Tag Archive

A newly discovered security vulnerability allows attackers to impersonate Microsoft corporate email accounts, significantly increasing the risk of phishing attacks. Security researcher Vsevolod Kokorin, also known as Slonser, found this bug, which Microsoft has not yet patched. Kokorin revealed the …

The popular corporate messaging platform Slack has warned its Russian users that their accounts will be suspended within 30 days, citing compliance with sanctions and export control laws imposed by the United States, the European Union, and other jurisdictions. The …

Hackers often abuse stealers to steal login credentials, financial data, and identity theft data hidden in the infected computer systems. Stealer attacks are a low-risk and highly lucrative way for threat actors to make money and breach defensive measures in …

Fortra has issued a critical security advisory regarding a hard-coded password vulnerability in its FileCatalyst software, explicitly affecting the TransferAgent component. CVE-2024-5275 vulnerability poses a significant risk to users, potentially enabling machine-in-the-middle (MiTM) attacks. CVE-2024-5275 – Vulnerability Description The vulnerability …

Threat actors leverage meeting software applications and tools to penetrate weak security loopholes, infiltrate secure settings and organizations, steal highly confidential information, and restrict organizational functions. Recorded Future’s Insikt group has recently unveiled a long-term campaign aimed at macOS cryptocurrency …

Researchers analyzed six malware families that are using the protectors Themida and VMProtect. None of the samples used code virtualization, significantly simplifying the analysis, as only one sample had anti-debugging enabled.  The malware code itself was largely unprotected, except for …

Hackers often abuse weaponized Word docs, as they can contain macros that contain or exploit flaws inside those Word files to run destructive code upon being opened by the intended victims. It enables an attacker to employ this tool to …

A notorious figure known as IntelBroker has claimed to have leaked a trove of Apple’s internal tools. The announcement was made via a post on the social media platform Twitter through the DarkWebInformer account. The post, which has since gone …

A novel information-stealing campaign detailing the attackers’ tactics, techniques, and procedures (TTPs) throughout the attack lifecycle, where the Mitre ATT&CK framework is used to classify these TTPs and identify potential detection points.  By examining the campaign’s behavior and communication with …