Category Archive

A sophisticated China-linked cyber espionage group, known as Velvet Ant, has been discovered exploiting a zero-day vulnerability in Cisco NX-OS Software to deploy custom malware on network switches. The vulnerability, tracked as CVE-2024-20399, was identified by cybersecurity firm Sygnia during …

On August 21, 2024, McDonald’s official Instagram account was hacked, resulting in a cryptocurrency scam that made the hackers around $700,000. The hackers exploited the fast-food giant’s massive social media following to promote a fraudulent cryptocurrency called “GRIMACE,” named after …

Hackers execute several illicit activities with the help of Android malware, and they target Android due to its widespread use and its open ecosystem.  This makes it much easier for the hackers to perform their illicit activities like distributing malicious …

A successful brute-force attack on a PostgreSQL database exploited a feature that allowed command execution, where the attacker created a superuser role, dropped files to eliminate competition and gain persistence, and ultimately deployed cryptocurrency miners.  The attack demonstrates the severe …

Cisco Talos has uncovered a new remote access trojan (RAT) family, which is XenoRAT-based malware that is under active development by a North Korean nexus cluster named “UAT-5394.”  While the new malware is dubbed “MoonPeak,” and the analysis reveals links …

Hackers have leaked footage and clips from several unreleased Netflix anime shows, including full episodes, online. The content was stolen from one of Netflix’s post-production partners, causing a stir in the entertainment industry. Details of the Breach The leaked content …

The Federal Aviation Administration (FAA) has proposed new cybersecurity regulations for transport category airplanes, engines, and propellers. This initiative aims to address the growing threats posed by unauthorized electronic interactions, ensuring the safety and integrity of modern aircraft systems. The …

The latest update to GitHub Enterprise Server, version 3.13.3, addressed a critical vulnerability (CVE-2024-6800), allowing attackers to forge SAML responses and gain unauthorized access. Enterprise Server 3.13.3 introduces several enhancements aimed at improving user experience and system management Users can …

Russian users of popular messaging apps Telegram and WhatsApp experienced significant disruptions, which were attributed to a distributed denial-of-service (DDoS) attack. The state communications monitoring service confirmed the incident, stating that the attack had been successfully repelled and services were …

A critical zero-day vulnerability has been identified in the Arcadyan FMIMG51AX000J model and potentially other devices affiliated with the WiFi Alliance. This flaw allows remote attackers to execute arbitrary code. An independent security researcher working with SSD Secure Disclosure identified …