Tag Archive

A sophisticated phishing campaign targets Microsoft OneDrive users, employing social engineering to trick victims into executing malicious PowerShell scripts.  The attack leverages a false sense of urgency by claiming a DNS issue prevents file access, enticing users to click a …

A Russian threat actor known as Fighting Ursa (also referred to as APT28, Fancy Bear, and Sofacy) has been identified in a new campaign that began in March 2024. This campaign uses a fake car sale advertisement to distribute the …

Security researchers have discovered a severe vulnerability in the Linux kernel that could allow attackers to gain full control over affected systems. Dubbed “SLUBStick,” the exploit technique uses memory allocation flaws to achieve arbitrary read and write access to kernel …

Cybercriminals increasingly leverage the TryCloudflare Tunnel to deliver Remote Access Trojans (RATs) in financially motivated attacks. TryCloudflare is a tool for developers to experiment with Cloudflare Tunnel without adding a site to Cloudflare’s DNS. Threat actors continually refine tactics to …

Phishing campaigns intensified in May 2024, with Poland bearing the brunt of attacks, accounting for 80% of over 26,000 protected users, as Italy and Romania also experienced significant targeting.  Threat actors launched nine distinct phishing campaigns during the month, primarily …

Microsoft has released a critical security update for its Edge browser to address multiple vulnerabilities, including a severe validation flaw that could allow attackers to execute arbitrary code on affected systems. The update, released on August 1, 2024, patches three …

The Reserve Bank of India (RBI) has proposed a new framework mandating additional factor authentication (AFA) for all digital payment transactions, with some exceptions. This move aims to enhance the security of digital payments while allowing for alternative authentication methods …

Damian Williams, the United States Attorney for the Southern District of New York, announced that Vinoth Ponmaran has been sentenced to seven years in prison for his role in a widespread tech support fraud scheme. The conspiracy, which targeted elderly …