CISA Warns Of Active Attacks on Roundcube XSS Vulnerability
CISA, the Cybersecurity and Infrastructure Security Agency, has issued a warning regarding a Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail that is currently being targeted…
Category: CyberSecurityNews
Canada to Ban Flipper Zero Device Over Car Hacking Fears
The Canadian government has banned Flipper Zero, a compact and customizable hacking tool, citing concerns over its potential use in automotive theft. At a recent…
Hackers Exploiting Ivanti SSRF flaw to Inject DSLog Malware
Ivanti Connect Secure was previously discovered with another SSRF vulnerability that could allow unauthenticated threat actors to access unrestricted resources due to a flaw in…
Coyote Malware Leverage NodeJS to Attack Users of 60+ Banks
In banking attacks, threat actors actively exploit the NodeJS to steal the online banking credentials of the targeted users. Threat actors use JavaScript web injections…
Beware-Raspberry Robin That Delivered as a Windows Component
Raspberry Robin is a malicious worm that spreads through USB drives, and it’s been actively used by the threat actors to download and install hidden…
Malware Mimic as Visual Studio Update to Attack macOS users
A new backdoor written in Rust has been discovered to target macOS users with several interesting features. Moreover, there have been 3 variants of backdoor…
Benefits of a vCISO for Small Businesses
Cybersecurity is of critical concern for every company, no matter their headcount or yearly revenue; in fact, many hackers target small and midsize companies, knowing…
Rise of Black Hat AI Tools That Shifts The Nature Of Cyber Warfare
The rise of malicious versions of LLMs, like dark variants of ChatGPT, is escalating cyber warfare by enabling more sophisticated and automated attacks. These models…
Zardoor Malware Uses Reverse Proxy Tools to Evade Detection
A new malware has been reported to be distributed by threat actors, which is likely known to be a stealthy espionage campaign going on since…
Fortinet Warns of Critical SSL VPN Flaw Exploited in the Wild
Fortinet has issued a warning regarding a critical out-of-bounds write vulnerability in FortiOS. Remote attackers can exploit this vulnerability to execute arbitrary code, posing a…
Beware of Fake LastPass App that Steal Personal Information
Customers of LastPass have been alerted of a fraudulent app on the Apple App Store that poses as the legitimate LastPass app in an attempt to…
Chinese Hackers Remain Undetected in US Infrastructure
Volt Typhoon, the PRC state-sponsored threat actor, has been discovered to be compromising U.S. critical infrastructure for future crises in case of a conflict with…