Category Archive

Ransomware groups are cybercriminal organizations that deploy malware to encrypt victims’ data, which helps render it inaccessible until a “ransom” is paid. The rise in ransomware incidents has significantly impacted organizations worldwide. Cybersecurity researchers at Cybereason recently discovered Beast ransomware …

Kaspersky has reported that nearly 10 million personal and corporate devices were compromised by data-stealing malware in 2023, marking a staggering 643% increase over the past three years. This alarming trend highlights the growing sophistication of cybercriminals and the increasing …

Security researchers have uncovered a new phishing campaign targeting users of the popular open-source Roundcube webmail software. Unknown threat actors are exploiting a now-patched cross-site scripting (XSS) vulnerability to steal login credentials from unsuspecting victims. The vulnerability, tracked as CVE-2024-37383, …

Hackers impersonated ESET, a prominent cybersecurity firm, to attack organizations with destructive wiper malware. The attack, which began on October 8, 2024, involved a phishing campaign that exploited ESET’s brand and infrastructure to deceive victims. The malicious actors sent emails …

A new AI tool named Vulnhuntr has been introduced, revolutionizing the way vulnerabilities are discovered in open-source projects. This innovative tool leverages the power of large language models (LLMs) to find and explain complex, multi-step vulnerabilities, including remotely exploitable 0-day …

The Internet Archive has fallen victim to another cyberattack, marking the third major security incident in October 2024. On October 20, hackers successfully exploited unrotated API tokens to gain unauthorized access to the organization’s Zendesk support platform, potentially compromising sensitive …

Cisco, has launched an investigation into a potential cyber security incident and has taken its public DevHub portal offline as a precautionary measure. On October 18, 2024, the company confirmed that it is looking into reports of an unauthorized actor …

Bitdefender Total Security has been found vulnerable to Man-in-the-Middle (MITM) attacks due to improper certificate validation in its HTTPS scanning functionality. This vulnerability, identified under multiple CVEs, poses a serious risk to users by potentially allowing attackers to intercept and …

In this era, mobile technology and smartphone are trendy terms often used. 90% of the population holds a smartphone in their hands. Their purpose is not only to “call” other parties but to use other features like Bluetooth, camera, Wi-Fi, …

WebRTC (Web Real-Time Communication) is an open-source project that facilitates real-time audio, video, and data sharing directly between web browsers and mobile applications without the need for plugins. Its integration into HTML5 and support across major browsers make it a …