Google Enhances Gmail Security with New Encryption Tool In June of this year, Google introduced an alpha version of its Chrome extension named “End-to-End,” aimed at enabling secure email communication in light of revelations by former NSA contractor Edward Snowden regarding extensive government surveillance. Recently, Google has taken another significant…
Recent findings by CloudSEK reveal the MALFEX campaign, which has leveraged compromised npm packages to deploy a remote access trojan known as Overlord RAT, targeting critical user data and Windows systems. This long-term supply chain attack has seen malicious npm packages used to install a RAT that enables attackers to…
Urgent Security Update for Git Clients: Developers Urged to Act Following Critical Vulnerability Discovery A significant security vulnerability has been identified in the open source Git code-repository software and associated tools like GitHub, impacting users on Mac OS X and Windows platforms. Software developers utilizing these systems are strongly advised…
Hackers are actively exploiting a severe vulnerability within the Zimbra Collaboration Suite, targeting organizations to gain unauthorized access to email backups and authentication credentials, according to a recent alert from Microsoft. The vulnerability, known as CVE-2026-73570, enables attackers to execute operating system commands remotely without requiring any authentication, posing a…
After October 2023, checkpoint delays in Nablus surged to unprecedented levels, significantly affecting commuters. Individuals navigating through Nablus faced an average wait time of nearly one hour and fifty minutes at checkpoints, far exceeding delays reported elsewhere in the West Bank. Ali Haj Ali, a long-time employee at Sama Pharmaceuticals—situated…
Critical Vulnerability Exposes Millions of Routers to Cyber Threats Recent developments have revealed that more than 12 million home and business routers worldwide are at risk due to a significant software vulnerability, enabling potential exploitation by malicious hackers. This critical flaw allows attackers to remotely monitor user traffic and gain…
Title: Global Group Ransomware Operation Targets Enterprises via Phishing A Ransomware-as-a-Service (RaaS) operation, identified as Global Group, has been reported to be targeting large enterprises through sophisticated phishing schemes that deliver file-encrypting malware. Recent findings shared by the Cofense Phishing Defense Center (PDC) reveal that attackers employ a combination of…
Apple Issues Unprecedented Security Update for macOS In a historic first, Apple Inc. has initiated an automatic security update for macOS to address a critical vulnerability in the Network Time Protocol (NTP), underscoring the severity of the threat. This decision came after the company determined that the risks associated with…
In February 2023, Google introduced a significant advancement in secure Web communications: Merkle Trees, which are innovative hierarchical data structures utilizing cryptographic hashes to validate extensive datasets with minimal data transmission. This system, under development in collaboration with Cloudflare through limited pilot programs, aims to reduce handshake data to around…