Cisco Talos experts have identified a new wave of attacks by the UAT-5647 group (RomCom), targeting Ukrainian governmental bodies and unnamed Polish organizations since late 2023. The latest campaign features an updated version of...
The new tool Vulnhuntr marks a breakthrough in vulnerability discovery within open-source projects. Developed by Protect AI, it harnesses the power of large language models (LLMs) to detect complex, multi-stage vulnerabilities, including remote zero-day...
Microsoft is employing a novel strategy to combat phishing by creating convincing honeypots in the form of fake Azure tenants to lure cybercriminals and gather data on their activities. With the intelligence gathered, the...
Following a recent cyberattack targeting Ambient Finance, a decentralized exchange (DEX), the platform reassured users that their assets and smart contracts remain secure. Nevertheless, Ambient Finance issued a warning, advising users to refrain from...
A critical vulnerability has been identified in SolarWinds Web Help Desk, enabling attackers to remotely execute arbitrary code on affected systems (RCE). Registered as CVE-2024-28988, the issue was uncovered by experts from the Zero...
Recent media reports suggesting that Chinese scientists have broken “military-grade encryption” using quantum computers have sparked widespread resonance and speculation about the future of cybersecurity. However, a detailed analysis has revealed that such claims...
In the latest ClickFix campaigns, cybercriminals lure users onto counterfeit Google Meet pages, where they are presented with fake connection errors designed to spread malware capable of infecting both Windows and macOS systems. ClickFix...
Cybersecurity researchers from Group-IB have unveiled new details about the hacker group Cicada3301, which operates under the RaaS (Ransomware-as-a-Service) model. The specialists gained access to the cyber gang’s affiliate panel on the dark web,...
Microsoft has discovered and disclosed a vulnerability in Apple’s Transparency, Consent, and Control (TCC) framework used in macOS. The vulnerability, codenamed HM Surf and identified as CVE-2024-44133, allows the circumvention of user privacy settings...
Google Mandiant analysts have issued a warning about a growing trend: hackers are increasingly discovering and exploiting zero-day vulnerabilities in software. The experts examined 138 vulnerabilities identified in 2023 that were actively used in...
The Internet Archive has once again found itself at the center of a cyber incident. Malicious actors claimed to have gained access to Zendesk tokens—the customer support platform utilized by the Archive to handle...
Cyprus successfully thwarted a cyberattack on the government portal, which aimed to block access to the state’s online services. This incident was part of a series of attacks targeting both public and private entities...
