The United States Treasury Department said it suffered a “major cybersecurity incident” that allowed suspected Chinese threat actors to remotely access some computers and unclassified documents. “On December 8, 2024,… Read More »Chinese APT Exploits BeyondTrust API Key to Access U.S. Treasury Systems and Documents
Cybersecurity researchers have uncovered three security weaknesses in Microsoft’s Azure Data Factory Apache Airflow integration that, if successfully exploited, could have allowed an attacker to gain the ability to conduct… Read More »Misconfigured Kubernetes RBAC in Azure Airflow Could Expose Entire Cluster to Exploitation
Every week, the digital world faces new challenges and changes. Hackers are always finding new ways to breach systems, while defenders work hard to keep our data safe. Whether it’s… Read More »⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips
The United States Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) has proposed new cybersecurity requirements for healthcare organizations with an aim to safeguard patients’ data… Read More »New HIPAA Rules Mandate 72-Hour Data Restoration and Annual Compliance Audits
News has been making headlines over the weekend of the extensive attack campaign targeting browser extensions and injecting them with malicious code to steal user credentials. Currently, over 25 extensions,… Read More »When Good Extensions Go Bad: Takeaways from the Campaign Targeting Browser Extensions
A new attack campaign has targeted known Chrome browser extensions, leading to at least 16 extensions being compromised and exposing over 600,000 users to data exposure and credential theft. The… Read More »16 Chrome Extensions Hacked, Exposing Over 600,000 Users to Data Theft
A high-severity flaw impacting select Four-Faith routers has come under active exploitation in the wild, according to new findings from VulnCheck. The vulnerability, tracked as CVE-2024-12856 (CVSS score: 7.2), has… Read More »15,000+ Four-Faith Routers Exposed to New Exploit Due to Default Credentials
North Korean threat actors behind the ongoing Contagious Interview campaign have been observed dropping a new JavaScript malware called OtterCookie. Contagious Interview (aka DeceptiveDevelopment) refers to a persistent attack campaign… Read More »North Korean Hackers Deploy OtterCookie Malware in Contagious Interview Campaign
The threat actor known as Cloud Atlas has been observed using a previously undocumented malware called VBCloud as part of its cyber attack campaigns targeting “several dozen users” in 2024.… Read More »Cloud Atlas Deploys VBCloud Malware: Over 80% of Targets Found in Russia
Cybersecurity researchers are warning about a spike in malicious activity that involves roping vulnerable D-Link routers into two different botnets, a Mirai variant dubbed FICORA and a Kaiten (aka Tsunami)… Read More »FICORA and Kaiten Botnets Exploit Old D-Link Vulnerabilities for Global Attacks