Vigorish Viper, An Advanced Suite That Cybercrime Supply Chain
Hackers make use of the cybercrime supply chain for a multitude of illicit purposes like acquiring and distributing malicious tools,...
Read more →Category: CyberSecurityNews
RA Ransomware Group Aggressively Attacking Manufacturing Sector
RA World, an emerging ransomware group, has been increasingly active since March 2024, using a multi-extortion tactic to steal data...
Read more →
Threat Actors Using Telegram APIs To Steal Login Credentials
Threat actors are exploiting Telegram APIs to avoid detection and illicitly obtain users’ login credentials. Be cautious of a phishing...
Read more →
Hackers Claiming Breach of CrowdStrike’s Threat Actor Database
A hacktivist entity known as USDoD has claimed to have leaked CrowdStrike’s “entire threat actor list” and alleged possession of...
Read more →
6600+ Vulnerable GeoServer instances Exposed to the Internet
Security analysts have identified 6,635 GeoServer instances exposed to the Internet, which makes them vulnerable to critical remote code execution...
Read more →
Google Chrome Enhances User Protection Against Malicious Downloads
Google has recently unveiled significant updates to Chrome’s download protection features, aiming to provide users with enhanced security against potentially...
Read more →
Microsoft’s Windows Hello for Business Flaw Let Attackers Bypass Authentication
A recently discovered vulnerability in Microsoft’s Windows Hello for Business (WHfB) authentication system allowed attackers to bypass the supposedly phishing-resistant...
Read more →
DDoS Attack Lasted for 6 Days, Record created for Cyberattack
A financial institution in the Middle East endured a record-breaking Distributed Denial of Service (DDoS) attack for six days. The...
Read more →
Progress Telerik Report Server Flaw Let Attackers Execute Remote Code
A critical security vulnerability has been discovered in the Progress® Telerik® Report Server, potentially allowing attackers to execute remote code...
Read more →
GitLab Patch XSS Vulnerability – Attackers Execute Arbitrary Code
GitLab has released new Community Edition (CE) and Enterprise Edition (EE) versions to address multiple vulnerabilities. Among these, a high-severity...
Read more →
BIND DNS Server Vulnerability Lets Attackers Flood Server
The Internet Systems Consortium (ISC) has released critical security advisories addressing multiple vulnerabilities in the Berkeley Internet Name Domain (BIND)...
Read more →
ERP Provider Exposes 769 Million Records, Including API Keys And Email Addresses
A massive data breach involving ClickBalance, one of Mexico’s largest Enterprise Resource Planning (ERP) technology providers, has been uncovered by...
Read more →