Security software company Sophos has released a patch update for its firewall product after it was discovered that attackers were exploiting a new critical zero-day …
Hackers Using Fake CircleCI Notifications to Hack GitHub Accounts
GitHub has put out an advisory detailing what may be an ongoing phishing campaign targeting its users to steal credentials and two-factor authentication (2FA) codes …
Researchers Uncover New Metador APT Targeting Telcos, ISPs, and Universities
A previously undocumented threat actor of unknown origin has been linked to attacks targeting telecom, internet service providers, and universities across multiple countries in the …
CISA Warns of Hackers Exploiting Recent Zoho ManageEngine Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added[1] a recently disclosed security flaw in Zoho ManageEngine to its Known Exploited Vulnerabilities (KEV[2]) …
Firing Your Entire Cybersecurity Team? Are You Sure?
What on earth were they thinking? That’s what we – and other security experts – were wondering when content giant Patreon recently dismissed its entire …
Void Balaur Hackers-for-Hire Targeting Russian Businesses and Politics Entities
A hack-for-hire group that was first exposed in 2019[1] has expanded its focus to set its sights on entities with business or political ties to …
Fake Indian Banking Rewards Apps Targeting Android Users with Info-stealing Malware
An SMS-based phishing campaign is targeting customers of Indian banks with information-stealing malware that masquerades as a rewards application. The Microsoft 365 Defender Research Team …
Hackers Using Malicious OAuth Apps to Take Over Email Servers
Microsoft on Thursday warned of a consumer-facing attack that made use of rogue OAuth applications on compromised cloud tenants to ultimately seize control of Exchange …
Researchers Uncover Years-Long Mobile Spyware Campaign Targeting Uyghurs
A new wave of a mobile surveillance campaign has been observed targeting the Uyghur community as part of a long-standing spyware operation active since at …
Malicious NPM Package Caught Mimicking Material Tailwind CSS Package
A malicious NPM package has been found masquerading as the legitimate software library for Material Tailwind, once again indicating attempts on the part of threat …
