Mozilla has urgently released a security update for the Firefox browser to address a critical use-after-free (UAF) vulnerability that is already being actively exploited in attacks. The zero-day vulnerability, CVE-2024-9680 (CVSS score: 9.8), was...
Amid the increasing frequency of natural disasters, such as hurricanes “Helen,” “Milton,” and other catastrophic events, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about the heightened risk of cyberattacks...
Cybersecurity researcher Marcus Hutchins, known as MalwareTech, has released an automated scanner designed to detect vulnerable Linux and UNIX servers susceptible to attacks via the CUPS vulnerability, tracked as CVE-2024-47176. This tool can assist...
In 2024, the number of active ransomware groups surged by 30%, as confirmed by the annual report from Secureworks, published on October 8th. The report highlights the emergence of 31 new groups on the...
Researchers from GitGuardian have discovered that after a Docker image is deleted, its layers may continue to exist in the registry. These layers, referred to as “zombie layers,” can remain in registries for weeks...
Researchers at NetbyteSec have uncovered a new wave of activity by the LemonDuck malware, which exploits the EternalBlue vulnerability (CVE-2017-0144) to target Windows servers. This malicious software is particularly dangerous due to its ability...
Hackers claim that the company Dr.Web has fallen victim to a cyberattack, during which they allegedly breached its infrastructure and stole more than 10 TB of data. It is asserted that the attackers remained...
Medical institutions in the United States have fallen victim to a new ransomware known as Trinity. According to the U.S. Department of Health and Human Services, the tactics and methods employed by the group...
Microsoft has released a security update as part of its Patch Tuesday initiative, addressing 118 vulnerabilities, two of which are already being actively exploited by threat actors. Of the identified vulnerabilities, three are deemed...
Over the next five years, a significant increase in e-commerce fraud is anticipated due to the widespread use of artificial intelligence. According to a report by Juniper Research, the volume of fraud is projected...
Mark Sokolovsky has admitted his guilt in participating in the campaign to distribute the Raccoon Stealer malware. Sokolovsky and his accomplices distributed Raccoon Stealer under the MaaS (Malware-as-a-Service) model, offering the software for rent...
A new wave of attacks involving a modified variant of Mirai, named GorillaBot, has triggered over 300,000 DDoS attacks, impacting approximately 20,000 organizations globally in September of this year. In about 41% of cases,...
