The threat actor tracked as TA558 has been observed leveraging steganography as an obfuscation technique to deliver a wide range of malware such as Agent Tesla, FormBook, Remcos RAT, LokiBot, GuLoader, Snake… Read More »TA558 Hackers Weaponize Images for Wide-Scale Malware Attacks
Security researchers have uncovered a “credible” takeover attempt targeting the OpenJS Foundation in a manner that evokes similarities to the recently uncovered incident aimed at the open-source XZ Utils project.… Read More »OpenJS Foundation Targeted in Potential JavaScript Project Takeover Attempt
In today’s rapidly evolving digital landscape, organizations face an increasingly complex array of cybersecurity threats. The proliferation of cloud services and remote work arrangements has heightened the vulnerability of digital… Read More »Identity in the Shadows: Shedding Light on Cybersecurity’s Unseen Threats
The maintainers of the PuTTY Secure Shell (SSH) and Telnet client are alerting users of a critical vulnerability impacting versions from 0.68 through 0.80 that could be exploited to achieve full recovery… Read More »Widely-Used PuTTY SSH Client Found Vulnerable to Key Recovery Attack
Two individuals have been arrested in Australia and the U.S. in connection with an alleged scheme to develop and distribute a remote access trojan called Hive RAT (previously Firebird). The… Read More »Hive RAT Creators and $3.5M Cryptojacking Mastermind Arrested in Global Crackdown
The U.S. Federal Trade Commission (FTC) has ordered the mental telehealth company Cerebral from using or disclosing personal data for advertising purposes. It has also been fined more than $7… Read More »FTC Fines Mental Health Startup Cerebral $7 Million for Major Privacy Violations
A security flaw impacting the Lighttpd web server used in baseboard management controllers (BMCs) has remained unpatched by device vendors like Intel and Lenovo, new findings from Binarly reveal. While… Read More »Intel and Lenovo BMCs Contain Unpatched Lighttpd Server Flaw
The threat actor known as Muddled Libra has been observed actively targeting software-as-a-service (SaaS) applications and cloud service provider (CSP) environments in a bid to exfiltrate sensitive data. “Organizations often store a… Read More »Muddled Libra Shifts Focus to SaaS and Cloud for Extortion and Data Theft Attacks
Imagine a world where the software that powers your favorite apps, secures your online transactions, and keeps your digital life could be outsmarted and taken over by a cleverly disguised… Read More »AI Copilot: Launching Innovation Rockets, But Beware of the Darkness Ahead
To minimize the risk of privilege misuse, a trend in the privileged access management (PAM) solution market involves implementing just-in-time (JIT) privileged access. This approach to privileged identity management aims to mitigate… Read More »Timing is Everything: The Role of Just-in-Time Privileged Access in Security Evolution