Exploitation of Ivanti Sentry Zero-Day Confirmed
Ivanti has confirmed that a recently discovered vulnerability affecting its Sentry mobile gateway has been exploited in attacks. The existence of the vulnerability, tracked as…
Month: August 2023
Carderbee APT targets Hong Kong orgs via supply chain attacksSecurity Affairs
A previously unknown APT group, tracked as Carderbee, was behind a supply chain attack against Hong Kong organizations. Symantec Threat Hunter Team reported that a…
North East BIC Cyber Attack: ALPHV Claims 317GB Data
The ALPHV ransomware group, also identified as Blackcat, has added a UK-based office space rental agency to its list of victims. The group has claimed…
TP-Link Tapo L530E smart bulb flaws allow hackers to steal user passwordsSecurity Affairs
Four vulnerabilities in the TP-Link Tapo L530E smart bulb and impacting the mobile app used to control them expose users to hack. Researchers from the…
Over a Dozen Malicious npm Packages Target Roblox Game Developers
Aug 23, 2023THNSoftware Security / Malware More than a dozen malicious packages have been discovered on the npm package repository since the start of August…
Norway Cyber Attack: NoName Targets Critical Infrastructure
Yet again, the NoName ransomware group has targeted Norway, this time claiming an attack on nine critical infrastructures within the country. This recent occurrence adds…
Facebook users have little time left to make $725m data privacy claims
Facebook users who maintained active accounts between May 2007 and December 2022 are urged to take action and submit a claim before the upcoming deadline…
how I bruteforced my way into your Active Directory – honoki
Last May, I discovered that a critical vulnerability I had reported earlier this year had resulted in my first CVE. Since the combination of vulnerabilities…
Leveraging ChatGPT to Alleviate Stress on Cybersecurity Teams
In today’s fast-paced digital landscape, the role of security teams has become increasingly critical to safeguarding sensitive information and maintaining the integrity of digital infrastructures.…
The rise of the cloud-conscious adversary – Partner Content – Security
The opportunities and benefits of the cloud have created new business models for organisations. But at the same time, criminal enterprises and other threat actors…
Cybercriminals turn to AI to bypass modern email security measures
Cybercriminals employ artificial intelligence (AI) to create complex email threats like phishing and business email compromise (BEC) attacks, while modern email security systems use AI…
Vic trumpets digital driver licence trial success – Software
The Victorian government is claiming a success for its digital driver license (DDL) pilot in Ballarat, ahead of a statewide rollout “by 2024”. Government service…