Researchers at Sucuri uncovered a new attack targeting websites running on the Magento platform. Cybercriminals are deploying malicious JavaScript to steal data from the payment pages of online stores. This attack is particularly insidious...
Researchers from Stony Brook University have published the results of a study uncovering a new form of cryptocurrency fraud. The method, termed “typosquatting,” exploits human typographical errors to divert users’ funds into wallets controlled...
A critical vulnerability has been discovered in the popular open-source file-sharing application ProjectSend, which, according to VulnCheck, is being actively exploited by malicious actors. This issue affects servers running outdated software, enabling hackers to...
One of the most enigmatic figures in the world of cybercrime, the hacker known as Kiberphant0m, has become the subject of international investigations. His actions have been linked to numerous high-profile data breaches, yet...
The American telecommunications giant T-Mobile has disclosed recent attempts by malicious actors to breach its systems. In a statement, the company’s Chief Security Officer, Jeff Simon, clarified that the attacks were executed via a...
The city of Hoboken, New Jersey, suspended the operations of all governmental institutions on the morning of November 27 following a ransomware attack that caused substantial disruptions. Reports detailing the aftermath of the attack...
The service Zello has urged its users to change their account passwords due to a potential security threat. Zello, which boasts a user base of 140 million, is a mobile application offering push-to-talk communication....
Researchers at ESET have uncovered a previously unknown vulnerability in Mozilla products, which has been exploited in real-world attacks. This marks the second such incident in recent months; earlier, the CVE-2023-36884 vulnerability in Microsoft...
An Ontario court has dismissed the final appeal by Canadian medical company LifeLabs Inc., bringing an end to its four-year effort to suppress a report on the 2019 data breach that compromised the personal...
Australia has enacted its first standalone Cybersecurity Act, expanding government powers, mandating reporting of ransom payments, and strengthening regulations for Internet of Things (IoT) devices. This legislation, part of the Cybersecurity Strategy 2023–2030, has...
AmberWolf researchers have uncovered vulnerabilities in the VPN clients SonicWall NetExtender and Palo Alto Networks GlobalProtect, collectively named NachoVPN. These flaws enable attackers to deploy malicious updates when clients connect to rogue VPN servers,...
Cybersecurity researchers have announced the creation of the first UEFI bootkit designed for Linux systems. Dubbed Bootkitty, this tool is regarded as a proof-of-concept (PoC) and, according to experts, has not yet been observed...
