China-linked Salt Typhoon APT compromised more US telecoms than previously known Pierluigi Paganini January 06, 2025 China-linked Salt Typhoon group that breached multiple US telecoms…
PLAYFULGHOST backdoor supports multiple information stealing features Pierluigi Paganini January 06, 2025 PLAYFULGHOST is a new malware family with capabilities including keylogging, screen and audio…
Nuclei flaw allows signature bypass and code execution Pierluigi Paganini January 05, 2025 A vulnerability in Nuclei, an open-source vulnerability scanner, could allow attackers to…
Malicious npm packages target Ethereum developers Pierluigi Paganini January 04, 2025 Malicious npm packages target Ethereum developers, impersonating Hardhat plugins to steal private keys and…
US Treasury Department sanctioned Chinese cybersecurity firm linked to Flax Typhoon APT Pierluigi Paganini January 04, 2025 The U.S. Treasury Department sanctioned Chinese cybersecurity firm…
FireScam Android info-stealing malware supports spyware capabilities Pierluigi Paganini January 03, 2025 FireScam malware steals credentials and financial data by monitoring Android app notifications and…
Richmond University Medical Center data breach impacted 674,033 individuals Pierluigi Paganini January 03, 2025 Richmond University Medical Center has confirmed that a ransomware attack in…
Apple will pay $95 Million to settle lawsuit over Siri’s alleged eavesdropping Pierluigi Paganini January 03, 2025 Apple has agreed to a $95 million settlement…
LDAPNightmare, a PoC exploit targets Windows LDAP flaw CVE-2024-49113 Pierluigi Paganini January 03, 2025 Experts warn of a new PoC exploit, LDAPNightmare, that targets a…
Around 3.3 million POP3 and IMAP mail servers lack TLS encryption Pierluigi Paganini January 03, 2025 Over 3 million POP3 and IMAP mail servers lack…
A US soldier was arrested for leaking presidential call logs Pierluigi Paganini January 02, 2025 US authorities have arrested soldier Cameron John Wagenius for his…
DoubleClickjacking allows clickjacking on major websites Pierluigi Paganini January 02, 2025 The “DoubleClickjacking” exploit bypasses protections on major websites, using a double-click sequence for clickjacking…
