Mandiant has identified a new type of malware that operates solely within system memory and employs a sophisticated infection chain. The PEAKLIGHT loader decodes and deploys infostealers based on PowerShell. The infection chain begins...
PatchStack specialists have discovered a critical vulnerability in the LiteSpeed Cache plugin for WordPress, which could allow attackers to gain administrator privileges on a site. This flaw potentially affects over 5 million websites utilizing...
SolarWinds has released updates to address a critical vulnerability in its Web Help Desk (WHD) software. The issue, identified as CVE-2024-28987 and rated 9.1 on the CVSS scale, allows remote, unauthenticated users to gain...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding two critical vulnerabilities affecting Dahua IP cameras and related products. The issue was initially discovered in 2021. However, since researchers have...
On August 20th, GitHub released updates to address three security vulnerabilities in its Enterprise Server product, including a critical flaw that could allow attackers to gain site administrator privileges. The most severe vulnerability, identified...
On August 20th, in the American city of London, Kentucky, 39-year-old Somerset resident Jesse Kipf was sentenced to 81 months (6.75 years) in prison for computer fraud and identity theft. Kipf admitted to illegally...
Cybersecurity researchers have uncovered a new macOS malware named TodoSwift, which they believe shares characteristics with known malware used by North Korean hacker groups. Christopher Lopez, a security researcher at Kandji, notes that the...
The Federal Aviation Administration (FAA) of the United States plans to introduce new cybersecurity requirements for future aircraft and aviation equipment. According to a document published in the Federal Register, the new regulations will...
The major U.S. semiconductor manufacturer, Microchip Technology Incorporated, has fallen victim to a cyberattack that disrupted operations at several of its production facilities. As a result of the incident, some of the company’s plants...
The Insikt Group team has observed a significant surge in activity from the GreenCharlie group, targeting political and governmental entities in the United States. This group’s operations intersect with another Iranian group, APT42, and...
As a result of a cyberattack on a Taiwanese university, a previously unknown malware, tentatively named Backdoor.Msupedge, was uncovered. This program is distinguished by its unique method of communication with the C2 server via...
ESET specialists have uncovered a new phishing campaign targeting mobile banking users in the Czech Republic, Hungary, and Georgia. This campaign is distinguished by its use of PWA applications and WebAPK—technologies that enable attackers...
