China-Connected Earth Alux Exploits VARGEIT and COBEACON in Complex Cyber Breaches
Recent findings from cybersecurity experts have revealed a fresh threat group associated with China identified as Earth Alux. This group...
Month: April 2025
Latest Case Study: Worldwide Merchant Unintentionally Leaks CSRF Credentials to Facebook
Are your safety keys genuinely foolproof? Witness how Reflectiz assisted a major seller in unveiling a hidden Facebook tracker monitoring...
Qilin partners target MSP ScreenConnect admin through spear-phishing, impacting downstream clients
In the final days of January 2025, an administrator of a Managed Service Provider (MSP) received a meticulously crafted phishing...
French Regulator Imposes €150 Million Penalty on Apple for Biased ATT Consent Tactics
A financial penalty of €150 million ($162 million) has been levied on Apple by the competition authority of France due...
Multiple Workarounds in Ubuntu detected
The Qualys Threat Research Unit (TRU) has disclosed three workaround techniques in Ubuntu related to unprivileged user namespace restrictions. In...
Multiple Workarounds in Ubuntu detected
The Research Unit of Qualys Threat (TRU) has revealed three workarounds in Ubuntu's limitations for unprivileged users. Qualys verified that...
Russian Cybercriminals Utilize CVE-2025-26633 through MSC EvilTwin for Distributing SilentPrism and DarkWisp
Those responsible for exploiting a newly-fixed security flaw in Microsoft Windows are now circulating two fresh covert means of access...
WordPress mu-Plugins Vulnerable to Spam Injections and Site Image Hijacking by Cybercriminals
Malicious actors are leveraging the "mu-plugins" folder within WordPress websites to hide harmful scripts, aiming to sustain continuous unauthorized entry...
⚡ Weekly Summary: Chrome Zero-Day, IngressNightmare, Solar Vulnerabilities, DNS Maneuvers, and Additional Updates
On a weekly basis, an individual somewhere makes a mistake—and malicious actors find a way in. Whether it's a setting...
5 Significant Vulnerabilities in AWS You Need to Address
When utilizing AWS, it might be tempting to believe your cloud security is managed adequately - however, this assumption can...
Provocation by Gamaredon Affiliated with Russia to Disseminate Remcos RAT in Ukraine
Various organizations in Ukraine have fallen victim to a phishing scheme aimed at propagating the remote access trojan known as...
Diving Deeper into the Covert Arsenal of Earth Alux: An Intimate Examination of its Cutting-edge Strategies
VirTest enables users to precisely identify codes in their tools responsible for triggering file-based detections from security software and then...
