Hackers Exploit YouTube Videos to Deliver Malware
Threat actors hunt for ways to exploit vulnerabilities by employing tactics from technical zero-days to broad phishing. Social engineering blends with commodity malware on high-traffic…
Category: CyberSecurityNews
CharmingCypress Use Poisoned VPN Apps to Install Backdoor
Threat actors of Iranian origin, CharmingCypress (also known as Charming Kitten, APT42, TA453), have gathered political intelligence against international targets, with a special emphasis on…
Water Hydra Group Exploits Microsoft SmartScreen Zero-Day Flaw
Threat actors exploit Microsoft Defender SmartScreen zero-day flaws to circumvent the security mechanisms designed to protect users from malicious websites and downloads. By leveraging these…
Multipurpose Glupteba Malware Controls OS Boot Process to Hide Itself
Glupteba, a decade-old malware in financial cybercrime, unveiled a new campaign in November 2023. Despite its long tenure, the undiscovered features include a UEFI bootkit…
ANY.RUN Threat Intelligence Lookup – A Complete Guide
Malware sandbox leader ANY.RUN introduced the Threat Intelligence Lookup platform that helps security researchers find the relevant threat data from the sandbox tasks of ANY.RUN.…
CISA Warns Of Active Attacks on Roundcube XSS Vulnerability
CISA, the Cybersecurity and Infrastructure Security Agency, has issued a warning regarding a Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail that is currently being targeted…
Canada to Ban Flipper Zero Device Over Car Hacking Fears
The Canadian government has banned Flipper Zero, a compact and customizable hacking tool, citing concerns over its potential use in automotive theft. At a recent…
Hackers Exploiting Ivanti SSRF flaw to Inject DSLog Malware
Ivanti Connect Secure was previously discovered with another SSRF vulnerability that could allow unauthenticated threat actors to access unrestricted resources due to a flaw in…
Coyote Malware Leverage NodeJS to Attack Users of 60+ Banks
In banking attacks, threat actors actively exploit the NodeJS to steal the online banking credentials of the targeted users. Threat actors use JavaScript web injections…
Beware-Raspberry Robin That Delivered as a Windows Component
Raspberry Robin is a malicious worm that spreads through USB drives, and it’s been actively used by the threat actors to download and install hidden…
Malware Mimic as Visual Studio Update to Attack macOS users
A new backdoor written in Rust has been discovered to target macOS users with several interesting features. Moreover, there have been 3 variants of backdoor…
Benefits of a vCISO for Small Businesses
Cybersecurity is of critical concern for every company, no matter their headcount or yearly revenue; in fact, many hackers target small and midsize companies, knowing…