A previously unknown backdoor known as Msupedge has recently been deployed in cyber attacks against an unnamed university in Taiwan. This alarming development has raised concerns in the cybersecurity community, particularly given the backdoor’s unique operational characteristics. According to a…
Cyberattack Campaign Targets Israeli Entities Using Open-Source Tools Cybersecurity analysts have unearthed a sophisticated attack campaign directed at various entities within Israel, utilizing publicly available frameworks such as Donut and Sliver. HarfangLab, a cybersecurity research firm, detailed the operation in…
In a recent statement regarding a cybersecurity incident, MoneyGram International has clarified that there is no indication linking the attack to ransomware activity. This update comes in the wake of heightened scrutiny following reports of unauthorized access to systems and…
Critical Vulnerability Discovered in Microsoft’s Copilot Studio Cybersecurity experts have revealed a significant security vulnerability impacting Microsoft’s Copilot Studio, raising concerns about the potential for unauthorized access to sensitive data. The flaw, designated as CVE-2024-38206 with a CVSS score of…
Cybersecurity Threat: Surveillance Tool MerkSpy Exploits Microsoft MSHTML Vulnerability Recent reports from Fortinet’s FortiGuard Labs indicate the emergence of a sophisticated surveillance tool known as MerkSpy, which is being used by unidentified threat actors to compromise systems through a now-patched…
This week, a reader expressed concern over receiving multiple notifications regarding data breaches that may impact their accounts. Over the past few months, they have reported receiving six written notices from various companies, all of which are offering complimentary identity…
GitHub has announced a series of critical security updates addressing three vulnerabilities impacting its Enterprise Server (GHES) product. Among these, one flaw is particularly severe and could potentially allow unauthorized users to obtain site administrator privileges. The vulnerability, designated as…
In a significant law enforcement initiative dubbed Operation MORPHEUS, approximately 600 servers utilized by cybercriminal syndicates were dismantled, disrupting a critical component of the infrastructure linked to the Cobalt Strike tool. This crackdown, coordinated by Europol, particularly targeted unlicensed and…
In a recent development reported by AFP, French authorities have been alerted to a potential data breach, raising concerns over the security of sensitive information. The incident underscores the continuing threat that data breaches pose to organizations across various sectors,…
Cybersecurity experts have reported a significant vulnerability within the LiteSpeed Cache plugin for WordPress, one of the platform’s most commonly used caching solutions, boasting over five million active installations. This flaw, identified as CVE-2024-28000, has the potential to enable unauthenticated…
