On July 11, a sophisticated attack on domain registries disrupted numerous decentralized finance (DeFi) applications. Users were massively redirected to malicious websites, causing alarm among both users and DeFi protocol developers. Blockchain security platform...
Google’s parent company, Alphabet, plans to acquire the cloud cybersecurity firm Wiz for $23 billion. Founded in January 2020, Wiz has achieved this remarkable valuation in just four years. Wiz’s primary strength lies in...
Recently, the American telecommunications giant AT&T reported another significant data breach involving its customers. Malefactors gained access to information on nearly all AT&T wireless subscribers, as well as customers of mobile virtual network operators...
Specialists from Palo Alto Networks’ Unit 42 have uncovered the DarkGate campaign, which leverages Samba file resources to disseminate a trojan. This activity was observed in March and April 2024, when DarkGate utilized publicly...
Recently, Squarespace disclosed a severe breach affecting multiple domain registrations following its acquisition of Google Domains’ customer base. The breach, discovered on or around July 10, 2024, has left numerous domains compromised by an...
The Mail Transfer Agent (MTA) is primarily responsible for forwarding emails over the network. Exim, which is open-source and free, is a typical and widely used MTA. Exim is designed for Unix and Unix-like...
The Apache Software Foundation has issued a security advisory regarding a vulnerability (CVE-2024-36522) impacting Apache Wicket, a widely used Java web application framework. The vulnerability, stemming from improper input validation in the XSLTResourceStream.java component,...
For over a year, malicious actors exploited a vulnerability in Windows that allowed the execution of malicious code before Microsoft finally addressed the issue. The vulnerability, identified as CVE-2024-38112, was present in both Windows...
Apple once again warns iPhone users about the threat of spyware. The company has sent notifications to device owners in 98 countries, alerting them to potential attacks by mercenary spyware. This marks the second...
Experts at Silent Push assert that the FIN7 group has resumed its activities after the United States declared the group’s dissolution in 2021. In 2021, the United States announced that FIN7 no longer existed...
Malefactors are increasingly utilizing Telegram as a command-and-control (C2) server for malware. A recent study by Positive Technologies identified over a thousand Indonesian-origin Telegram bots employed to intercept one-time passwords (OTPs) necessary for accessing...
The China-linked group APT41 is suspected of using an advanced version of the infamous StealthVector malware to deliver a new backdoor named MoonWalk. This new variant of StealthVector has been code-named DodgeBox by Zscaler...
