Tag Archive

Google Cloud has announced a significant expansion of its security transparency efforts by committing to assign Common Vulnerabilities and Exposures (CVE) identifiers to critical vulnerabilities found in its cloud products, even when no customer action is required. This move, effective …

A decryption tool for ShrinkLocker has been recently unveiled by Bitdefender. While it’s an unusual ransomware strain which was discovered in May 2024. This ransomware employs a surprisingly simple yet effective approach, leveraging VBScript and Windows’ built-in BitLocker feature for …

A newly discovered 0-day vulnerability in Windows systems, CVE-2024-43451, has been actively exploited by suspected Russian hackers to target Ukrainian entities. This 0-day flaw, identified by security analysts at ClearSky Cyber Security in June 2024, allows attackers to gain unauthorized …

The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) have jointly announced the discovery of a widespread cyber espionage campaign orchestrated by hackers affiliated with the People’s Republic of China (PRC). The operation, which targeted …

A sophisticated malware campaign targeting macOS devices, believed to be orchestrated by North Korean state-sponsored or APT hackers. The malicious actors have employed a novel technique of embedding malware within applications built using Google’s Flutter framework, marking a significant shift …

GoIssue is a new sophisticated phishing tool targeting GitHub users. It poses a significant threat to developers and organizations worldwide. Cybersecurity researchers at SlashNext have uncovered this tool, which enables attackers to extract email addresses from public GitHub profiles and …

Chinese state-sponsored hackers recently compromised two prominent Tibetan websites in a sophisticated cyber-espionage campaign to distribute the notorious Cobalt Strike malware. The attack, attributed to the threat group TAG-112, highlights the ongoing digital threats faced by ethnic and religious minorities …

Zoom recently disclosed multiple vulnerabilities affecting its suite of applications, including a critical flaw that could allow attackers to execute remote code. The Zoom app vulnerabilities, identified by CVE numbers, range from medium to high severity and impact various Zoom …

Fortinet has released critical security updates to address multiple product vulnerabilities, including FortiOS, FortiAnalyzer, FortiManager, and FortiClient Windows. If left unpatched, these flaws could allow attackers to take control of affected systems. One of the most severe vulnerabilities, tracked as …