Cybersecurity researchers have uncovered as many as 11 malicious Python packages that have been cumulatively downloaded more than 41,000 times from the Python Package Index (PyPI) repository, and could be exploited to steal Discord access …
11 Malicious PyPI Python Libraries Caught Stealing Discord Tokens and Installing Shells Read More »
The U.S. Federal Bureau of Investigation (FBI) has disclosed that an unidentified threat actor has been exploiting a previously unknown weakness in the FatPipe MPVPN networking devices at least since May 2021 to obtain an …
FBI Issues Flash Alert on Actively Exploited FatPipe VPN Zero-Day Bug Read More »
Today’s businesses run on data. They collect it from customers at every interaction, and they use it to improve efficiency, increase their agility, and provide higher levels of service. But it’s becoming painfully obvious that …
A Simple 5-Step Framework to Minimize the Risk of a Data Breach Read More »
The clearnet and dark web payment portals operated by the Conti ransomware group have gone down in what appears to be an attempt to shift to new infrastructure after details about the gang’s inner workings …
Experts Expose Secrets of Conti Ransomware Group That Made 25 Million from Victims Read More »
A malicious campaign has been found leveraging a technique called domain fronting to hide command-and-control traffic by leveraging a legitimate domain owned by the Myanmar government to route communications to an attacker-controlled server with the …
Hackers Targeting Myanmar Use Domain Fronting to Hide Malicious Activities Read More »
Meta, the company formerly known as Facebook, announced Tuesday that it took action against four separate malicious cyber groups from Pakistan and Syria who were found targeting people in Afghanistan, as well as journalists, humanitarian …
Facebook Bans Pakistani and Syrian Hacker Groups for Abusing its Platform Read More »
A new politically-motivated hacker group named “Moses Staff” has been linked to a wave of targeted attacks targeting Israeli organizations since September 2021 with the goal of plundering and leaking sensitive information prior to encrypting …
New ‘Moses Staff’ Hacker Group Targets Israeli Companies With Destructive Attacks Read More »
Cybersecurity researchers on Monday took the wraps off a new Android trojan that takes advantage of accessibility features on the devices to siphon credentials from banking and cryptocurrency services in Italy, the U.K., and the …
SharkBot — A New Android Trojan Stealing Banking and Cryptocurrency Accounts Read More »
Lazarus, the North Korea-affiliated state-sponsored group, is attempting to once again target security researchers with backdoors and remote access trojans using a trojanized pirated version of the popular IDA Pro reverse engineering software. The findings …
North Korean Hackers Target Cybersecurity Researchers with Trojanized IDA Pro Read More »
Whether it’s Office 365, Salesforce, Slack, GitHub or Zoom, all SaaS apps include a host of security features designed to protect the business and its data. The job of ensuring these apps’ security settings are …
A state-sponsored threat actor allegedly affiliated with Iran has been linked to a series of targeted attacks aimed at internet service providers (ISPs) and telecommunication operators in Israel, Morocco, Tunisia, and Saudi Arabia, as well …
Iran’s Lyceum Hackers Target Telecoms, ISPs in Israel, Saudi Arabia, and Africa Read More »
A new zero-day vulnerability has been disclosed in Palo Alto Networks GlobalProtect VPN that could be abused by an unauthenticated network-based attacker to execute arbitrary code on affected devices with root user privileges. Tracked as …
Palo Alto Warns of Zero-Day Bug in Firewalls Using GlobalProtect Portal VPN Read More »