Windows infected with backdoored Linux VMs in new phishing attacks
A new phishing campaign dubbed ‘CRON#TRAP’ infects Windows with a Linux virtual machine that contains a built-in backdoor to give stealthy access to corporate networks.…
Month: November 2024
SOC Pricing: Practical Guide to Securing Your Business
Figuring out SOC pricing doesn’t have to be overwhelming. I’ve been there—facing the question of “How much should we spend on security?” You’re not alone.…
New Windows Zero-Day Vulnerability Let Attackers Steal Credentials From Victim’s Machine
A security researcher discovered a vulnerability in Windows theme files in the previous year, which allowed malicious actors to steal Windows users’ credentials. When a…
Hackers Claim Access to Nokia Internal Data, Selling for $20,000
Hackers claim to have breached Nokia through a third-party contractor, allegedly stealing SSH keys, source code, and internal credentials. The data is being sold for…
ChatGPT new search engine features cause data sanctity concerns
ChatGPT, developed by OpenAI and backed by Microsoft, is poised to enhance its functionality this week by integrating search engine capabilities. This update will allow…
Gartner: Avoid AI project money pit
Generative artificial intelligence (GenAI) is past its peak in the Gartner hype cycle but has not met expectations, analysts warned at the company’s European conference…
Nigerian man sentenced to 26+ years in real estate phishing scams
Nigerian man Sentenced to 26+ years in real estate phishing scams Pierluigi Paganini November 04, 2024 Nigerian Kolade Ojelade gets 26 years in U.S. for…
Data of 500,000 stolen in July ransomware attack
The City of Columbus, Ohio, notified 500,000 individuals that a ransomware gang stole their personal and financial information in a July 2024 cyberattack. Ohio’s capital…
Hackers Using AV/EDR Tool “EDRSandBlast” To Bypass Endpoints
AV, anti-malware, and EDR are tools that are primarily used to detect and prevent cyber-attacks. While the AV/EDR bypass tools are designed to evade detection…
Sophisticated Phishing Attack Targeting Ukraine Military Sectors
The Ukrainian Cyber Emergency Response Team discovered a targeted phishing campaign launched by UAC-0215 against critical Ukrainian infrastructure, including government agencies, key industries, and military…
Critical Flaws in Ollama AI Framework Could Enable DoS, Model Theft, and Poisoning
Nov 04, 2024Ravie LakshmananVulnerability / Cyber Threat Cybersecurity researchers have disclosed six security flaws in the Ollama artificial intelligence (AI) framework that could be exploited…
Critical QNAP Zero-day Flaw in QuRouter Patched, Update Now!
QNAP Systems, Inc., a leading provider of network-attached storage (NAS) and networking solutions, has released a critical security update for its QuRouter devices, addressing a…