PKfail Vulnerability Allows Hackers to Install UEFI Malware
The PKfail vulnerability is a significant security issue affecting over 200 device models of Secure Boot. PKfail is a critical firmware supply-chain issue that undermines…
Category: CyberSecurityNews
OpenStack Nova Vulnerability – Hackers Gain Unauthorized Access
A vulnerability in OpenStack’s Nova component has been identified, potentially allowing hackers to gain unauthorized access to cloud servers. This vulnerability, tracked as CVE-2024-40767, affects…
North Korean Charged in Cyberattacks on US Hospitals, NASA & Military Bases
A North Korean military intelligence operative has been indicted for orchestrating a series of cyberattacks targeting U.S. hospitals, NASA, and military bases, federal prosecutors announced…
Hackers Bypass Secure Email Gateway With Malware Exploits
Hackers often attack Secure Email Gateways (SEGs) to bypass security measures and gain access to private communications. Once they have attacked SEGs, they can snoop…
North Korean APT45 Hackers, Long Running Digital Military Since 2009
The FBI and Google-owned Mandiant have recently revealed a sophisticated North Korean hacking group known as APT45. This group, previously dubbed Andariel, has been conducting…
Red Art Games Hacked, Customers Personal Information Exposed
Red Art Games, a prominent publisher and distributor of limited-edition video games, has fallen victim to a cyberattack. The breach has resulted in the exposure…
Vigorish Viper, An Advanced Suite That Cybercrime Supply Chain
Hackers make use of the cybercrime supply chain for a multitude of illicit purposes like acquiring and distributing malicious tools, services, and stolen data. This…
RA Ransomware Group Aggressively Attacking Manufacturing Sector
RA World, an emerging ransomware group, has been increasingly active since March 2024, using a multi-extortion tactic to steal data and threaten to leak it…
Threat Actors Using Telegram APIs To Steal Login Credentials
Threat actors are exploiting Telegram APIs to avoid detection and illicitly obtain users’ login credentials. Be cautious of a phishing email containing a disguised URL…
Hackers Claiming Breach of CrowdStrike’s Threat Actor Database
A hacktivist entity known as USDoD has claimed to have leaked CrowdStrike’s “entire threat actor list” and alleged possession of the company’s “entire IOC [indicators…
6600+ Vulnerable GeoServer instances Exposed to the Internet
Security analysts have identified 6,635 GeoServer instances exposed to the Internet, which makes them vulnerable to critical remote code execution (RCE) attacks. A recent tweet…
Google Chrome Enhances User Protection Against Malicious Downloads
Google has recently unveiled significant updates to Chrome’s download protection features, aiming to provide users with enhanced security against potentially harmful files. These changes come…