Security researchers from Proofpoint have discovered that a hacker group, presumably operating in the interest of China, is using a new version of the SugarGh0st RAT malware to steal information from artificial intelligence experts...
In March, North Korea laundered $147.5 million through the cryptocurrency mixer Tornado Cash, stolen from the cryptocurrency exchange HTX in 2023. This was reported by Reuters, citing confidential UN sanctions monitoring documents. According to...
The cybersecurity firm Symantec has identified a new tool employed by the North Korean group Kimsuki, targeting governmental and commercial organizations in South Korea. This new malware, named Gomir, is the Linux version of...
On May 14, 2024, a new version of Git, v2.45.1, was released, addressing five security vulnerabilities. This update impacts all major platforms: Windows, macOS, Linux, and BSD. Corresponding updates have also been released for...
The Microsoft Threat Intelligence team has uncovered a new campaign by the group Storm-1811, utilizing the Quick Assist tool to conduct social engineering attacks on users. Quick Assist is a legitimate Microsoft application that...
The Check Point Research team has discovered an exploit targeting Foxit Reader users, which leverages user inattention to execute malicious code. Numerous cybercriminals are actively exploiting this vulnerability, which exploits weaknesses in Foxit Reader’s...
The Belgian university KU Leuven has identified a vulnerability in the Wi-Fi IEEE 802.11 standard, which allows an attacker to deceive victims into connecting to a fake Wi-Fi network and intercepting traffic. According to...
Last week, the United States, in conjunction with the United Kingdom and Australia, charged and sanctioned Dmitry Khoroshev, believed to be the leader of the notorious ransomware group LockBit. The actual leader of LockBit,...
The world’s largest vulnerability database, NVD, managed by the U.S. National Institute of Standards and Technology (NIST), recently experienced a significant disruption that led to a substantial increase in the number of unpublished vulnerabilities....
A major healthcare provider in Mississippi, Singing River, recently disclosed that a cyberattack in August 2023 affected the data of 895,204 individuals. The medical network comprises hospitals in Pascagoula, Ocean Springs, and Gulfport, as...
Microsoft has patched a zero-day vulnerability that was actively exploited to propagate the QakBot botnet on Windows systems. The heap-based buffer overflow vulnerability, CVE-2024-30051 (CVSS score 7.8), affects the Desktop Window Manager (DWM) library....
According to a recent report by ESET, the Ebury botnet has infected nearly 400,000 Linux servers since 2009. As of the end of 2023, approximately 100,000 servers remain at risk. ESET researchers have been...
Microsoft has unveiled the May Patch Tuesday update, which includes fixes for 61 vulnerabilities, including three zero-day vulnerabilities that were either actively exploited or publicly disclosed prior to the patch. Among all the addressed...
Four critical vulnerabilities have been identified in VMware Workstation and Fusion products, potentially allowing attackers to access confidential information, conduct DoS attacks, and execute arbitrary code. These issues affect Workstation 17.x and Fusion 13.x...
Experts from SSD Secure Disclosure have discovered vulnerabilities in the D-Link EXO AX4800 (DIR-X4860) router, which allow an attacker to gain complete control over the device. The flaws were found in DIR-X4860 routers with...
Google has urgently released patches for a newly discovered zero-day flaw in Chrome, following reports of active exploitation by unknown attackers. The vulnerability, catalogued as CVE-2024-4947, affects the V8 JavaScript engine integral to Google’s...
