The Knownsec 404 team has uncovered a vast network operated by the hosting provider ELITETEAM, which supplies infrastructure for cybercriminal activities. These services enable malicious actors to evade legal oversight while supporting malware operations,...
The United States Department of the Treasury has imposed sanctions on the Chinese company Sichuan Silence and its employee for orchestrating ransomware attacks using the Ragnarok malware. These 2020 attacks targeted critical infrastructure in...
Ivanti has released security updates addressing several critical vulnerabilities in its Cloud Services Application (CSA) and Connect Secure products. These flaws could enable privilege escalation and arbitrary code execution. The most severe of these...
A vulnerability in the widely-used WordPress plugin WPForms, installed on over 6 million websites, allows users with “subscriber” privileges to initiate arbitrary Stripe refunds or cancel paid subscriptions. Stripe, a renowned platform for processing...
Microsoft has released the final security updates of 2024, addressing 72 vulnerabilities, including one that is actively exploited. Among these, 17 are classified as critical, 54 as important, and one as moderate in severity....
Fog Data Science leverages geolocation data to assist law enforcement in tracking individuals, including visits to specific addresses such as medical offices, according to a document obtained by 404 Media. The document, titled Project...
A cybercriminal group, allegedly linked to China, orchestrated digital attacks targeting major IT companies in Southern Europe. The campaign, dubbed “Operation Digital Eye,” was detected between late June and mid-July 2024. SentinelOne and Tinexta...
Recently, the cybersecurity community has unveiled several innovative tools designed to enhance the security of various platforms and applications. These advancements address a broad range of objectives, from analyzing browser extensions to auditing operating...
A vulnerability was discovered in the DeepSeek chatbot, allowing attackers to hijack user accounts through query injection attacks. Security researcher Johann Rechberger identified that specific commands entered into the chat could trigger the execution...
A recent study has revealed that emerging domain zones, such as “.top” and “.shop,” have become favored tools for fraudsters and cybercriminals. The report by Interisle Consulting Group analyzed data from 16 million cyberattacks...
A group of European researchers has uncovered a vulnerability in AMD’s Secure Encrypted Virtualization (SEV) mechanism, designed to protect virtual machines. The experts demonstrated that the system’s defenses could be bypassed using equipment costing...
Chinese cyber spies have been recording telephone conversations of high-ranking American politicians, according to Anne Neuberger, Deputy National Security Advisor for Cybersecurity and Emerging Technologies in the United States. Neuberger emphasized that Operation Salt...
