A new Android trojan called SoumniBot has been detected in the wild targeting users in South Korea by leveraging weaknesses in the manifest extraction and parsing procedure. The malware is “notable for… Read More »New Android Trojan ‘SoumniBot’ Evades Detection with Clever Tricks
Super Low RPO with Continuous Data Protection:Dial Back to Just Seconds Before an Attack Zerto, a Hewlett Packard Enterprise company, can help you detect and recover from ransomware in near… Read More »Recover from Ransomware in 5 Minutes—We will Teach You How!
Threat actors are actively exploiting critical vulnerabilities in OpenMetadata to gain unauthorized access to Kubernetes workloads and leverage them for cryptocurrency mining activity. That’s according to the Microsoft Threat Intelligence… Read More »Hackers Exploit OpenMetadata Flaws to Mine Crypto on Kubernetes
A new Google malvertising campaign is leveraging a cluster of domains mimicking a legitimate IP scanner software to deliver a previously unknown backdoor dubbed MadMxShell. “The threat actor registered multiple look-alike… Read More »Malicious Google Ads Pushing Fake IP Scanner Software with Hidden Backdoor
A previously undocumented “flexible” backdoor called Kapeka has been “sporadically” observed in cyber attacks targeting Eastern Europe, including Estonia and Ukraine, since at least mid-2022. The findings come from Finnish cybersecurity firm… Read More »Russian APT Deploys New ‘Kapeka’ Backdoor in Eastern European Attacks
Cybersecurity researchers have discovered a new campaign that’s exploiting a recently disclosed security flaw in Fortinet FortiClient EMS devices to deliver ScreenConnect and Metasploit Powerfun payloads. The activity entails the… Read More »Hackers Exploit Fortinet Flaw, Deploy ScreenConnect, Metasploit in New Campaign
Threat actors are exploiting unpatched Atlassian servers to deploy a Linux variant of Cerber (aka C3RB3R) ransomware. The attacks leverage CVE-2023-22518 (CVSS score: 9.1), a critical security vulnerability impacting the Atlassian Confluence… Read More »Critical Atlassian Flaw Exploited to Deploy Linux Variant of Cerber Ransomware
The introduction of Open AI’s ChatGPT was a defining moment for the software industry, touching off a GenAI race with its November 2022 release. SaaS vendors are now rushing to… Read More »GenAI: A New Headache for SaaS Security Teams
Cisco is warning about a global surge in brute-force attacks targeting various devices, including Virtual Private Network (VPN) services, web application authentication interfaces, and SSH services, since at least March… Read More »Cisco Warns of Global Surge in Brute-Force Attacks Targeting VPN and SSH Services
New cybersecurity research has found that command-line interface (CLI) tools from Amazon Web Services (AWS) and Google Cloud can expose sensitive credentials in build logs, posing significant risks to organizations.… Read More »AWS, Google, and Azure CLI Tools Could Leak Credentials in Build Logs