Tag Archive

Google has released updates for the Chrome Stable and Extended Stable channels. The new version, 128.0.6613, is now available for Windows, Mac, and Linux users, with a staggered rollout planned over the coming days and weeks. This update addresses four …

VMware has issued a security advisory to address a significant vulnerability in its VMware Fusion product that could allow attackers to execute malicious code. This vulnerability, identified as CVE-2024-38811, stems from the application’s use of an insecure environment variable. With …

Verkada, a prominent security camera company, has agreed to pay $2.95 million following a massive data breach. This breach exposed the company’s failure to secure sensitive data, leading to widespread privacy and protection concerns. The Breach and Its Implications The …

The Federal Trade Commission (FTC) has announced that security camera firm Verkada will pay a $2.95 million penalty following allegations of inadequate data security practices. This settlement follows a massive data breach that exposed sensitive information from thousands of internet-connected …

Transport for London (TfL), the organization responsible for the capital’s public transport network, is grappling with the aftermath of a significant cyber attack that has disrupted services. In the early hours of Monday, September 2, TfL’s IT systems were targeted …

The hacktivist group Head Mare has leveraged a vulnerability in WinRAR to infiltrate and encrypt systems running on Windows and Linux. This group, active since the onset of the Russo-Ukrainian conflict, has primarily targeted organizations in Russia and Belarus. Their …

Hackers abuse Google Sheets to covertly store and transmit stolen data or execute malicious scripts, taking advantage of its trusted platform status and collaboration features. Cybersecurity researchers at Proofpoint identified an unusual campaign in August 2024 involving the use of …

DeadXInject, the group behind AresLoader and AiDLocker ransomware, is offering a new Malware-as-a-Service (MaaS) called ManticoraLoader.  Advertised on underground forums and Telegram since August 8th, 2024, ManticoraLoader is a C-based tool designed to target Windows systems (including servers) and steal …

A new attack vector has emerged, exploiting the critical vulnerability CVE-2023-22527 in Atlassian Confluence. This vulnerability, which affects the Confluence Data Center and Server products, has been weaponized using the Godzilla backdoor, a sophisticated file-less malware. The implications of this …