A new phishing campaign has set its eyes on the Latin American region to deliver malicious payloads to Windows systems. “The phishing email contained a ZIP file attachment that when… Read More »Cybercriminals Targeting Latin America with Sophisticated Phishing Scheme
The ransomware industry surged in 2023 as it saw an alarming 55.5% increase in victims worldwide, reaching a staggering 5,070. But 2024 is starting off showing a very different picture. While the numbers skyrocketed… Read More »The Drop in Ransomware Attacks in 2024 and What it Means
Threat hunters have discovered a new malware called Latrodectus that has been distributed as part of email phishing campaigns since at least late November 2023. “Latrodectus is an up-and-coming downloader with various… Read More »Watch Out for ‘Latrodectus’ – This Malware Could Be In Your Inbox
Google has filed a lawsuit against two app developers for engaging in an “international online consumer investment fraud scheme” that tricked users into downloading bogus Android apps from the Google Play Store… Read More »Google Sues App Developers Over Fake Crypto Investment App Scam
Threat actors have been found exploiting a critical flaw in Magento to inject a persistent backdoor into e-commerce websites. The attack leverages CVE-2024-20720 (CVSS score: 9.1), which has been described by Adobe… Read More »Hackers Exploit Magento Bug to Steal Payment Data from E-commerce Websites
New research has found that artificial intelligence (AI)-as-a-service providers such as Hugging Face are susceptible to two critical risks that could allow threat actors to escalate privileges, gain cross-tenant access… Read More »AI-as-a-Service Providers Vulnerable to PrivEsc and Cross-Tenant Attacks
Compliance requirements are meant to increase cybersecurity transparency and accountability. As cyber threats increase, so do the number of compliance frameworks and the specificity of the security controls, policies, and activities they… Read More »CISO Perspectives on Complying with Cybersecurity Regulations
Bogus installers for Adobe Acrobat Reader are being used to distribute a new multi-functional malware dubbed Byakugan. The starting point of the attack is a PDF file written in Portuguese that, when opened,… Read More »From PDFs to Payload: Bogus Adobe Acrobat Reader Installers Distribute Byakugan Malware
Multiple China-nexus threat actors have been linked to the zero-day exploitation of three security flaws impacting Ivanti appliances (CVE-2023-46805, CVE-2024-21887, and CVE-2024-21893). The clusters are being tracked by Mandiant under… Read More »Researchers Identify Multiple China Hacker Groups Exploiting Ivanti Security Flaws
Financial organizations in the Asia-Pacific (APAC) and Middle East and North Africa (MENA) are being targeted by a new version of an “evolving threat” called JSOutProx. “JSOutProx is a sophisticated attack… Read More »New Wave of JSOutProx Malware Targeting Financial Firms in APAC and MENA