ANY.RUN revamped their user interface for a more streamlined workflow, as the sandbox homepage now features shortcut buttons for launching new analysis sessions, eliminating the need to navigate through the …
Hackers Weaponize Authentication Tools To Deliver NiceRAT Malware via Botnet
Botnets, traditionally used for DDoS attacks with malware like Nitol, are now being built with malware capable of data exfiltration and installing additional malware, confirmed by the discovery of NiceRAT …
Confluence Data Center & Server Flaw Allows Remote Code Execution
Atlassian disclosed a high-severity vulnerability that exists in multiple versions of their Confluence Data Center and Server. The CVE for this vulnerability was assigned with CVE-2024-21683 and the severity was …
10 Best Cloud Security Companies In 2024
In the digital age, cloud security is crucial as businesses increasingly depend on cloud services and top cloud security companies provide advanced solutions to protect data, applications, and infrastructure from …
Hackers Actively Exploiting Checkpoint 0-Day Flaw
Cybersecurity experts have identified a critical zero-day vulnerability in Checkpoint’s security software that hackers are actively exploiting. The flaw assigned to the identifier CVE-2024-24919 poses a significant threat to organizations …
PoC Exploit Released for macOS Root Access Vulnerability
A security vulnerability, identified as CVE-2024-27822, has been discovered in macOS. This vulnerability allows unauthorized root access and has raised serious concerns among cybersecurity experts and macOS users alike. The …
Massive Ticketmaster, Santander Data Breaches Linked to Snowflake Account Hacks
Hackers have claimed responsibility for a massive data breach involving Ticketmaster and Santander Bank, potentially affecting over 590 million accounts. The breach, linked to a Snowflake employee’s compromised credentials, has …
Vidar Stealer Employs Advanced Tactics to Evade Defense Solutions
The Vidar Stealer has emerged as a potent and sophisticated malware, posing significant risks to both organizations and individuals. This information-stealing malware, operating as a malware-as-a-service (MaaS), has been meticulously …
Hackers Exploiting Amazon, Google And IBM Cloud Services To Steal Customer Data
Criminals are exploiting cloud storage services to host phishing websites for SMS scams by abusing the static website hosting feature of cloud storage to store HTML files with malicious URLs, …
Critical Flaw In SkyBridge Routers Let Attackers Inject Commands
A new vulnerability has been discovered in SkyBridge/SkyBridge BASIC series products that were associated with Command injection. This vulnerability has been assigned to CVE-2024-32850, and its severity has yet to …