Operation PANDORA has successfully dismantled a network of 12 fraudulent call centers, dealing a significant blow to a sophisticated criminal enterprise that has stolen over €10 million from unsuspecting victims. …
CISA & FBI Release Urges Developers to Eliminate Directory Traversal Vulnerabilities
The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have issued a joint Secure by Design Alert, calling on software developers and industry executives to …
LayerX Security Raises $24M for its Browser Security Platform, Enabling Employees to Work Securely from Any Browser, Anywhere
LayerX, pioneer of the LayerX Browser Security platform, today announced $24 million in Series A funding led by Glilot+, the early-growth fund of Glilot Capital Partners, with participation from Dell …
NCSC Warns of Russian Hackers Attacking Critical National Infrastructure
The National Cyber Security Centre (NCSC) has issued a stark warning about a new wave of cyber threats from Russian-aligned groups targeting the UK’s critical national infrastructure. Over the past …
New macOS Adload Malware Bypasses Built-in macOS Antivirus Detection
A new variant of the notorious Adload malware has been discovered to bypass the latest updates to Apple’s built-in antivirus, XProtect. Despite Apple’s efforts to fortify its defenses with a …
World Password Day 2024: Create Strong Passwords & Stay Safe Online
Today is an important day for online security as it marks World Password Day. This serves as a reminder to prioritize the use of strong and secure passwords to protect …
Beware! Threat Actors Selling RDO Access on Hacker Forums
Cybersecurity communities are on high alert as threat actors have begun selling Remote Desktop Protocol (RDO) access on underground hacker forums. This alarming trend poses significant risks to individual and …
Critical MailCleaner Vulnerabilities Let Attackers Execute arbitrary command
Critical vulnerabilities in MailCleaner versions before 2023.03.14 allow remote attackers to take complete control of the appliance through malicious emails, administrator interaction with attacker sites or links, and exploitation of …
Dropbox Sign Hacked: Attackers Stolen API Keys, MFA, & Hashed Passwords
Dropbox disclosed a significant security breach affecting its electronic signature service, Dropbox Sign (formerly known as HelloSign). The incident, which came to light on April 24, involved unauthorized access to …
Hackers Infiltrated 9-days Within UnitedHealth Network Before Ransomware Attack
Andrew Witty, CEO of UnitedHealth Group, detailed a sophisticated ransomware attack on Change Healthcare, a key component of the UnitedHealth network. The cybercriminals, identifying themselves as ALPHV or BlackCat, infiltrated …