Recently the Office of the Director of National Intelligence (ODNI) unveiled a new strategy for open-source intelligence (OSINT) and referred to OSINT as the “INT of first resort”. Public and… Read More »The Emerging Role of AI in Open-Source Intelligence
Unknown threat actors have been observed exploiting a now-patched security flaw in Microsoft MSHTML to deliver a surveillance tool called MerkSpy as part of a campaign primarily targeting users in… Read More »Microsoft MSHTML Flaw Exploited to Deliver MerkSpy Spyware Tool
The loader-as-a-service (LaaS) known as FakeBat has become one of the most widespread loader malware families distributed using the drive-by download technique this year, findings from Sekoia reveal. “FakeBat primarily… Read More »FakeBat Loader Malware Spreads Widely Through Drive-by Download Attacks
An unnamed South Korean enterprise resource planning (ERP) vendor’s product update server has been found to be compromised to deliver a Go-based backdoor dubbed Xctdoor. The AhnLab Security Intelligence Center… Read More »South Korean ERP Vendor’s Server Hacked to Spread Xctdoor Malware
Cybersecurity researchers have discovered an attack campaign that targets various Israeli entities with publicly-available frameworks like Donut and Sliver. The campaign, believed to be highly targeted in nature, “leverage target-specific… Read More »Israeli Entities Targeted by Cyberattack Using Donut and Sliver Frameworks
Modern CPUs from Intel, including Raptor Lake and Alder Lake, have been found vulnerable to a new side-channel attack that could be exploited to leak sensitive information from the processors.… Read More »New Intel CPU Vulnerability ‘Indirector’ Exposes Sensitive Data
The cybersecurity threat landscape has witnessed a dramatic and alarming rise in the average ransomware payment, an increase exceeding 500%. Sophos, a global leader in cybersecurity, revealed in its annual… Read More »How MFA Failures are Fueling a 500% Surge in Ransomware Losses
An Australian man has been charged with running a fake Wi-Fi access point during a domestic flight with an aim to steal user credentials and data. The unnamed 42-year-old “allegedly… Read More »Australian Man Charged for Fake Wi-Fi Scam on Domestic Flights
A China-nexus cyber espionage group named Velvet Ant has been observed exploiting a zero-day flaw in Cisco NX-OS Software used in its switches to deliver malware. The vulnerability, tracked as… Read More »Chinese Hackers Exploiting Cisco Switches Zero-Day to Deliver Malware
Meta’s decision to offer an ad-free subscription in the European Union (E.U.) has faced a new setback after regulators accused the social media behemoth of breaching the bloc’s competition rules… Read More »Meta’s ‘Pay or Consent’ Approach Faces E.U. Competition Rules Scrutiny