Two individuals from Sudan have been indicted by federal authorities for orchestrating a series of extensive distributed denial of service (DDoS) attacks that targeted prominent technology firms as well as critical infrastructure and governmental entities around the globe. The operation, identified as Anonymous Sudan, is alleged to have launched tens…
Cybersecurity Weekly Recap: Takedowns, DDoS Attacks, and Emerging Threats The realm of cybersecurity continues to evolve with alarming speed, as evidenced by the latest developments in the threat landscape. One significant topic this week is the prevalence of "pig butchering" scams, alongside impactful government interventions and a staggering array of…
A newly identified backdoor malware known as Kapeka has been linked to ongoing cyberattacks targeting Eastern European nations, particularly Estonia and Ukraine, since at least mid-2022. This flexible backdoor is believed to be associated with the Russian advanced persistent threat (APT) group Sandworm, a faction also referred to as APT44…
Major Data Breach Allegedly Targets Cisco Systems: Intel Broker Claims Responsibility Intel Broker, a notorious figure in the realm of cybercrime, has asserted that he successfully breached Cisco Systems, Inc., resulting in the theft of a significant trove of sensitive data, including source codes, confidential documents, and various credentials. The…
In recent weeks, a significant wave of social engineering attacks has emerged, targeting users of Gmail worldwide. Reports indicate that many individuals have received fraudulent phone calls from impersonators claiming to represent Google Support. These calls, which utilize advanced AI technology, are designed to deceive users into revealing their account…
Czechia and Germany have disclosed that they fell victim to an extensive cyber espionage campaign orchestrated by the Russian-affiliated state-sponsored group known as APT28, which has drawn sharp rebukes from several Western entities, including the European Union (E.U.), NATO, the United Kingdom, and the United States. According to a statement…
A recently identified vulnerability in VMware ESXi hypervisors has been under active exploitation by several ransomware groups, raising significant concerns among cybersecurity experts. The flaw, detailed under CVE-2024-37085 and assigned a CVSS score of 6.8, enables attackers to bypass Active Directory integration authentication, thus granting them illicit administrative access to…
In this week’s cybersecurity newsletter, we bring you a comprehensive overview of the current threats facing organizations globally, focusing on the latest cybersecurity incidents and the mitigation strategies that business owners should be aware of. The digital landscape is continually evolving, and understanding these threats is crucial to safeguarding sensitive…
Microsoft’s Smart App Control and SmartScreen Found Vulnerable to Exploitation Recently, cybersecurity researchers have identified critical vulnerabilities within Microsoft’s Windows Smart App Control (SAC) and SmartScreen features, which may grant threat actors an opportunity for initial access to targeted systems without triggering security alerts. This discovery raises concerns about the…
