Revival Hijack, New Attack That Hijacks 22,000 PyPI Packages
Hackers often target PyPI packages due to their extensive user base and open-source nature. This helps threat actors in distributing malicious code within an open-source…
Latest Cybersecurity News — Page 4054
View all →
Veeam Releases Security Updates to Fix 18 Flaws, Including 5 Critical Issues
Sep 05, 2024Ravie LakshmananThreat Prevention / Software Security Veeam has shipped security updates to address a total of 18 security flaws impacting its software products,…
NCSC and allies call out Russia’s Unit 29155 over cyber warfare
The UK’s National Cyber Security Centre (NCSC) and its counterpart bodies in the Five Eyes intelligence alliance have joined partners from Czechia, Estonia, Germany, Latvia…
Fake OnlyFans tool backstabs cybercriminals, steals passwords
Hackers are targeting other hackers with a fake OnlyFans tool that claims to help steal accounts but instead infects threat actors with the Lumma stealer…
Noise Attack, A New Backdoor Exploiting Power Spectral Density for Evasion
Researchers propose a novel backdoor attack method called NoiseAttack. Unlike existing methods that typically target a single class, NoiseAttack can target multiple classes with minimal…
Russia’s Most Notorious Special Forces Unit Now Has Its Own Cyber Warfare Team
Russia’s military intelligence agency, the GRU, has long had a reputation as one of the world’s most aggressive practitioners of sabotage, assassination, and cyber warfare,…
WordPress Mandates 2FA, SVN Passwords for Plugin, Theme Authors
Starting October 2024, WordPress requires plugin and theme authors to enable two-factor authentication (2FA) and use SVN-specific passwords for commit access, boosting security for millions…
Planned Parenthood partly offline after ransomware attack
In late August, Intermountain Planned Parenthood of Montana suffered a cyberattack which is still under investigation. The attack has been claimed by a ransomware group.…
Chinese-Speaking Hacker Group Targets Human Rights Studies in Middle East
Sep 05, 2024Ravie LakshmananMalware / Human Rights Unnamed government entities in the Middle East and Malaysia are the target of a persistent cyber campaign orchestrated…
Time to step up in supporting neurodiverse talent at work
Do we all read and understand this sentence (or is it a question) in the same way? The evidence suggests that we don’t; we all…
KTLVdoor Observed Deployed Against Chinese Trading Company
Researchers have uncovered a novel malware dubbed KTLVdoor, linked to the Chinese-speaking threat actor Earth Lusca. This multi-platform backdoor, written in Golang, targets both Windows…
Musician charged with $10M streaming royalties fraud using AI and bots
Image: MidjourneyNorth Carolina musician Michael Smith was indicted for collecting over $10 million in royalty payments from Spotify, Amazon Music, Apple Music, and YouTube Music using AI-generated…