WhatsApp has resolved a vulnerability in its “View Once” feature, designed to automatically delete photos and videos after they are opened. Introduced in 2021, this feature aimed to enhance user privacy. However, in August...
Experts at Mandiant have uncovered a novel method for bypassing browser isolation technologies, enabling attackers to establish command-and-control (C2) communications through the use of QR codes. This discovery highlights vulnerabilities within contemporary browser security...
This week, the U.S. House of Representatives is set to vote on the annual defense bill, which allocates over $3 billion to replace telecommunications equipment from Chinese companies Huawei and ZTE in American wireless...
The FBI has issued a warning about a new wave of cybercrimes driven by the use of generative artificial intelligence. Modern technology enables fraudsters to create increasingly convincing and large-scale social engineering schemes, making...
Microsoft has published an in-depth analysis of Adversary-in-the-Middle (AiTM) phishing attacks, which are becoming increasingly prevalent due to the widespread adoption of multi-factor authentication (MFA). The company underscored the critical need for advanced protective...
CYFIRMA has conducted an analysis of a malicious Android application designed to target high-value assets in South Asia. The sample was crafted using the SpyNote remote administration tool, suggesting that the targets may include...
The cryptocurrency exchange Rain.com, based in Bahrain, fell victim to a cyberattack in April, resulting in the theft of $16 million. An investigation revealed that the North Korean Lazarus Group orchestrated the attack, leveraging...
A critical vulnerability in the OpenWrt Attended Sysupgrade function, used to generate custom firmware images, could have been exploited to distribute malicious versions. OpenWrt, a Linux-based operating system designed for routers, access points, and...
Staff members of the U.S. Congress have been alerted to a phishing campaign in which unidentified individuals, impersonating government officials, are sending suspicious messages to lawmakers, urging them to download an encrypted messaging application....
According to a joint investigation by the Hungarian portal Direkt36 and the Belgian publication De Tijd, Hungary’s Intelligence Authority (IH) may have conducted surveillance on representatives of the European Anti-Fraud Office (OLAF) during their...
Acros Security has announced the discovery of a vulnerability in Microsoft Windows, affecting versions from Windows 7 onward, which could be exploited to steal user credentials. The flaw is associated with the NTLM (NT...
The Turla hacking group has adopted a sophisticated new strategy, leveraging the infrastructure of other cybercriminals to conduct covert operations. Research by Lumen reveals that the group infiltrated the networks of the Pakistani outfit...
