The ResolverRAT Campaign Aims at Healthcare and Pharma through Phishing and DLL Side-Loading
A group of security analysts has unearthed a sophisticated remote access trojan named ResolverRAT, which is being utilized in campaigns...
researchers
Real-Time Validation of Victim Emails in Phishing Campaigns to Verify Accounts Before Stealing Credentials
Experts in cybersecurity are highlighting an emerging form of phishing fraud that confirms the legitimacy of victim credentials by linking...
Deceptive Websites Hosting SpyNote, BadBazaar, MOONSHINE Malicious Software Aimed at Android and iOS Users with Counterfeit Applications
Recent investigations by cybersecurity analysts have revealed that malicious entities are crafting fraudulent online platforms residing on freshly registered domains...
CVE-2024-0132 Vulnerability Remains Open for Container Escapes due to Incomplete NVIDIA Toolkit Patch
A team of cybersecurity experts has published a report on an inadequate fix for a previously identified security issue affecting...
AkiraBot Focuses on 420,000 Websites Using OpenAI-Created Junk Emails, Evading CAPTCHA Safeguards
Details about a platform powered by artificial intelligence (AI) named AkiraBot have been revealed, which is employed to flood website...
A Patch Has Been Deployed for the Amazon EC2 SSM Agent Vulnerability That Allows Privilege Escalation through Path Traversal
Details of a security vulnerability in the Amazon EC2 Simple Systems Manager (SSM) Agent have been revealed by cybersecurity experts....
Deceptive Python Libraries on PyPI Downloaded Over 39,000 Times, Pilfer Confidential Data
A group of cybersecurity analysts have detected deceitful modules within the Python Package Index (PyPI) archive that have been created...
Google Fixes Swift Exchange Weakness Allowing Quiet Document Transfers Without Permission
A group of online safety professionals have revealed information about a fresh loophole affecting Google's Swift Exchange record exchange tool...
Google Resolved Cloud Run Vulnerability Preventing Unauthorized Image Access through IAM Abuse
A group of cybersecurity experts have revealed information about a recently fixed vulnerability in Google Cloud Platform (GCP) Cloud Run...
Rebel Faction Utilizes SSH Brute-Force Technique to Spread Cryptojacking Malware on Linux Systems
Experts in the field of cybersecurity have revealed details about a "self-replicating" botnet designed for mining cryptocurrencies called Outlaw (also...
Recent Malicious Loaders Employ Call Stack Spoofing, GitHub C2, and .NET Reactor for Camouflage
A team of experts in cybersecurity has unearthed a revised edition of a malicious loader known as Hijack Loader that...
Around 24,000 IP Addresses Aim at PAN-OS GlobalProtect Through Coordinated Login Scan Operation
Cybersecurity experts caution about an increase in questionable login scanning operations directed at Palo Alto Networks PAN-OS GlobalProtect gateways, with...
China-Connected Earth Alux Exploits VARGEIT and COBEACON in Complex Cyber Breaches
Recent findings from cybersecurity experts have revealed a fresh threat group associated with China identified as Earth Alux. This group...
A Fresh Android Trojan Crocodilus Exploits Accessibility to Swipe Banking and Crypto Credentials
A team of cybersecurity experts unearthed a novel Android banking malware named Crocodilus which specifically aims at users in Spain...
A Study Reveals 46 Essential Weaknesses in Solar Converters From Sungrow, Growatt, and SMA
A team of cybersecurity experts has exposed 46 fresh vulnerabilities in goods from three solar converter suppliers: Sungrow, Growatt, and...
