Latest Cyber Security News
General Cyber Security News
Cybersecurity researchers have disclosed multiple security flaws impacting open-source machine learning (ML) tools and frameworks such as MLflow, H2O, PyTorch, and MLeap that could pave the way for …
Researchers Uncover Flaws in Popular Open-Source Machine Learning FrameworksRead More
The modern business landscape is thrilling yet daunting. Rapidly evolving technology, persistent cyberthreats and escalating operational complexities make data protection and seamless business …
The threat actors behind the More_eggs malware have been linked to two new malware families, indicating an expansion of its malware-as-a-service (MaaS) operation. This includes a novel …
More_eggs MaaS Expands Operations with RevC2 Backdoor and Venom LoaderRead More
The threat actor known as Gamaredon has been observed leveraging Cloudflare Tunnels as a tactic to conceal its staging infrastructure hosting a malware called GammaDrop. The activity is part of an …
Hackers Leveraging Cloudflare Tunnels, DNS Fast-Flux to Hide GammaDrop MalwareRead More
As many as 77 banking institutions, cryptocurrency exchanges, and national organizations have become the target of a newly discovered Android remote access trojan (RAT) called DroidBot. "DroidBot is a …
This $3,000 Android Trojan Targeting Banks and Cryptocurrency ExchangesRead More
Cybersecurity researchers have released a proof-of-concept (PoC) exploit that strings together a now-patched critical security flaw impacting Mitel MiCollab with an arbitrary file read zero-day, …
Critical Mitel MiCollab Flaw Exposes Systems to Unauthorized File and Admin AccessRead More
Europol on Thursday announced the shutdown of a clearnet marketplace called Manson Market that facilitated online fraud on a large scale. The operation, led by German authorities, has resulted in the …
Europol Shuts Down Manson Market Fraud Marketplace, Seizes 50 ServersRead More
A previously undocumented threat activity cluster dubbed Earth Minotaur is leveraging the MOONSHINE exploit kit and an unreported Android-cum-Windows backdoor called DarkNimbus to facilitate long-term …
Hackers Target Uyghurs and Tibetans with MOONSHINE Exploit and DarkNimbus BackdoorRead More
Vulnerability Management (VM) has long been a cornerstone of organizational cybersecurity. Nearly as old as the discipline of cybersecurity itself, it aims to help organizations identify and address …
Want to Grow Vulnerability Management into Exposure Management? Start Here!Read More
A suspected Chinese threat actor targeted a large U.S. organization earlier this year as part of a four-month-long intrusion. According to Broadcom-owned Symantec, the first evidence of the malicious …
Researchers Uncover 4-Month Cyberattack on U.S. Firm Linked to Chinese HackersRead More
The China-linked threat actor known as MirrorFace has been attributed to a new spear-phishing campaign mainly targeting individuals and organizations in Japan since June 2024. The aim of the campaign …
ANEL and NOOPDOOR Backdoors Weaponized in New MirrorFace Campaign Against JapanRead More
The U.K. National Crime Agency (NCA) on Wednesday announced that it led an international investigation to disrupt Russian money laundering networks that were found to facilitate serious and organized …
NCA Busts Russian Crypto Networks Laundering Funds and Evading SanctionsRead More
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added multiple security flaws affecting products from Zyxel, North Grid Proself, ProjectSend, and CyberPanel to its Known Exploited …
CISA Warns of Active Exploitation of Flaws in Zyxel, ProjectSend, and CyberPanelRead More
The Russia-linked advanced persistent threat (APT) group known as Turla has been linked to a previously undocumented campaign that involved infiltrating the command-and-control (C2) servers of a …
Europol on Tuesday announced the takedown of an invite-only encrypted messaging service called MATRIX that's created by criminals for criminal purposes. The joint operation, conducted by French and …
Europol Dismantles Criminal Messaging Service MATRIX in Major Global TakedownRead More
Are you using the cloud or thinking about transitioning? Undoubtedly, multi-cloud and hybrid environments offer numerous benefits for organizations. However, the cloud's flexibility, scalability, and …
7 PAM Best Practices to Secure Hybrid and Multi-Cloud EnvironmentsRead More
Many organizations struggle with password policies that look strong on paper but fail in practice because they're too rigid to follow, too vague to enforce, or disconnected from real security needs. …
How to Plan a New (and Improved!) Password Policy for Real-World Security ChallengesRead More
Cybersecurity researchers are alerting to a software supply chain attack targeting the popular @solana/web3.js npm library that involved pushing two malicious versions capable of harvesting users' …
Researchers Uncover Backdoor in Solana’s Popular Web3.js npm LibraryRead More
A joint advisory issued by Australia, Canada, New Zealand, and the U.S. has warned of a broad cyber espionage campaign undertaken by People's Republic of China (PRC)-affiliated threat actors targeting …
Joint Advisory Warns of PRC-Backed Cyber Espionage Targeting Telecom NetworksRead More
Veeam has released security updates to address a critical flaw impacting Service Provider Console (VSPC) that could pave the way for remote code execution on susceptible instances. The vulnerability, …
Veeam Issues Patch for Critical RCE Vulnerability in Service Provider ConsoleRead More
