Hackers Leverage NeedyMantis Malware for Extended Network Infiltration Microsoft has unveiled the use of a malware variant known as NeedyMantis, employed by hackers to secure prolonged access to compromised networks, according to a recent technical analysis. This malware has been detected in a limited number of targeted attacks against entities…
Recent revelations of hours of drone surveillance footage from the San Francisco Police Department have surfaced online, marking a significant shift towards increasingly detailed urban monitoring. The exposure has sparked concerns about privacy and security among citizens. Concurrently, the San Francisco City Attorney’s Office has issued cease-and-desist directives to both…
Kaspersky’s latest findings reveal a newly identified threat group, dubbed Armored Likho, which is currently engaged in a sophisticated spear-phishing campaign. This operation predominantly targets government entities and energy sectors across Russia, Kazakhstan, and Brazil. Armored Likho has developed an extensive malware arsenal designed to extract credentials, confidential documents, and…
The urgency is palpable for Windows and Linux users, who must urgently update cryptographic keys to safeguard their systems from firmware-based UEFI infections. This type of malware is particularly insidious, as it executes before the operating system and antimalware solutions can activate, making it especially challenging to detect and eradicate.…
UEFI Bootkits: A Growing Cybersecurity Concern In recent years, the landscape of cybersecurity threats has evolved significantly, marked notably by the introduction of bootkits targeting Unified Extensible Firmware Interface (UEFI) systems. These sophisticated forms of malware represent a new layer of vulnerability for both individual users and corporate environments, disrupting…
Microsoft Releases Critical Security Updates Addressing 39 Vulnerabilities In a significant move this December, Microsoft has released security patches addressing a total of 39 vulnerabilities across its Windows operating systems and applications during its year-end Patch Tuesday. Among these, ten vulnerabilities have been designated as critical, emphasizing the potential severe…
A recently uncovered campaign attributed to the China-based cybercrime group known as Silver Fox—also referred to as Monarch, SwimSnake, The Great Thief of Valley, UTG-Q-1000, and Void Arachne—has targeted organizations in Russia and India with new malware identified as ABCDoor. The operation has prominently involved the use of phishing emails…
Targeted Supply Chain Attack on DAEMON Tools Software Discovered A recent investigation by Kaspersky has revealed a sophisticated supply chain attack targeting DAEMON Tools software. The attack involves tampering with the software’s installers, which are distributed through the official DAEMON Tools website and are signed with valid digital certificates from…
Critical Vulnerabilities Discovered in Open-Source VNC Remote Desktop Applications Recent findings reveal that four widely used open-source VNC (Virtual Network Computing) remote desktop applications are susceptible to a staggering 37 security vulnerabilities. Many of these vulnerabilities have remained undetected for the last two decades, with the most severe posing the…
