During the monitored timespan, APT groups aligned with Russia have been observed to be heavily involved in cyber operations aimed at Ukraine. These operations have included deploying malicious software, such …
QNAP NAS Critical Vulnerability Let Attacker Inject Arbitrary Code
Updates for QNAP’s network-attached storage (NAS) systems have been released to address a critical security flaw that might allow arbitrary code injection. Customers of QNAP are being advised to update …
Cybercrime Groups Offering Six-Figure Salaries for IT Talents on The Dark Web
Increasingly, organized crime organizations are operating as businesses rather than criminal organizations, advertising jobs on the dark web with a number of advantages for members. A recent Kaspersky study found …
JD Sports Server Hacked – Over 10M Customer’s Information Stolen
A cyber attack that targeted JD Sports Fashion Plc (“JD Sports”) led to unauthorized access to a system that held customer information for some online orders done between November 2018 …
Doctor Paid $60,000 in Bitcoin to Hire Dark Web Hitmen
A former neonatologist received an 8-year prison sentence and was mandated to pay over $25,000 in compensation, along with a $100,000 fine. Ronald Craig Ilg, age 56, received an 8-year …
New Malware App on Google Play With Over 20 Million Downloads
Recently the cybersecurity experts at Dr. Web antivirus reported that over 20 million devices have recently downloaded a highly successful new category of activity-tracking apps from the Google Play Store. …
BIND DNS Software High-Severity Flaws Let Hackers Remotely Trigger DoS Attack
The Internet Systems Consortium (ISC) released security advisories on January 25, 2023, to address flaws in the DNS software suite BIND. A denial of service could occur if these vulnerabilities …
PlugX Malware Hides on Removable USB Devices to Infect Windows Machine
An investigation by cyber security experts at Palo Alto Network’s Unit 42 team recently revealed that a variation of PlugX malware has the ability to conceal harmful files on USB …
New Mimic Ransomware Abuses Windows Search Engine to Look Files for Encryption
A new strain of ransomware named Mimic has been uncovered recently by security experts at Trend Micro in June 2022. Mimic takes advantage of the APIs of the ‘Everything’ a …
Hackers Launching Millions of Attacks to Exploit Critical Realtek SDK Vulnerability
In the latter half of 2022, a significant number of cyber attacks utilizing a remote code execution vulnerability in Realtek Jungle SDK were reported. These attacks, numbering 134 million, aimed …