Latest Cyber Security News
Cybersecurity researchers have uncovered a new cryptojacking campaign targeting the Docker Engine API with the goal of co-opting the instances to join a malicious Docker Swarm controlled by the threat …
New Cryptojacking Attack Targets Docker API to Create Malicious Swarm BotnetRead More
The U.S. Department of Justice (DoJ) has charged a 39-year-old U.K. national for perpetrating a hack-to-trade fraud scheme that netted him nearly $3.75 million in illegal profits. Robert Westbrook of …
U.K. Hacker Charged in $3.75 Million Insider Trading Scheme Using Hacked Executive EmailsRead More
Hold onto your hats, folks, because the cybersecurity world is anything but quiet! Last week, we dodged a bullet when we discovered vulnerabilities in CUPS that could've opened the door to remote …
THN Cybersecurity Recap: Last Week’s Top Threats and Trends (September 23-29)Read More
Critical security vulnerabilities have been disclosed in six different Automatic Tank Gauge (ATG) systems from five manufacturers that could expose them to remote attacks. "These vulnerabilities pose …
Critical Flaws in Tank Gauge Systems Expose Gas Stations to Remote AttacksRead More
Attackers are increasingly turning to session hijacking to get around widespread MFA adoption. The data supports this, as: 147,000 token replay attacks were detected by Microsoft in 2023, a 111% …
Session Hijacking 2.0 — The Latest Way That Attackers are Bypassing MFARead More
Imagine a sophisticated cyberattack cripples your organization's most critical productivity and collaboration tool — the platform you rely on for daily operations. In the blink of an eye, hackers …
A Hacker’s Era: Why Microsoft 365 Protection Reigns SupremeRead More
The Irish Data Protection Commission (DPC) has fined Meta €91 million ($101.56 million) as part of a probe into a security lapse in March 2019, when the company disclosed that it had mistakenly stored …
Cybersecurity researchers have discovered a malicious Android app on the Google Play Store that enabled the threat actors behind it to steal approximately $70,000 in cryptocurrency from victims over a …
Crypto Scam App Disguised as WalletConnect Steals $70K in Five-Month CampaignRead More
U.S. federal prosecutors on Friday unsealed criminal charges against three Iranian nationals who are allegedly employed with the Islamic Revolutionary Guard Corps (IRGC) for their targeting of current …
U.S. Charges Three Iranian Nationals for Election Interference and CybercrimesRead More
Progress Software has released another round of updates to address six security flaws in WhatsUp Gold, including two critical vulnerabilities. The issues, the company said, have been resolved in …
Progress Software Releases Patches for 6 Flaws in WhatsUp Gold – Patch NowRead More
A new set of security vulnerabilities has been disclosed in the OpenPrinting Common Unix Printing System (CUPS) on Linux systems that could permit remote command execution under certain conditions. "A …
Critical Linux CUPS Printing System Flaws Could Allow Remote Command ExecutionRead More
As security technology and threat awareness among organizations improves so do the adversaries who are adopting and relying on new techniques to maximize speed and impact while evading …
The threat actor known as Storm-0501 has targeted government, manufacturing, transportation, and law enforcement sectors in the U.S. to stage ransomware attacks. The multi-stage attack campaign is …
Microsoft Identifies Storm-0501 as Major Threat in Hybrid Cloud Ransomware AttacksRead More
In today's fast-evolving digital landscape, cybersecurity has become a cornerstone of organizational resilience. As cyber threats grow increasingly sophisticated, the demand for skilled cybersecurity …
Cybersecurity Certifications: The Gateway to Career AdvancementRead More
Russian-speaking users have been targeted as part of a new campaign distributing a commodity trojan called DCRat (aka DarkCrystal RAT) by means of a technique known as HTML smuggling. The development …
New HTML Smuggling Campaign Delivers DCRat Malware to Russian-Speaking UsersRead More
The U.S. government on Thursday sanctioned two cryptocurrency exchanges and unsealed an indictment against a Russian national for his alleged involvement in the operation of several money laundering …
U.S. Sanctions Two Crypto Exchanges for Facilitating Cybercrime and Money LaunderingRead More
A critical security flaw has been disclosed in the NVIDIA Container Toolkit that, if successfully exploited, could allow threat actors to break out of the confines of a container and gain full access …
Critical NVIDIA Container Toolkit Vulnerability Could Grant Full Host Access to AttackersRead More
Cybersecurity researchers have disclosed a set of now patched vulnerabilities in Kia vehicles that, if successfully exploited, could have allowed remote control over key functions simply by using only …
Hackers Could Have Remotely Controlled Kia Cars Using Only License PlatesRead More
Imagine trying to find a needle in a haystack, but the haystack is on fire, and there are a million other needles you also need to find. That's what dealing with security alerts can feel like. SIEM …
Overloaded with SIEM Alerts? Discover Effective Strategies in This Expert-Led WebinarRead More
Threat actors with ties to North Korea have been observed leveraging two new malware strains dubbed KLogEXE and FPSpy. The activity has been attributed to an adversary tracked as Kimsuky, which is …
N. Korean Hackers Deploy New KLogEXE and FPSpy Malware in Targeted AttacksRead More
