Tenable experts have released a proof-of-concept (PoC) exploit for a critical vulnerability in Progress WhatsUp Gold, enabling remote code execution (RCE) on affected devices. The RCE vulnerability, CVE-2024-8785 (CVSS score: 9.8), stems from insufficient...
In 2024, Orange Cyberdefense, a subsidiary of the French telecommunications giant Orange, reported a significant surge in cyberattacks targeting healthcare institutions, industrial enterprises, and small- to medium-sized businesses. These attacks predominantly aimed to extort...
Microsoft reports that the Chinese hacking group Storm-0227 launched attacks on U.S. critical infrastructure and government agencies on December 5. The group, active since January, continues its operations to this day. Storm-0227’s activities overlap...
Experts at Socket have reported a significant supply chain attack targeting the popular library @solana/web3.js, available via npm. Malicious versions 1.95.6 and 1.95.7, containing code designed to steal private keys, were used to drain...
Two American subsidiaries of Stoli Group—Stoli Group USA and Kentucky Owl (KO)—have filed for bankruptcy. According to documents submitted on November 29, 2024, the companies’ combined debt amounts to $84 million. Among the primary...
A teenager from California, suspected of involvement in hacking activities, was arrested last month and is believed to be a member of the notorious cybercriminal group Scattered Spider. According to Bloomberg, on October 30,...
Kash Patel, Donald Trump’s nominee for FBI Director, was recently informed by the bureau that he had become a target of Iranian hackers, according to two sources familiar with the matter who spoke to...
In recent weeks, there has been a noticeable surge in low-quality security reports submitted to open-source projects. At first glance, these reports may appear to highlight genuine threats, yet they often require significant time...
Japan’s CERT has issued a warning regarding hackers actively exploiting zero-day vulnerabilities in I-O Data routers, enabling them to modify device settings, execute commands, and disable firewalls. The three vulnerabilities, disclosed on November 13,...
Cybersecurity agencies from the United States, Australia, Canada, New Zealand, and the United Kingdom have issued a joint advisory regarding espionage activities by Chinese hackers. The attackers have infiltrated the networks of leading global...
In Germany, the administrator of the largest criminal platform, Crimenetwork, has been apprehended. During the search, authorities seized evidence, luxury vehicles, and cryptocurrency assets valued at approximately €1 million. The platform’s servers have been...
The research team at ThreatBook has uncovered the use of fraudulent websites by the APT35 hacking group, aimed at deploying malware onto the devices of their victims. APT35, also known as Magic Hound, Cobalt...
