Category Archive

Hackers often target NPM packages to inject malicious code into widely used libraries, enabling them to reach a massive developer and application base. Through such exploitation, threat actors can steal sensitive information, such as source code and configuration files, to …

Microsoft discovered a North Korean threat actor exploiting a zero-day vulnerability in the Chromium browser, identified as CVE-2024-7971. This vulnerability, a type confusion flaw in the V8 JavaScript and WebAssembly engine, allowed for remote code execution (RCE) in the sandboxed …

Data protection is safeguarding important information from corruption, compromise, or loss. It is important because data is often valuable and sensitive, and its protection ensures that it is only accessed and used by those authorized to do so. It also …

Global Secure Layer (GSL) successfully mitigated the most considerable packet rate of the Distributed Denial of Service (DDoS) attack ever recorded. The attack, aimed at a Minecraft gaming server, reached a staggering peak of 3.15 billion packets per second (Gpps) …

A new ransomware group, Cicada3301, has emerged, targeting Windows and Linux/ESXi hosts with sophisticated encryption techniques. First observed in June 2024, the group has quickly gained popularity by listing multiple victims on their data leak site. Rust was used to …

The events surrounding Pavel Durov’s arrest on 24 August 2024 due to Telegram’s suspected operational crimes worsened discussions on topics such as digital privacy, end-to-end encryption, and the responsibility of online platforms. This case also demonstrates the clash between the …

In the ever-evolving landscape of cybersecurity, malware obfuscation techniques are advancing rapidly. As security measures improve, so do malicious actors’ methods to bypass them. This guide explores cutting-edge obfuscation tactics, explaining how they work and offering detection and mitigation strategies. …

Researchers discovered that a malicious Chrome extension dubbed “Bull Checker” had been targeting people on multiple Solana-related subreddits. The Jupiter exchange issued a warning, following complaints from multiple Solana decentralized finance customers of their cryptocurrency wallets being drained. With this …

Threat actors often target the popular code repository platform “GitHub” due to it’s wide use, and features that this platform offers. Cybersecurity analysts at Gen DIgital recently discovered that threat actors are exploiting GitHub to propagate an information stealer, ‘Lumma.’  …

As of August 2024, Iran-based cyber actors continue to exploit U.S. and foreign organizations across multiple sectors. The primary sectors targeted are education, finance, healthcare, defense, and local government entities. Not only that even some of the countries include Israel, …