Tag Archive

In the labyrinth of cyber threats that define the digital landscape, 2023 has witnessed the resurgence of a particularly pernicious foe — malicious advertisements, colloquially known as “malvertising.”  This nefarious stratagem has set its sights on businesses, executing a sophisticated …

The Cyber-Extortion Trinity—the BianLian, White Rabbit, and Mario ransomware gangs—was observed by researchers working together to launch a joint extortion campaign against publicly traded financial services companies. Although these joint ransomware attacks are uncommon, they may grow more often due to Initial …

Hackers exploit QNAP devices because they often have known vulnerabilities or misconfigurations that can be exploited for unauthorized access. Besides this, QNAP devices store valuable data, which makes them lucrative targets for threat actors seeking to:- Compromise sensitive information Deploy …

MongoDB has experienced a security incident in which unauthorized access to its corporate systems was identified. However, the company confirmed that there was no evidence of access to any customer’s system logs. MongoDB is currently investigating the incident with authorities …

In the intricate tapestry of the cyber landscape, Shakeeb Ahmed’s saga transcends the ordinary, featuring a downfall unparalleled in its significance—the inaugural conviction for hacking a smart contract.  A tale of ambition, greed, and the inexorable hand of justice unfolds …

Hackers are taking advantage of a Critical Apache Struts Bug’s initial activity with limited IP addresses engaged in exploitation attempts. Apache is an open-source framework for creating Java EE web applications called Apache Struts. It is used by numerous Fortune …

Threat actors make use of fast-evolving multi-layer malware for their complexity and sophistication, as they offer the ability to rapidly adapt and change their code. To make analysis and countermeasures more difficult, this sophisticated type of malware often employs the …

A cluster of malicious Python projects has been identified in PyPI, the official Python PyPI package repository, which targets both Windows and Linux systems and often deploys a custom backdoor. In certain instances, the ultimate payload consists of a simplified clipboard monitor …

Multiple vulnerabilities have been discovered in Dell’s PowerProtect, which were associated with SQL injection, cross-site scripting (XSS), privilege escalation, command injection, and path tracing. The severity for these vulnerabilities ranges between 4.3 (Medium) and 8.8 (High). Relevant CVEs have been …

A new threat actor has been discovered to be using SQL injection attacks to gain unauthorized access to organizations in the APAC region. This threat actor has been named “GambleForce” and is using publicly available open-source instruments that are generally …