Darknet Drama Unfolds: Market Admin Threatens Buyers
In a shocking turn of events, the darknet community is facing a new threat from within. An administrator of a well-known darknet market has issued…
Category: CyberSecurityNews
GAO Asks CISA to Improve Staff Skills Needed to Safeguard OT
In a recent report by the Government Accountability Office (GAO), the Cybersecurity and Infrastructure Security Agency (CISA) has been urged to enhance its workforce capabilities…
Broadcom Merges Carbon Black with Symantec Focusing Security
Broadcom has taken a step by merging Carbon Black and Symantec, two of the most innovative and engineering-driven brands in cybersecurity. This strategic move aims…
Researchers Hacked Google A.I: Earned $50k Bounty
At Google’s LLM bugSWAT event in Las Vegas, researchers uncovered and reported bugs in the company’s Bard AI (formerly known as Gemini) and received a…
Hackers Compromised 3,300 Websites using Plug-in Vulnerability
Attackers exploit an unpatched Popup Builder vulnerability (CVE-2023-6000) to inject malicious code into vulnerable websites’ “Custom JS or CSS” sections. The code redirects users to…
Addressing Emerging Threats Through Adaptive Software Development
In today’s interconnected world, the threat landscape of cybersecurity is more dynamic and sophisticated than ever. Organizations face an array of challenges from malicious actors…
Hackers Using Weaponized ISO & IMG Files to Attack Organizations
The notorious hacking group known as Earth Kapre, also referred to as RedCurl and Red Wolf, has been targeting organizations across the globe with weaponized…
BianLian Hackers Exploiting TeamCity servers to Deploy
The notorious hacking group BianLian, known for its sophisticated cyber attacks, has shifted its focus to extortion-only operations following the release of a decryptor by…
Vulnerabilities in Fonts Allow XXE & Arbitrary Command Execution
The popular fonts used in web development and design can be exploited to launch XML External Entity (XXE) attacks and execute arbitrary commands. These vulnerabilities,…
Beware of Fake Trading Apps on Google Play & App Store
A recent investigation unveiled a trend of fake trading apps on Google Play and the App Store designed to trick unsuspecting users out of their…
Magnet Goblin Hackers Exploiting 1-day Vulnerabilities Linux Servers
Threat actors often target Linux servers due to their widespread use in critical infrastructure, web hosting, and cloud environments. The open-source nature of the Linux…
Top 10 Cloud Security Mitigation Strategies
NSA and CISA jointly released “Top 10 Cloud Security Mitigation Strategies” to advise cloud users on critical security practices for migrating data. The National Security…