Category Archive

A critical vulnerability in the widely used MOVEit file transfer software has led to one of the most extensive corporate data leaks in recent history, affecting millions of employees across 25 major organizations. The breach, attributed to a zero-day vulnerability …

Modern security tools continue to evolve, improving their ability to protect organizations from cyber threats. Despite these advances, bad actors still occasionally find ways to infiltrate networks and endpoints. Therefore, it is critical for security teams to not only have …

Hackers weaponize Excel documents primarily due to their widespread use and the inherent vulnerabilities within the software. With Microsoft blocking VBA macros by default, hackers have shifted to exploiting “.XLL” files as a means to deliver malware. Fortinet researchers recently …

Researchers discovered five malicious npm packages that target Roblox developers, spreading malware to steal credentials and personal information. These packages, which include autoadv, ro.dll, node-dlls, and two rolimons-api versions, were designed to imitate legitimate modules that are often utilized by …

SEO poisoning is a malicious tactic where threat actors manipulate search engine results to promote harmful websites by exploiting trending keywords. This approach not only risks personal information but can also damage the reputations of legitimate businesses. Cybersecurity researchers at …

Decentralized finance (DeFi) protocol DeltaPrime has fallen victim to yet another major exploit. Hackers siphoned off approximately $4.8 million worth of ARB and AVAX tokens. The attack targeted DeltaPrime’s Avalanche and Arbitrum networks. This marks the protocol’s second significant breach this year. DeltaPrime Exploited Blockchain security …

A newly disclosed security vulnerability, CVE-2024-47295, has been found in several Epson devices, including printers, scanners, and network interface products. The flaw allows attackers to exploit a critical configuration oversight that could result in unauthorized control of affected devices. Vulnerability …

Cybersecurity researchers have uncovered a resurgence of the Fakebat malware loader being distributed through malicious Google Ads. After a months-long break, Fakebat has resurfaced, focusing on users who are looking for popular productivity software. Malwarebytes detected a malicious Google ad …

Palo Alto Networks has issued an urgent warning about a potential critical remote code execution (RCE) vulnerability affecting the management interface of their PAN-OS next-generation firewalls. The cybersecurity company has advised customers to take immediate protective measures while investigating the …

A critical security flaw in Microsoft Bookings has been uncovered. This flaw, inherent in the default configuration of Microsoft Bookings, potentially allows attackers to create unauthorized Entra (formerly Azure AD) accounts and obtain fraudulent certificates. This vulnerability poses significant risks …