Threat actors linked to the Black Basta ransomware may have exploited a recently disclosed privilege escalation flaw in the Microsoft Windows Error Reporting Service as zero-day, according to new findings… Read More »Black Basta Ransomware May Have Exploited MS Windows Zero-Day Flaw
Last week, the notorious hacker gang, ShinyHunters, sent shockwaves across the globe by allegedly plundering 1.3 terabytes of data from 560 million Ticketmaster users. This colossal breach, with a price… Read More »Lessons from the Ticketmaster-Snowflake Breach
State-sponsored threat actors backed by China gained access to 20,000 Fortinet FortiGate systems worldwide by exploiting a known critical security flaw between 2022 and 2023, indicating that the operation had… Read More »China-Backed Hackers Exploit Fortinet Flaw, Infecting 20,000 Systems Globally
Cybersecurity researchers have disclosed details of an ongoing phishing campaign that leverages recruiting- and job-themed lures to deliver a Windows-based backdoor named WARMCOOKIE. “WARMCOOKIE appears to be an initial backdoor… Read More »New Phishing Campaign Deploys WARMCOOKIE Backdoor Targeting Job Seekers
Microsoft has released security updates to address 51 flaws as part of its Patch Tuesday updates for June 2024. Of the 51 vulnerabilities, one is rated Critical and 50 are… Read More »Microsoft Issues Patches for 51 Flaws, Including Critical MSMQ Vulnerability
Managed service providers (MSPs) are on the front lines of soaring demand for cybersecurity services as cyberattacks increase in volume and sophistication. Cynet has emerged as the security vendor of… Read More »How Cynet Makes MSPs Rich & Their Clients Secure
Cybersecurity researchers have shed more light on a Chinese actor codenamed SecShow that has been observed conducting Domain Name System (DNS) on a global scale since at least June 2023.… Read More »Chinese Actor SecShow Conducts Massive DNS Probing on Global Scale
One of the most effective ways for information technology (IT) professionals to uncover a company’s weaknesses before the bad guys do is penetration testing. By simulating real-world cyberattacks, penetration testing,… Read More »Top 10 Critical Pentest Findings 2024: What You Need to Know
Apple has announced the launch of a “groundbreaking cloud intelligence system” called Private Cloud Compute (PCC) that’s designed for processing artificial intelligence (AI) tasks in a privacy-preserving manner in the… Read More »Apple Integrates OpenAI’s ChatGPT into Siri for iOS, iPadOS, and macOS
Cybersecurity researchers have uncovered an updated version of malware called ValleyRAT that’s being distributed as part of a new campaign. “In the latest version, ValleyRAT introduced new commands, such as… Read More »China-Linked ValleyRAT Malware Resurfaces with Advanced Data Theft Tactics