The Akira ransomware group has announced a breach of Apache OpenOffice, claiming to have stolen 23GB of sensitive data. For context, Apache OpenOffice is a widely recognized free and open-source office suite created by the Apache Software Foundation, offering tools that serve as alternatives to Microsoft Office on platforms like…
Security Flaws Discovered in Ollama AI Framework Recent disclosures by cybersecurity researchers have revealed six vulnerabilities within the Ollama artificial intelligence (AI) framework, a tool enabling users to deploy large language models (LLMs) locally on multiple operating systems, including Windows, Linux, and macOS. These vulnerabilities present significant risks, allowing potential…
On Monday, cybersecurity researchers unveiled the existence of a newly identified re-implementation of the notorious Cobalt Strike Beacon for both Linux and Windows operating systems. This variant, dubbed “Vermilion Strike,” has been actively targeting a range of sectors, including government, telecommunications, IT, and financial institutions. This advanced yet undetected penetration…
The LockBit ransomware group has made a notable return, launching its latest variant, LockBit 5.0, after a period of inactivity triggered by law enforcement actions earlier in 2024. The resurgence comes despite significant disruptions to their infrastructure and efforts to dismantle their operations during Operation Cronos. Under the direction of…
Recent investigations by Lumen Technologies have unveiled the significant role of the Ngioweb malware in powering the well-known residential proxy service NSOCKS, along with related services such as VN5Socks and Shopsocks5. This revelation highlights the ongoing misuse of this malware in various cybercriminal operations. The telemetry data from Black Lotus…
Recent disclosures have revealed multiple significant security vulnerabilities within the needrestart package, which has been a default component of Ubuntu Server since version 21.04. These flaws pose a threat by enabling local attackers to escalate their privileges to root without the need for user interaction. The Qualys Threat Research Unit…
Recent investigations conducted by Qihoo 360’s Netlab security team have unveiled an emergent botnet named “Abcbot.” This entity demonstrates worm-like propagation methods, targeting Linux systems to execute distributed denial-of-service (DDoS) attacks on various victims. The botnet’s inception can be traced back to July 2021, yet its latest variants, identified as…
Recent disclosures have unveiled nearly two dozen vulnerabilities in Advantech’s industrial-grade wireless access points, a suite of devices that are integral to operational technology networks. Among these vulnerabilities, several are critical, enabling potential attackers to bypass authentication protocols and execute code at elevated privileges, thereby posing substantial risks to the…
Endpoint Security, Hardware / Chip-level Security Eclypsium Uncovers UEFI Vulnerability in Framework Laptops and Desktops Pooja Tikekar (@PoojaTikekar) • October 15, 2025 Image: Shutterstock Security researchers from Eclypsium have identified a critical firmware weakness in approximately 200,000 laptops and desktops manufactured by the modular company Framework. This vulnerability…
