π What's going on in the cyber world today? π¨ #CyberAlerts New Deceptive Delight Technique Used to Jailbreak AI Models in Interactive Chats Source: Jay Chen and Royce Lu via Unit42 Prometei Botnet Exploits Unpatched Vulnerabilities to Spread Cryptojacking Malware Source: Buddy Tancio, Bren Matthew Ebriega and Mohamed Fahmy via Trend Micro Hackers Exploit Rogue RDP Files to Target Ukrainian Government and Military Source: Computer Emergency Response Team of Ukraine Fortinet Alerts Users to Acti...
Oct 24, 2024β’10 min
π What's trending in cybersecurity today? π¨ #CyberAlerts New Phishing Campaign Leverages Gophish Framework to Deploy PowerRAT and DCRat Source: Chetan Raghuprasad via Cisco Talos Vulnerability in Mallox Ransomware Allows Victims to Recover Files Without Payment Source: Ladislav Zezula via Gen Critical Red Hat NetworkManager Vulnerability Allows Local Attackers Root Access Source: Red Hat Security Flaw in Styraβs OPA Exposes NTLM Hashes Allowing Remote Attacks Source: Shelly Raban via Tenable N...
Oct 23, 2024β’9 min
π What's the latest in the cyber world today? π¨ #CyberAlerts Malicious npm Packages Exploit SSH Backdoor to Steal Ethereum Wallet Keys Source: Phylum New Beast Ransomware Targets Windows, Linux, and ESXi Systems Source: Cybereason VMware Releases Updates to Patch Critical Remote Code Execution Vulnerability Source: Broadcom CISA Adds ScienceLogic Zero-Day Flaw to Known Exploited Vulnerabilities Catalog Source: CISA Malicious Actors Exploit Docker API for Cryptominer Deployment Source: Abdelrah...
Oct 22, 2024β’9 min
π What's happening in cybersecurity today? π¨ #CyberAlerts Critical Security Flaws Found in Major End-to-End Encrypted Cloud Storage Source: Jonas Hofmann and Kien Tuong Truong Bumblebee Malware Resurfaces to Target Corporate Networks with Stealthy Tactics Source: Leandro FrΓ³es via Netskope Bitdefender Total Security Flaws Leave Users Open to Man-in-the-Middle Attacks Source: Bitdefender Newly Disclosed Spectre Bypass Vulnerabilities Impact Intel and AMD CPUs on Linux Source: Computer Security ...
Oct 21, 2024β’9 min
π What are the latest cybersecurity alerts, incidents, and news? π¨ #CyberAlerts Microsoft Uncovers macOS Flaw Bypassing Privacy Controls in Safari Browser Source: Microsoft Fake Google Meet Errors Lure Users to Download Info-Stealing Malware Campaigns Source: Quentin Bourgue via Sekoia Russian RomCom Threat Actor Unleashes SingleCamper RAT on Ukrainian Government Source: Asheer Malhotra, Vanja Svajcer and Vitor Ventura via Cisco Talos Critical Vulnerabilities in WebRTC Open Door for Denial-of-...
Oct 18, 2024β’9 min
π What's going on in the cyber world today? π¨ #CyberAlerts Iranian Brute-Force Campaign Targets Critical US Infrastructure Source: CISA ScarCruft Exploits Windows Zero-Day Vulnerability to Spread RokRAT Malware Source: ASEC Critical VMware HCX Flaw Enables SQL Injection Attacks on Hybrid Cloud Solutions Source: Broadcom Critical Trend Micro Cloud Edge Vulnerability Allows Remote Code Execution Risks Source: Trend Micro Oracle's October 2024 Update Addresses 334 Flaws Across Multiple Products S...
Oct 17, 2024β’10 min
π What's trending in cybersecurity today? π¨ #CyberAlerts CISA Issues Warning on Active Exploitation of SolarWinds Web Help Desk Flaw Source: CISA HORUS Protector Crypter Actively Distributing Multiple Trojan Malwares Source: SonicWall EDRSilencer Red Team Tool Actively Used by Attackers to Evade Detection Source: Jacob Santos, Cj Arsley Mateo and Sarah Pearl Camiling via Trend Micro Critical Microsoft Dataverse Flaw Enables Privilege Escalation Attacks Source: Microsoft Google Releases Chrome ...
Oct 16, 2024β’9 min
π What's the latest in the cyber world today? π¨ #CyberAlerts New Supply Chain Attacks Target Entry Points in Open-Source Ecosystems Source: Elad Rapoport and Yehuda Gelb via Checkmarx Jetpack Plugin Fixes Critical Vulnerability Impacting 28 Million WordPress Sites Source: Jetpack New CounterSEVeillance and TDXDown Attacks Exploit Trusted Execution Environments Source: Stefan Gast North Korean Hackers Deploy New Linux FASTCash Malware to Steal ATM Funds Source: haxrob via Doubleagent Multiple S...
Oct 15, 2024β’9 min
π What's happening in cybersecurity today? π¨ #CyberAlerts Iranian Hackers Exploit Windows Flaw for Privilege Escalation Attacks Source: Mohamed Fahmy, Bahaa Yamany, Ahmed Kamal and Nick Dai via Trend Micro Water Makara Deploys Obfuscated JavaScript in Spear Phishing Campaigns Source: Trend Micro Google Issues Warning of Potential Blocking for uBlock Origin in Chrome Browser Source: Google HashiCorp Vault Vulnerability Exposes Systems to Privilege Escalation Risks Source: HashiCorp Apache Rolle...
Oct 14, 2024β’9 min
π What are the latest cybersecurity alerts, incidents, and news? π¨ #CyberAlerts CISA Warns of Threat Actors Exploiting F5 BIG-IP Cookies for Reconnaissance Source: CISA Scammers Exploit Airbnb and Booking.com with New Phishing Schemes Source: Radek Jizba and Jakub SouΔek via ESET Critical Flaw in Foxit PDF Reader Allows Attackers to Execute Arbitrary Code Source: Cisco Talos VMware NSX Security Flaws Allow Hackers to Gain Root Access in Enterprise Systems Source: Broadcom Hackers Exploit Veeam...
Oct 11, 2024β’9 min
π What's going on in the cyber world today? π¨ #CyberAlerts North Korean Hackers Lure Developers with Fake Job Interviews to Spread Malware Source: Unit 42 by Palo Alto Networks Hackers Use Unicode Obfuscation to Hide Mongolian Skimmer on E-Commerce Sites Source: Pedro Marrucho and David Alves via Jscrambler New Malware Campaign Infects Crypto Users Hijacking Wallet Transactions Source: Doctor Web Critical Firefox Zero-Day Vulnerability Actively Exploited in the Wild Source: Mozilla HCL Technol...
Oct 10, 2024β’9 min
π What's trending in cybersecurity today? π¨ #CyberAlerts Microsoft Alerts to Business Email Compromise Attacks Using File Hosting Services Source: Microsoft Flaw in Appleβs Mirroring Feature Poses Privacy Risks for Exposing Personal Data Source: Sevco Security Ivanti Issues Alert on Active Exploitation of Critical Cloud Service Appliance Flaws Source: Ivanti Gamers Fall Victim to Lua-Based Malware Disguised as Fake Cheating Scripts Source: Shmuel Uzan via Morphisec Microsoft Addresses 118 Vuln...
Oct 09, 2024β’10 min
π What's the latest in the cyber world today? π¨ #CyberAlerts GoldenJackal Targets Embassies and Air-Gapped Systems with Malware Toolsets Source: MatΓas Porolli via ESET Qualcomm Urges Manufacturers to Patch Critical Network Vulnerabilities Source: Qualcomm Androidβs October 2024 Update Addresses 26 High-Severity Vulnerabilities Source: Google Tens of Thousands of Dutch Traffic Lights Vulnerable to Remote Hacking Threats Source: Daniel Verlaan via RTL News HHS Warns of Escalating Trinity Ransom...
Oct 08, 2024β’10 min
π What's happening in cybersecurity today? π¨ #CyberAlerts Critical Apache Avro SDK Vulnerability Allows Remote Code Execution Source: Apache Okta Urges Users to Investigate Exploitation of Recently Patched Vulnerability Source: Okta Apple Releases iOS and iPadOS Updates to Fix Critical VoiceOver Vulnerability Source: Apple Visual Studio Remote Code Execution Flaw Allows Exploitation via Dump Files Source: ynwarcs via Github Critical Cacti Network Monitoring Tool Flaw Enables Remote Code Execut...
Oct 07, 2024β’9 min
π What are the latest cybersecurity alerts, incidents, and news? π¨ #CyberAlerts WordPress LiteSpeed Cache Plugin Vulnerability Allows XSS Attacks Source: Patchstack Perfctl Malware Targets Vulnerable Linux Servers for Cryptocurrency Mining Source: Assaf Morag and Idan Revivo via Aqua North Korean Hackers Target Southeast Asia with New VeilShell Backdoor Source: Den Iuzvyk and Tim Peck via Securonix Key Group Ransomware Gang Targets Russia with Evolving Attack Strategies Source: Broadcom Prince...
Oct 04, 2024β’10 min
π What's going on in the cyber world today? π¨ #CyberAlerts Global Fraud Campaign Exploits Fake Trading Apps on App Store and Google Play Source: Andrey Polovinkin via Group-IB New China-Linked CeranaKeeper Targets Southeast Asia for Data Theft Source: Romain Dumont via ESET Over 700,000 DrayTek Routers Vulnerable to Hacking Due to Newly Discovered Flaws Source: Stanislav Dashevskyi and Francesco La Spina via Forescout Critical CosmicSting Vulnerability Compromises Adobe Commerce and Magento St...
Oct 03, 2024β’10 min
π What's trending in cybersecurity today? π¨ #CyberAlerts Fake Crypto Wallet Recovery Packages Found in PyPI Target Cryptocurrency Users Source: Yehuba Gelb via Checkmarx Active Exploitation Targets Newly Disclosed Zimbra Postjournal Vulnerability Source: Proofpoint on X Bluetooth Vulnerability Poses Major Security Risk to Wireless Device Pairing Source: Bluetooth XWorm Malware Variant Discovered Evading Detection Using Advanced Techniques Source: Jan Michael Alcantara via Netskope CISA Expands...
Oct 02, 2024β’10 min
π What's the latest in the cyber world today? π¨ #CyberAlerts Multiple PHP Vulnerabilities Discovered Prompting Urgent Security Updates Source: PHP Project Nitrogen Malware Campaign Deploys Sliver and Cobalt Strike on Hijacked Servers Source: The DFIR Report North Korean Hackers Use LinkedIn to Target Crypto Users with RustDoor Malware Source: Broadcom Microsoft Revamps Security Protocols for Edge Extension Publishing Process Source: Microsoft Critical SQL Injection Vulnerability Found in Whats...
Oct 01, 2024β’10 min
π What's happening in cybersecurity today? π¨ #CyberAlerts UK and US Warn of Increasingly Sophisticated Iranian Spear Phishing Campaigns Source: UKβs National Cyber Security Centre Embargo Ransomware Escalates Tactics Targeting Hybrid Cloud Environments Source: Microsoft New GorillaBot Emerges as Dominant Force in DDoS Attacks Source: NSFOCUS Rhadamanthys Infostealer Unleashes AI-Powered Threats Against Cryptocurrency Source: Broadcom Louse APT Group Unleashes Malware Campaign Against Chinese E...
Sep 30, 2024β’10 min
π What are the latest cybersecurity alerts, incidents, and news? π¨ #CyberAlerts New HTML Smuggling Campaign Targets Russian Users with DCRat Malware Source: Nikhil Hegde via Netskope Fake WalletConnect App on Google Play Steals Cryptocurrency from Android Users Source: Check Point Research Vulnerabilities in CUPS Enable Remote Code Execution on Unprotected Linux Systems Source: Evilsocket Watering Hole Attack Compromises Kurdish Websites to Distribute Malware Source: Felix AimΓ© and Maxime A. v...
Sep 27, 2024β’10 min
π What's going on in the cyber world today? π¨ #CyberAlerts Hackers Exploit Industrial Control Systems Using Unsophisticated Methods Source: CISA India-Linked SloppyLemming Hackers Launch Credential Harvesting Attacks in Asia Source: Cloudflare Sparkling Pisces Threat Group Unleashes KLogExe and FPSpy Malware for Espionage Source: Broadcom Critical TeamViewer Vulnerability Enables Privilege Escalation on Windows Systems Source: TeamViewer Vulnerabilities in Citrix XenServer Allow Malicious Admi...
Sep 26, 2024β’9 min
π What's trending in cybersecurity today? π¨ #CyberAlerts AI-Generated Malware Emerges in Cyberattacks Targeting Users Worldwide Source: HP Wolf Security Cyberattacks Hit Transport Firms Using Lumma Stealer and NetSupport Malware Source: Proofpoint Google Alerts Companies to North Korean IT Workers Infiltrating US Workforce Source: Google BitSight Uncovers Critical Zero-Day Flaws in Automatic Tank Gauge Systems Source: BitSight New Apache Tomcat Vulnerability Exposes Systems to Denial of Servic...
Sep 25, 2024β’10 min
π What's the latest in the cyber world today? π¨ #CyberAlerts New Octo2 Android Trojan Targets Europe with Device Takeover Capabilities Source: Threat Fabric Mallox Ransomware Expands to Linux Systems Using Leaked Kryptina Source Code Source: Jim Walter via SentinelOne Hackers Compromise Apache AXIS Server to Deploy Malicious Web Shells Source: John Dwyer, Eric Gonzalez and Tyler Hudak via Binary Defense Critical Remote Code Execution Flaw Discovered in All GNU/Linux Systems Source: Simone Marg...
Sep 24, 2024β’9 min
π What's happening in cybersecurity today? π¨ #CyberAlerts Chinese Hackers Exploit GeoServer Flaw to Deploy EAGLEDOOR Malware Source: Ted Lee, Cyris Tseng, Pierre Lee, Sunny Lu and Philip Chen via Trend Micro Critical FreeBSD Hypervisor Vulnerability Exposes Host to Remote Code Execution Source: FreeBSD macOS Sequoia Update Causes Issues for VPNs and Antivirus Software Source: ESET Critical 0-Click RCE Vulnerability Found in MediaTek Wi-Fi Chipsets Source: SonicWall New Go Injector Campaign Tar...
Sep 23, 2024β’10 min
π What are the latest cybersecurity alerts, incidents, and news? π¨ #CyberAlerts 5 New Critical Vulnerabilities Added to CISAβs Known Exploited Vulnerability List Source: CISA New TeamTNT Cryptojacking Campaign Targets CentOS Servers with Rootkit Source: Vito Alfano and Nam Le Phuong via Group-IB Ivanti Cloud Appliance Vulnerability Exploited in Ongoing Cyberattacks Source: Ivanti Iranβs UNC1860 Exploits Passive Backdoors in Middle Eastern Networks Source: Google Threat Actors Misuse Splinter R...
Sep 20, 2024β’9 min
π What's going on in the cyber world today? π¨ #CyberAlerts Experts Issue Urgent Warning About Chinese Raptor Train IoT Botnet Source: Lumen AliGater Malvertising Campaign Targets Outdated Windows Users in Europe Source: Martin ChlumeckΓ½ and MilΓ‘nek via Gen Digital GitLab Addresses Critical SAML Authentication Bypass Vulnerability Source: GitLab Apple Halts iPadOS 18 Rollout After Reports of M4 iPad Pro Devices Being Bricked Source: Juli Clover via MacRumors Vanilla Tempest Cyber Group Targets ...
Sep 19, 2024β’10 min
π What's trending in cybersecurity today? π¨ #CyberAlerts North Korean Hackers Launch MISTPEN Malware Targeting Energy and Aerospace Source: Google Windows MiniFilter Vulnerability Allows Bypass of Endpoint Detection and Response Source: Eito Tamura via Tier Zero Security APT31 Deploys New Espionage Tools in Campaign Against Asia-Pacific Governments Source: Broadcom New Chrome Update Addresses 9 Critical Security Flaws and Boosts Performance Source: Google VMware Patches Critical vCenter Flaw A...
Sep 18, 2024β’10 min
π What's the latest in the cyber world today? π¨ #CyberAlerts Google Patches Critical Cloud Platform Flaw Enabling Remote Code Execution Source: Liv Matan via Tenable CISA Issues Warning on Windows Zero-Day Exploit Used in Active Malware Attacks Source: Cybersecurity Infrastructure Security Agency Apple Addresses Major Security Flaws with Latest iOS 18 Update Source: Apple D-Link Resolves Critical Security Flaws in Popular WiFi 6 Routers and Mesh Systems Source: D-Link Hackers Exploiting Seleni...
Sep 17, 2024β’10 min
π What's happening in cybersecurity today? π¨ #CyberAlerts Gecko Campaign Targets Latin America with Mekotio and Mispadu Malware Source: Broadcom Critical Azure API Management Vulnerability Allows Privilege Escalation Source: Christian HΓ₯land via Binary Security Apple Vision Pro Vulnerability Exposes Virtual Keyboard Inputs to Attackers Source: Hanqiu Wang, Zihao Zhan, Haoqi Shan, Siqi Dai, Max Panoff, Shuo Wang via arXiv Fake AppleCare+ Sites Steal Money Through Fraudulent Ads and Scams Source...
Sep 16, 2024β’10 min
π What are the latest cybersecurity alerts, incidents, and news? π¨ #CyberAlerts New Linux Malware Campaign Exploits Oracle WebLogic for Cryptocurrency Mining Source: Assaf Morag via Aqua New Android Malware 'Ajina.Banker' Steals Financial Data and Evades 2FA Source: Boris Martynyuk , Pavel Naumov and Anvar Anarkulov via Group IB Iranian Cyber Group OilRig Launches Malware Campaign on Iraqi Government Source: Check Point Research New Vo1d Malware Infects 1.3 Million Android TV Boxes Worldwide S...
Sep 13, 2024β’10 min
