue that has been exploited by threat actors to take control of high-profile accounts on the platform. The development was first reported… Read More »Celebrity TikTok Accounts Compromised Using Zero-Click Attack via DMs
Russian organizations are at the receiving end of cyber attacks that have been found to deliver a Windows version of a malware called Decoy Dog. Cybersecurity company Positive Technologies is… Read More »Russian Power Companies, IT Firms, and Govt Agencies Hit by Decoy Dog Trojan
Progress Software has rolled out updates to address a critical security flaw impacting the Telerik Report Server that could be potentially exploited by a remote attacker to bypass authentication and… Read More »Telerik Report Server Flaw Could Let Attackers Create Rogue Admin Accounts
A new sophisticated cyber attack has been observed targeting endpoints geolocated to Ukraine with an aim to deploy Cobalt Strike and seize control of the compromised hosts. The attack chain,… Read More »Hackers Use MS Excel Macro to Launch Multi-Stage Malware Attack in Ukraine
The landscape of browser security has undergone significant changes over the past decade. While Browser Isolation was once considered the gold standard for protecting against browser exploits and malware downloads,… Read More »The Next Generation of RBI (Remote Browser Isolation)
Cloud computing and analytics company Snowflake said a “limited number” of its customers have been singled out as part of a targeted campaign. “We have not identified evidence suggesting this… Read More »Snowflake Warns: Targeted Credential Theft Campaign Hits Cloud Customers
Cyber attacks involving the DarkGate malware-as-a-service (MaaS) operation have shifted away from AutoIt scripts to an AutoHotkey mechanism to deliver the last stages, underscoring continued efforts on the part of… Read More »DarkGate Malware Replaces AutoIt with AutoHotkey in Latest Cyber Attacks