The North Korea-linked Kimsuky hacking group has been attributed to a new social engineering attack that employs fictitious Facebook accounts to targets via Messenger and ultimately delivers malware. “The threat actor created… Read More »North Korean Hackers Exploit Facebook Messenger in Targeted Malware Campaign
Security researchers have disclosed almost a dozen security flaws impacting the GE HealthCare Vivid Ultrasound product family that could be exploited by malicious actors to tamper with patient data and… Read More »Researchers Uncover 11 Security Flaws in GE HealthCare Ultrasound Machines
Google has rolled out fixes to address a set of nine security issues in its Chrome browser, including a new zero-day that has been exploited in the wild. Assigned the CVE identifier CVE-2024-4947, the vulnerability… Read More »Google Patches Yet Another Actively Exploited Chrome Zero-Day Vulnerability
The Microsoft Threat Intelligence team said it has observed a threat it tracks under the name Storm-1811 abusing the client management tool Quick Assist to target users in social engineering attacks. “Storm-1811 is… Read More »Cybercriminals Exploiting Microsoft’s Quick Assist Feature in Ransomware Attacks
Law enforcement agencies have officially seized control of the notorious BreachForums platform, an online bazaar known for peddling stolen data, for the second time within a year. The website (“breachforums[.]st”) has been… Read More »FBI Seizes BreachForums Again, Urges Users to Report Criminal Activity
Google is unveiling a set of new features in Android 15 to prevent malicious apps installed on the device from capturing sensitive data. This constitutes an update to the Play Integrity… Read More »Android 15 Rolls Out Advanced Features to Protect Users from Scams and Malicious Apps
Google has announced a slew of privacy and security features in Android, including a suite of advanced protection features to help secure users’ devices and data in the event of… Read More »Google Launches AI-Powered Theft and Data Protection Features for Android Devices
Here’s How to Enhance Your Cyber Resilience with CVSS In late 2023, the Common Vulnerability Scoring System (CVSS) v4.0 was unveiled, succeeding the eight-year-old CVSS v3.0, with the aim to enhance vulnerability… Read More »(Cyber) Risk = Probability of Occurrence x Damage
An unnamed European Ministry of Foreign Affairs (MFA) and its three diplomatic missions in the Middle East were targeted by two previously undocumented backdoors tracked as LunarWeb and LunarMail. ESET,… Read More »Turla Group Deploys LunarWeb and LunarMail Backdoors in Diplomatic Missions
While cloud adoption has been top of mind for many IT professionals for nearly a decade, it’s only in recent months, with industry changes and announcements from key players, that many recognize… Read More »It’s Time to Master the Lift & Shift: Migrating from VMware vSphere to Microsoft Azure