First-ever Open-Source Software Supply Chain Attacks
Recent reports indicate that the banking sector has become the focus of threat actors utilizing an emerging supply chain attack. Two distinct incidents have been…
Month: July 2023
Hacked Microsoft Keys Access a Wide Range of Azure Applications
The China-linked threat actors who stole the US State Department and other Microsoft customer emails may have acquired access to apps other than Exchange Online…
Cl0p Ransomware Gang Leaks MOVEit Data on Clearweb Sites
At the time of writing, the clearweb domain of the Cl0p Ransomware Gang was offline; however, the gang’s entry to the clearweb reveals upcoming cybersecurity…
Police Bank lands new CIO – Finance – Training & Development
Police Bank has appointed experienced fintech leader Lyndall Bushell as its new chief information officer. The bank officially announced the news via LinkedIn. It said Bushell…
Zenbleed attack leaks sensitive data from AMD Zen2 processors
Google’s security researcher Tavis Ormandy discovered a new vulnerability impacting AMD Zen2 CPUs that could allow a malicious actor to steal sensitive data, such as…
Over 15000+ Citrix Servers Vulnerable to Code Injection Attacks
Due to an unauthenticated critical RCE bug, formerly exploited as a zero-day in the wild by the threat actors, thousands of Citrix Netscaler ADC and…
Google is Blocking Employee Internet Access
Google is to start a pilot program to have employees work without internet access as a way to decrease the risk of cyberattacks. According to…
Afterpay uses four key systems to back its support function – Software
Afterpay is using four key platforms to help new members of its customer service teams to get up to speed quickly and be serving customers…
Lazarus hackers hijack Microsoft IIS servers to spread malware
The North Korean state-sponsored Lazarus hacking group is breaching Windows Internet Information Service (IIS) web servers to hijack them for malware distribution. IIS is Microsoft’s…
Virustotal Apologizes for the Recent Customer Data Leak
The Virustotal platform has issued an apology and provided an update regarding a recent incident of accidental data exposure. VirusTotal was established in 2004 as…
Critical Zyxel Firewall Injection Flaw Exploited
Increased botnet activity targeting vulnerability(CVE-2023-28771) in Zyxel devices has become a major concern to its users. This vulnerability lets the unauthorized attacker execute the arbitrary…
How is the Dark Web Reacting to the AI Revolution?
A quick search for “ChatGPT” on the dark web and Telegram shows 27,912 mentions in the past six months. Much has been written about the…