Category cyber-attacks

Hacks of Two Federal Agencies in One Month Unleash a Treasure Trove of Sensitive Data

The Pentagon has alerted over 2 million active and former military personnel that their sensitive personal records were compromised in a breach lasting several months. This incident marks the second significant exposure of sensitive U.S. government information in a short time frame, raising alarms about the security of personnel data.…

Read MoreHacks of Two Federal Agencies in One Month Unleash a Treasure Trove of Sensitive Data

Discover the Reality of Traveling in the Occupied West Bank

In recent weeks, cybersecurity experts have noted a surge in attacks targeting various sectors, raising concerns about the vulnerabilities that businesses face in today’s digital environment. Cyber adversaries are becoming increasingly sophisticated, employing a range of tactics pulled from established frameworks such as the MITRE ATT&CK Matrix. These incidents highlight…

Read MoreDiscover the Reality of Traveling in the Occupied West Bank

MALFEX npm Attack Distributes Windows RAT, Harvests Discord and Browser Information

Recent findings by CloudSEK reveal the MALFEX campaign, which has leveraged compromised npm packages to deploy a remote access trojan known as Overlord RAT, targeting critical user data and Windows systems. This long-term supply chain attack has seen malicious npm packages used to install a RAT that enables attackers to…

Read MoreMALFEX npm Attack Distributes Windows RAT, Harvests Discord and Browser Information

Hackers Exploit Critical Zimbra Vulnerability to Steal Emails

Hackers are actively exploiting a severe vulnerability within the Zimbra Collaboration Suite, targeting organizations to gain unauthorized access to email backups and authentication credentials, according to a recent alert from Microsoft. The vulnerability, known as CVE-2026-73570, enables attackers to execute operating system commands remotely without requiring any authentication, posing a…

Read MoreHackers Exploit Critical Zimbra Vulnerability to Steal Emails

The Impact of Israeli Checkpoints on Palestinian Life in the Occupied West Bank

After October 2023, checkpoint delays in Nablus surged to unprecedented levels, significantly affecting commuters. Individuals navigating through Nablus faced an average wait time of nearly one hour and fifty minutes at checkpoints, far exceeding delays reported elsewhere in the West Bank. Ali Haj Ali, a long-time employee at Sama Pharmaceuticals—situated…

Read MoreThe Impact of Israeli Checkpoints on Palestinian Life in the Occupied West Bank

Global Ransomware Group Exploits WinMerge for Encryptor Deployment

Title: Global Group Ransomware Operation Targets Enterprises via Phishing A Ransomware-as-a-Service (RaaS) operation, identified as Global Group, has been reported to be targeting large enterprises through sophisticated phishing schemes that deliver file-encrypting malware. Recent findings shared by the Cofense Phishing Defense Center (PDC) reveal that attackers employ a combination of…

Read MoreGlobal Ransomware Group Exploits WinMerge for Encryptor Deployment

Cloudflare to Introduce Quantum-Safe TLS Certificates

In February 2023, Google introduced a significant advancement in secure Web communications: Merkle Trees, which are innovative hierarchical data structures utilizing cryptographic hashes to validate extensive datasets with minimal data transmission. This system, under development in collaboration with Cloudflare through limited pilot programs, aims to reduce handshake data to around…

Read MoreCloudflare to Introduce Quantum-Safe TLS Certificates