Ivanti has released a suite of patches for vulnerabilities in its Connect Secure (ICS) and Policy Secure (IPS) gateways. Concurrently, the company has identified two new zero-day vulnerabilities, one of which is being actively...
In November 2023 and January 2024, Myanmar’s Ministry of Defense and Ministry of Foreign Affairs were targeted by cyberattacks, presumably orchestrated by the Chinese hacker collective known as Mustang Panda. This information was disclosed...
In a collaborative effort between ESET and the Brazilian Federal Police, significant strides were made to dismantle the activities of the Grandoreiro botnet, which led to victims incurring losses of $3.9 million. According to...
Fulton County, Georgia’s most populous district, with a population exceeding one million inhabitants, encountered a significant disruption in its information systems due to a cyberattack over the weekend. The county’s Board of Commissioners announced...
CyberArk has released an online version of its White Phoenix tool, a free decryptor for files compromised by ransomware using intermittent encryption. Initially presented in May last year as a Python project on GitHub,...
Cybersecurity experts recently detected a resurgence of the ZLoader malware campaign, nearly two years after the botnet’s infrastructure was dismantled in April 2022. Zscaler reports the development of a new variant of ZLoader since...
Experts at Resecurity have uncovered a substantial compromise in the dark web involving over 1,570 stolen client credentials from four out of the five largest internet Regional Internet Registries (RIRs), including RIPE, APNIC, AFRINIC,...
Recently, a significant local privilege escalation (LPE) vulnerability was identified in the GNU C Library (glibc). Tracked as CVE-2023-6246, this security flaw stems from the “__vsyslog_internal()” function in glibc, responsible for logging messages in...
Cybersecurity researchers have identified a new variant of the Phobos ransomware family named Faust, as reported by FortiGuard Labs of Fortinet. Faust, part of the Phobos lineage including Eking, Eight, Elbie, Devos, and 8Base,...
Automotive giant Mercedes-Benz narrowly avoided a significant leak of confidential internal data. Cybersecurity firm RedHunt Labs discovered that a Mercedes employee had inadvertently left a developer key publicly accessible online, offering unrestricted access to...
A Canadian court has sentenced 33-year-old Matthew Philbert to two years in prison after he pleaded guilty to disseminating ransomware and launching malicious attacks on individuals, businesses, and government institutions. Philbert, arrested in Canada...
Researchers from Trustwave have reported a steady increase in the use of a Phishing-as-a-Service (PhaaS) platform called Greatness, which targets the collection of Microsoft 365 user credentials. Greatness is marketed to other cybercriminals as...
Security experts from Malwarebytes have recently uncovered a malicious campaign targeting Chinese-speaking users, who fell victim to cybercriminals through the Google Ads advertising service. Cybercriminals exploited Google advertiser accounts to create fraudulent ads that...
Numerous publicly available Proof-of-Concept (PoC) exploits for a critical vulnerability in Jenkins, which allow an unauthenticated attacker to read arbitrary files, have emerged, and cyber criminals are already actively leveraging these flaws in their...
A critical zero-click vulnerability, CVE-2023-7028 (rated CVSS 10.0) has been discovered by researchers in over 5,300 instances of GitLab accessible from the internet. Although the issue has been rectified in the latest versions of...
Researchers at Arctic Wolf have discovered a new malicious downloader, crafted in the Go language and dubbed CherryLoader. This threat, previously observed in the wild, aims to facilitate the delivery of additional malware onto...
