The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently added a significant security vulnerability affecting Apache Flink to its Known Exploited Vulnerabilities (KEV) catalog. This announcement, made on Thursday, highlights the potential risks associated with an open-source framework widely…
Emergence of ExelaStealer: A New Player in Cybercrime A newly identified information-stealing malware, dubbed ExelaStealer, has emerged in a saturated market already teeming with tools designed to exfiltrate sensitive information from compromised Windows systems. This evolving threat, flagged by FortiGuard…
Operation EMERALDWHALE has emerged as a significant cybersecurity threat, compromising over 15,000 cloud credentials by exploiting exposed Git and Laravel files. Attackers have been utilizing compromised Amazon S3 buckets to store the data, thereby heightening the risk of phishing attacks…
Governance & Risk Management, Incident & Breach Response, Insider Threat Everfox Acquires Yakabod to Enhance Cyber Incident Response and Insider Risk Management Michael Novinson (@MichaelNovinson) • November 1, 2024 Sean Berg, CEO, Everfox (Image: Everfox) Everfox has announced its acquisition…
In recent developments, a previously unidentified threat actor has been leveraging existing security vulnerabilities in Microsoft Exchange Server to deploy keylogger malware, with targets primarily located in Africa and the Middle East. This alarming trend was highlighted by Positive Technologies,…
EmeraldWhale Cybercriminal Operation Exposed, Targeting Git Repositories This week, cybersecurity researchers revealed a significant cybercriminal operation known as EmeraldWhale, which compromised over 15,000 credentials through a massive theft involving a public AWS S3 bucket. The incident, characterized by the illicit…
Google has recently released critical updates to address a significant security vulnerability in its Chrome browser, identified as CVE-2024-5274. This flaw, which has been actively exploited, pertains to a type confusion issue within the V8 JavaScript and WebAssembly engine. The…
Emerging Malvertising Campaign Exploits Google Ads for Targeted Attacks Recent reports have unveiled a sophisticated malvertising campaign leveraging Google Ads to mislead users searching for popular software. This campaign not only directs these users to deceptive landing pages but also…
North Korea Successfully Tests Advanced Intercontinental Ballistic Missile Earlier this week, North Korea conducted a successful launch of its most powerful intercontinental ballistic missile (ICBM), the Hwasong-19. This test saw the missile soaring nearly 4,800 miles into the atmosphere before…
Hackers Exploiting Password Spraying Techniques Target Microsoft Accounts In a recently issued alert, Microsoft has warned of ongoing password spraying attacks orchestrated by multiple Chinese hacking groups utilizing a botnet known as Quad7. Named after a TCP routing port number,…
