Cybercriminals have begun actively exploiting a vulnerability in the widely used software Veeam Backup & Replication to spread a new ransomware known as “Frag.” The vulnerability, identified as CVE-2024-40711, enables remote code execution without...
Block Inc., the parent company of Cash App and Cash App Investing, has agreed to pay $15 million to users as part of a class-action settlement. The case stemmed from an incident in 2022...
A recent investigation by Kaspersky Lab has uncovered a new ransomware family, Ymir, actively deployed by cybercriminals. This malware employs advanced evasion techniques, executing operations in memory through functions such as malloc and memmove....
Stop & Shop supermarkets in New England (a historic region in the United States) have encountered significant operational disruptions due to a cyberattack, causing delays in pharmacy services and electronic shopping platforms. The parent...
Over 60,000 D-Link data storage devices, which have reached their end of life (EoL), have been rendered vulnerable due to a critical Command Injection flaw. This vulnerability, designated CVE-2024-10914, carries a severe CVSS rating...
In late October, Tor administrators, relay operators, and even the Tor Project team began receiving complaints alleging port scanning activity originating from their servers. As later investigations revealed, attackers had been using fake IP...
In August, Halliburton fell victim to a cyberattack, compounded by severe storms in the Gulf of Mexico, impacting the company’s revenue. According to CEO Jeff Miller, the incident resulted in a $0.20 per share...
Cybercriminals continue to seek innovative methods to bypass security measures, with one of their latest tactics being the merging of ZIP archives. This approach enables the concealment of malicious files from antivirus software and...
On November 10, the Israeli payment processing company Hyp fell victim to a cyberattack, which left numerous customers unable to use their bank cards for purchases in stores and gas stations via terminals for...
North Korean hackers have launched a new campaign called “Hidden Risk,” targeting cryptocurrency companies through malware disguised as ordinary documents. According to SentinelLabs, the attack is orchestrated by BlueNoroff, a subgroup of the notorious...
Cybersecurity expert Jeremiah Fowler uncovered an unsecured database containing sensitive information on approximately 200,000 professionals seeking employment in the technology sector. The breach is linked to Alltech Consulting Services, a firm specializing in the...
Microsoft Bookings, one of the popular features in Microsoft 365, poses a potential security risk for companies, as it allows users to create Entra accounts without requiring administrative privileges. According to Cyberis, this capability...
