New Cyber Threat: Mongolian Skimmer Campaign Revealed Cybersecurity experts have recently uncovered a sophisticated digital skimmer campaign utilizing Unicode obfuscation techniques to deploy a skimmer known as “Mongolian Skimmer.” Researchers from Jscrambler noted that the obfuscated nature of the script raises eyebrows due to the extensive use of accented characters,…
Cybersecurity Flaws Discovered in Roundcube Webmail Could Lead to Data Theft Recent analysis by cybersecurity experts has unveiled critical vulnerabilities within the Roundcube webmail software, which could be manipulated by attackers to run malicious JavaScript in a user’s web browser, potentially exposing sensitive information stored in their email accounts. The…
Data Breach Hits The Wayback Machine, Millions of Records Compromised The popular digital archive known as The Wayback Machine, operated by the Internet Archive, has reportedly experienced a severe data breach. This incident has led to the theft of over 31 million records, which encompass sensitive user information. According to…
The GootLoader malware continues to pose significant risks as cybercriminals exploit it to deploy new payloads onto infected systems. This malware has seen active use by threat actors aiming to target various organizations, particularly in legal and professional sectors, as reported by the cybersecurity firm Cybereason. Recent analysis from Cybereason…
Google Chrome Security Flaw Actively Exploited in the Wild Google recently disclosed that a significant security vulnerability patched in a software update to its Chrome browser has been identified as actively exploited in the wild. This flaw, designated CVE-2024-7965, was encapsulated within the V8 JavaScript and WebAssembly engine and was…
Cybersecurity Experts Uncover DarkGate Malware Campaign Targeting Samba File Shares In a recent investigation, cybersecurity analysts have unveiled a brief yet impactful campaign associated with DarkGate malware, which exploited Samba file sharing services as a vector for infection. Researchers from Palo Alto Networks’ Unit 42 indicated that the campaign occurred…
Multiple Exploit Campaigns Target Apple Safari and Google Chrome Users Recent analysis by cybersecurity experts has revealed that nation-state actors have leveraged previously patched vulnerabilities in Apple Safari and Google Chrome to distribute information-stealing malware to mobile users. The campaigns, which took place between November 2023 and July 2024, specifically…
CrowdStrike has issued a warning about a new threat actor attempting to exploit the recent Falcon Sensor update issues to distribute suspicious installation files aimed at German customers. This targeted campaign was identified following a spear-phishing attempt on July 24, 2024, which involved a fraudulent installer masquerading as the CrowdStrike…
The cyber espionage landscape has witnessed a significant threat from the nation-state actor known as SideWinder, which has recently launched a campaign specifically targeting ports and maritime facilities across the Indian Ocean and Mediterranean Sea regions. This campaign has garnered attention for its sophisticated spear-phishing techniques aimed at several countries,…
