Threat hunters have discovered a set of seven packages on the Python Package Index (PyPI) repository that are designed to steal BIP39 mnemonic phrases used for recovering private keys of a cryptocurrency… Read More »Watch Out: These PyPI Python Packages Can Drain Your Crypto Wallets
In a world of ever-expanding jargon, adding another FLA (Four-Letter Acronym) to your glossary might seem like the last thing you’d want to do. But if you are looking for… Read More »CTEM 101 – Go Beyond Vulnerability Management with Continuous Threat Exposure Management
A new malware campaign is leveraging a high-severity security flaw in the Popup Builder plugin for WordPress to inject malicious JavaScript code. According to Sucuri, the campaign has infected more than… Read More »Malware Campaign Exploits Popup Builder WordPress Plugin to Infect 3,900+ Sites
Russia has detained a South Korean national for the first time on cyber espionage charges and transferred from Vladivostok to Moscow for further investigation. The development was first reported by Russian news… Read More »South Korean Citizen Detained in Russia on Cyber Espionage Charges
As the shift of IT infrastructure to cloud-based solutions celebrates its 10-year anniversary, it becomes clear that traditional on-premises approaches to data security are becoming obsolete. Rather than protecting the… Read More »Data Leakage Prevention in the Age of Cloud Computing: A New Approach
Users in Brazil are the target of a new banking trojan known as CHAVECLOAK that’s propagated via phishing emails bearing PDF attachments. “This intricate attack involves the PDF downloading a ZIP file… Read More »New Banking Trojan CHAVECLOAK Targets Brazilian Users via Phishing Tactics
As cyber threats loom around every corner and privileged accounts become prime targets, the significance of implementing a robust Privileged Access Management (PAM) solution can’t be overstated. With organizations increasingly migrating to… Read More »Embracing the Cloud: Revolutionizing Privileged Access Management with One Identity PAM Essentials
The threat actors behind the BianLian ransomware have been observed exploiting security flaws in JetBrains TeamCity software to conduct their extortion-only attacks. According to a new report from GuidePoint Security, which responded… Read More »BianLian Threat Actors Exploiting JetBrains TeamCity Flaws in Ransomware Attacks
A financially motivated threat actor called Magnet Goblin is swiftly adopting one-day security vulnerabilities into its arsenal in order to opportunistically breach edge devices and public-facing services and deploy malware on compromised… Read More »Magnet Goblin Hacker Group Leveraging 1-Day Exploits to Deploy Nerbian RAT
Technical specifics and a proof-of-concept (PoC) exploit have been made available for a recently disclosed critical security flaw in Progress Software OpenEdge Authentication Gateway and AdminServer, which could be potentially… Read More »Proof-of-Concept Exploit Released for Progress Software OpenEdge Vulnerability