Artificial Intelligence (AI) has become one of this decade’s defining technologies. From healthcare and finance to manufacturing and education, organizations increasingly rely on AI to automate repetitive tasks, uncover patterns …
Hackers Exploit Mitel VoIP Zero-Day in Likely Ransomware Attack
Ravie Lakshmanan A suspected ransomware intrusion against an unnamed target leveraged a Mitel VoIP appliance as an entry point to achieve remote code execution and gain initial access to the …
Google Says ISPs Helped Attackers Infect Targeted Smartphones with Hermit Spyware
Ravie Lakshmanan A week after it emerged that a sophisticated mobile spyware dubbed Hermit was used by the government of Kazakhstan within its borders, Google said it has notified Android …
Multiple Backdoored Python Libraries Caught Stealing AWS Secrets and Keys
Ravie Lakshmanan Researchers have discovered a number of malicious Python packages in the official third-party software repository that are engineered to exfiltrate AWS credentials and environment variables to a publicly …
State-Backed Hackers Using Ransomware as a Decoy for Cyber Espionage Attacks
A China-based advanced persistent threat (APT) group is possibly deploying short-lived ransomware families as a decoy to cover up the true operational and tactical objectives behind its campaigns. The activity …
New ‘Quantum’ Builder Lets Attackers Easily Create Malicious Windows Shortcuts
Ravie Lakshmanan A new malware tool that enables cybercriminal actors to build malicious Windows shortcut (.LNK) files has been spotted for sale on cybercrime forums. Dubbed Quantum Lnk Builder, the …
Critical PHP Vulnerability Exposes QNAP NAS Devices to Remote Attacks
QNAP, Taiwanese maker of network-attached storage (NAS) devices, on Wednesday said it’s in the process of fixing a critical three-year-old PHP vulnerability that could be abused to achieve remote code …
Researchers Uncover Ways to Break the Encryption of ‘MEGA’ Cloud Storage Service
Ravie Lakshmanan A new piece of research from academics at ETH Zurich has identified a number of critical security issues in the MEGA cloud storage service that could be leveraged …
Russian Hackers Exploiting Microsoft Follina Vulnerability Against Ukraine
The Computer Emergency Response Team of Ukraine (CERT-UA) has cautioned of a new set of spear-phishing attacks exploiting the “Follina” flaw in the Windows operating system to deploy password-stealing malware. …
Newly Discovered Magecart Infrastructure Reveals the Scale of Ongoing Campaign
A newly discovered Magecart skimming campaign has its roots in a previous attack activity going all the way back to November 2021. To that end, it has come to light …