A recently discovered vulnerability in OATH Toolkit, identified as CVE-2024-47191, allows attackers to escalate their privileges to the level of a superuser. This vulnerability was found in the “Pluggable Authentication Module” (PAM), which is...
The American company American Water Works Co. Inc., which provides drinking water and wastewater services to over 14 million people, has reported a cyber intrusion into its computer networks and systems. The attack was...
Researchers at ESET have uncovered a series of cyberattacks on air-gapped systems within government organizations, conducted by the APT group GoldenJackal. This espionage campaign spanned from May 2022 to March 2024, employing specialized tools...
A serious vulnerability has been discovered in the Netherlands’ traffic light management system, allowing malicious actors to remotely control signals at thousands of intersections across the country. This revelation has raised significant concerns among...
The Japanese company Casio confirmed an unauthorized access to its network on October 5, which resulted in significant disruptions to its operations. An internal investigation revealed that the incident caused a system failure, affecting...
Qualcomm has released security updates to address nearly two dozen vulnerabilities, affecting both proprietary and open-source components. Among them, one stands out as being actively exploited in real-world attacks. This critical vulnerability, identified as...
MoneyGram has confirmed that a September cyberattack led to the exposure of customers’ personal data and transaction details to malicious actors. The incident occurred on September 20, after which the company’s website and mobile...
Cybereason has published a continuation of its research on the activities of the APT10 hacker group as part of the malicious operation Cuckoo Spear. This new installment examines the malware families NOOPDOOR and NOOPLDR...
A wave of disinformation advocating for the independence of Okinawa, Japan’s southernmost prefecture, is rapidly spreading across social media. According to Nikkei, around 200 fake accounts have been identified as the primary disseminators of...
A critical vulnerability has been identified in the Apache Avro Java SDK, allowing attackers to execute arbitrary code on vulnerable instances. The security flaw, registered as CVE-2024-47561, affects all software versions up to and...
A recent study by Vectra AI revealed growing dissatisfaction among SOC teams with current cybersecurity tools. Experts note that the abundance of disparate solutions and the lack of precise indicators of compromise make it...
Researchers from Gen Threat Labs have uncovered a sophisticated new rootkit, Snapekit, which targets the Arch Linux 6.10.2-arch1-1 system on the x86_64 architecture. Snapekit grants attackers unauthorized access to the system, enabling them to...
