Chinese Hackers use .chm Files to Hijack Execution Chain
The Chinese state-backed group TAG-74 is known for conducting intelligence collection on organizations in the following countries:- The TAG-74 utilizes .chm files to trigger a…
Category: CyberSecurityNews
Researchers Uncover the Bond Between Remcos RAT & GuLoader
There have been two instances of software distributors that have disguised themselves as having legitimate purposes but were actually operating with malicious intent. Threat actors…
Silent Skimmer Group Attacking Vulnerable Shopping Websites
The “Silent Skimmer” is a financially motivated group that has been detected targeting vulnerable online payment infrastructure, such as online businesses and Point of Sales…
LockBit Using Remote Monitoring Tools to Infect Employees
In a recent wave of cyberattacks, eSentire, a global Managed Detection and Response (MDR) security services provider, has thwarted three separate ransomware attacks orchestrated by…
CrowdStrike to Acquire Cloud-Native App Security Startup Bionic
In a groundbreaking move within the cybersecurity arena, CrowdStrike, a leading name in cloud security, has announced its agreement to acquire Bionic, the pioneer of…
Konni Exploits WinRAR Vulnerability Attack The Digital Currency
Konni, a North Korean APT group, launched the first attack against the cryptocurrency industry, exploiting a recently found WinRAR vulnerability tagged as CVE-2023-38831. According to the study,…
Trend Micro Zero-day Vulnerability Let Attackers Run Arbitrary Code
If you are using Trend Micro Apex One, be aware that there may be a vulnerability in the third-party Antivirus uninstaller module. This vulnerability could…
Fortinet FortiOS Flaw Let Attacker Execute Malicious Code
A high-severity cross-site scripting (XSS) vulnerability tracked as (CVE-2023-29183) affecting several FortiOS and FortiProxy versions has been patched by Fortinet. Additionally, the cybersecurity firm provided…
Google Cloud Chronicle Security Unifies SOAR and SIEM Solutions
With Google Cloud, Google aims to change cybersecurity, particularly in security operations (SecOps), where overburdened teams battle with emerging threats with outdated methods and tools.…
CapraRAT Android Malware Hijack Android Phones
The suspected Pakistani group Transparent Tribe is known for targeting the military, diplomats, and now the Indian education sector. While outside the Play Store, they…
LockBit Demands 3% of Victim Company Revenue as Ransom
In recent developments within the notorious LockBit ransomware group, discussions among its affiliates are stirring up potential changes in their ransom payment policies. LockBit has…
Microsoft AI researchers accidently Leaked 38TB of secrets
In a recent incident, the Microsoft AI research team inadvertently exposed a staggering 38 terabytes of private data on their GitHub repository. This exposure resulted…