Multiple threat actors are exploiting a significant design vulnerability in Foxit PDF Reader, utilizing it as a conduit for distributing various malware strains, including Agent Tesla, AsyncRAT, DCRat, NanoCore RAT, NjRAT, Pony, Remcos RAT, and XWorm. This exploitation triggers security…
Title: LUCR-3 Threat Actor Targets Fortune 2000 Companies Through Identity Provider Exploitation A recent analysis has unveiled the activities of a financially motivated threat actor known as LUCR-3, which has been linked to a series of cyberattacks targeting high-profile organizations…
Manufacturing Sector Faces Rising Cybersecurity Threats: An Interview with Trane Technologies’ Aaron Havenar In today’s fast-paced manufacturing environment, companies are grappling with an increasing number of identities—both human and machine. This surge presents a dual challenge: managing these identities effectively…
Title: The Rising Challenge of Operational Technology Security in Maritime and Industrial Domains Recent developments in operational technology (OT) security reveal a growing concern among marine vessel and port operators, as both ships and industrial cranes undergo rapid digitalization and…
The digital landscape is experiencing an unprecedented surge in the collection and storage of personal data, creating a fertile ground for data breaches that pose significant risks to individuals and organizations alike. Recent high-profile incidents have illuminated the perilous state…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) recently added a critical new vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, highlighting significant risks associated with NextGen Healthcare’s Mirth Connect. This development comes in light of evidence suggesting active exploitation…
A recent cybersecurity incident has revealed a targeted attack against a governmental organization in Guyana, identified as part of a sophisticated operation referred to as Operation Jacana. The campaign involves an intricate spear-phishing tactic, which was uncovered by ESET, a…
Phishing Attack Uncovered Using Fake CAPTCHA to Execute Malicious Scripts In a recent security analysis by ANY.RUN, an interactive malware analysis platform, a sophisticated phishing campaign has been identified that utilizes deceptive fake CAPTCHA prompts to lure victims into executing…
Cybersecurity Risks in Healthcare: The Need for Vigilance Against Network Disruptions Ransomware attacks targeting medical devices may not be frequent, but the vulnerability of IT systems that support these devices poses significant concerns for the healthcare sector. Jessica Wilkerson, a…
Several widely-used Android applications on the Google Play Store have been identified as vulnerable due to a path traversal vulnerability known as the “Dirty Stream” attack. This flaw could enable malicious applications to overwrite files within the affected apps’ home…
