Cybercriminals associated with the DragonForce ransomware group have recently infiltrated a U.S.-based service firm, employing Microsoft Teams’ relay infrastructure to mask their malicious activities effectively. Research conducted by teams from Broadcom’s Symantec and Carbon Black has revealed that the attackers…
A significant security vulnerability has emerged in Gogs, an open-source self-hosted Git service, allowing authenticated users to execute arbitrary code under specific conditions. This flaw, rated 9.4 on the CVSS scale, has not yet been assigned a Common Vulnerabilities and…
WhatsApp Vulnerability Exposes Users to Potential Hacks via Video Calls Recently, a significant security flaw in WhatsApp was unveiled by Google Project Zero researcher Natalie Silvanovich. This vulnerability allows an attacker to gain complete control over a user’s WhatsApp account…
Emerging AI Cybersecurity Models Raise Concerns Among Experts The cybersecurity landscape is rapidly shifting as organizations like Anthropic unveil advanced AI models designed to enhance security measures. Tarah Wheeler, chief security officer of TPO Group, cautions against the assumption that…
In a significant cybersecurity breach, the ShinyHunters group has exploited a previously unaddressed vulnerability in Oracle PeopleSoft to infiltrate enterprise systems. Their campaign has primarily targeted universities, leveraging the exploit to extract sensitive data while demanding ransom payments for its…
A critical vulnerability has emerged in the Secure Shell (SSH) library, Libssh, potentially allowing unauthorized access to vulnerable servers for the past four years. This issue, referred to as CVE-2018-10933, enables attackers to bypass authentication methods entirely, granting them administrative…
The Home Office has stated that its implementation of face scanning technology is intended to serve as an “additional” resource for border personnel, emphasizing that it will not “supersede or undermine human judgment.” However, the department has not clarified how…
Cyber Attack Exploits SSL VPNs: Significant Breaches Uncovered Recent findings from Hudson Rock reveal that a sophisticated cyberattack has significantly compromised multiple organizations across several countries. The attackers employed advanced methods to intercept SSL VPN authentication hashes, utilizing a powerful…
A significant cybersecurity incident has emerged as a security researcher identified multiple critical vulnerabilities in FreeRTOS and its variants, which include Amazon FreeRTOS, OpenRTOS, and SafeRTOS. These vulnerabilities jeopardize a broad spectrum of Internet of Things (IoT) devices and critical…
Cybercriminals Exploit Fake AI Tools in Targeted Attack on JetBrains Marketplace Cybercriminals have launched a coordinated supply chain attack targeting software developers through the JetBrains Marketplace, utilizing counterfeit artificial intelligence (AI) tools. This breach was uncovered by Aikido Security, a…
