A new malware tool that enables cybercriminal actors to build malicious Windows shortcut (.LNK[1]) files has been spotted for sale on cybercrime forums. Dubbed Quantum …
Log4Shell Still Being Exploited to Hack VMWare Servers to Exfiltrate Sensitive Data
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), along with the Coast Guard Cyber Command (CGCYBER), on Thursday released a joint advisory warning of continued …
NSO Confirms Pegasus Spyware Used by at least 5 European Countries
The beleaguered Israeli surveillanceware vendor NSO Group this week admitted to the European Union lawmakers that its Pegasus tool was used by at least five …
Manual vs. SSPM: Research on What Streamlines SaaS Security Detection & Remediation
When it comes to keeping SaaS stacks secure, IT and security teams need to be able to streamline the detection and remediation of misconfigurations in …
Chinese Hackers Distributing SMS Bomber Tool with Malware Hidden Inside
A threat cluster with ties to a hacking group called Tropic Trooper has been spotted using a previously undocumented malware coded in Nim language to …
Critical PHP Vulnerability Exposes QNAP NAS Devices to Remote Attacks
QNAP, Taiwanese maker of network-attached storage (NAS) devices, on Wednesday said it’s in the process of fixing a critical three-year-old PHP vulnerability that could be …
Researchers Uncover Ways to Break the Encryption of ‘MEGA’ Cloud Storage Service
A new piece of research from academics at ETH Zurich has identified a number of critical security issues in the MEGA cloud storage service that …
Russian Hackers Exploiting Microsoft Follina Vulnerability Against Ukraine
The Computer Emergency Response Team of Ukraine (CERT-UA) has cautioned[1] of a new set of spear-phishing attacks exploiting the “Follina” flaw in the Windows operating …
Newly Discovered Magecart Infrastructure Reveals the Scale of Ongoing Campaign
A newly discovered Magecart skimming campaign has its roots in a previous attack activity going all the way back to November 2021. To that end, …
Europol Busts Phishing Gang Responsible for Millions in Losses
Europol on Tuesday announced the dismantling of an organized crime group that dabbled in phishing, fraud, scams, and money laundering activities. The cross-border operation, which …
