The financially motivated threat actor known as FIN7 has been observed using multiple pseudonyms across several underground forums to likely advertise a tool known to be used by ransomware groups… Read More »FIN7 Group Advertises Security-Bypassing Tool on Dark Web Forums
Attacks on your network are often meticulously planned operations launched by sophisticated threats. Sometimes your technical fortifications provide a formidable challenge, and the attack requires assistance from the inside to… Read More »Navigating Insider Risks: Are your Employees Enabling External Threats?
A China-linked threat actor called APT17 has been observed targeting Italian companies and government entities using a variant of a known malware referred to as 9002 RAT. The two targeted… Read More »China-linked APT17 Targets Italian Companies with 9002 RAT Malware
The infamous cybercrime group known as Scattered Spider has incorporated ransomware strains such as RansomHub and Qilin into its arsenal, Microsoft has revealed. Scattered Spider is the designation given to… Read More »Scattered Spider Adopts RansomHub and Qilin Ransomware for Cyber Attacks
Threat actors are actively exploiting a recently disclosed critical security flaw impacting Apache HugeGraph-Server that could lead to remote code execution attacks. Tracked as CVE-2024-27348 (CVSS score: 9.8), the vulnerability… Read More »Critical Apache HugeGraph Vulnerability Under Attack – Patch ASAP
Details have emerged about a “massive ad fraud operation” that leverages hundreds of apps on the Google Play Store to perform a host of nefarious activities. The campaign has been… Read More »‘Konfety’ Ad Fraud Uses 250+ Google Play Decoy Apps to Hide Malicious Twins
Identity-based threats on SaaS applications are a growing concern among security professionals, although few have the capabilities to detect and respond to them. According to the US Cybersecurity and Infrastructure… Read More »Threat Prevention & Detection in SaaS Environments – 101
The Iranian nation-state actor known as MuddyWater has been observed using a never-before-seen backdoor as part of a recent attack campaign, shifting away from its well-known tactic of deploying legitimate… Read More »Iranian Hackers Deploy New BugSleep Backdoor in Middle East Cyber Attacks
Cybersecurity researchers have identified two malicious packages on the npm package registry that concealed backdoor code to execute malicious commands sent from a remote server. The packages in question –… Read More »Malicious npm Packages Found Using Image Files to Hide Backdoor Code
An advanced persistent threat (APT) group called Void Banshee has been observed exploiting a recently disclosed security flaw in the Microsoft MHTML browser engine as a zero-day to deliver an… Read More »Void Banshee APT Exploits Microsoft MHTML Flaw to Spread Atlantida Stealer