Category Archive

Microsoft has reported a significant increase in cyberattacks targeting internet-exposed, poorly secured operational technology (OT) devices. These attacks have particularly focused on the United States’ water and wastewater systems (WWS). Various nation-backed actors, including the IRGC-affiliated “CyberAv3ngers” and pro-Russian hacktivists, …

The RedTail cryptocurrency mining malware has been observed exploiting a critical zero-day vulnerability in Palo Alto Networks’ firewall software, PAN-OS. This vulnerability, tracked as CVE-2024-3400, has a CVSS score of 10.0, indicating its severity. The flaw allows unauthenticated attackers to …

ANY.RUN sandbox has analyzed a new strain of Meterpreter backdoor malware that leverages sophisticated steganography techniques to conceal its malicious payload within an image file. The malware, dubbed “Meterpreter Backdoor,” is designed to evade detection by hiding its code in …

Hackers target and steal personal and financial data for fraud and other illicit purposes. They also sell the data on the black market for profit.  They exploit this information to gain unauthorized access to bank accounts, credit cards, and other …

Between May 27 and 29, 2024, a coordinated effort known as Operation Endgame, led by Europol, targeted a range of malicious software droppers, including IcedID, SystemBC, Pikabot, Smokeloader, Bumblebee, and Trickbot. This operation aimed to disrupt criminal services by arresting …

Cybersecurity researchers have released a Proof-of-Concept (PoC) exploit for a recently disclosed information disclosure vulnerability in Microsoft Edge, the Chromium-based web browser. The vulnerability, tracked as CVE-2024-30056, could allow unauthorized actors to access private user information, raising concerns about data …