173 Attention WordPress administrators! It is crucial to update your websites with the latest Jetpack release due to a critical vulnerability that was discovered. Although there have been no reported instances of active exploitation, it is highly recommended to patch …
Critical Vulnerability Patched In Jetpack WordPress Plugin Read More »
î ‚Oct 24, 2024î „Ravie LakshmananRansomware / Cybercrime Cybersecurity researchers have uncovered a more sophisticated version of the Qilin ransomware with enhanced evasion techniques. The latest variant, known as Qilin.B, has been identified by cybersecurity company Halcyon. “Qilin.B now uses AES-256-CTR encryption …
New Qilin.B Ransomware Variant Emerges with Improved Encryption and Evasion Tactics Read More »
A sophisticated cyber campaign orchestrated by North Korea’s notorious Lazarus Group has been uncovered, utilizing a fake game website, a patched Chrome zero-day bug, professional LinkedIn accounts, AI-generated images, and other deceptive tactics aimed at stealing from cryptocurrency users worldwide. …
Lazarus Group Exploits Chrome Zero-Day in Latest Campaign Read More »
According to a recent report from CyberSeek, the cybersecurity industry is facing a shortage of skilled workers. The report reveals that there are currently only enough workers to fill 83% of available jobs in the field. This shortage highlights the …
Skills shortage persists in cybersecurity with many jobs going unfilled Read More »
116 Microsoft recently released a significant update bundle, addressing a total of 117 security vulnerabilities with the October 2024 Patch Tuesday. This update includes fixes for some publicly known and actively exploited flaws, making it one of the largest updates …
Microsoft Fixed 100+ Vulnerabilities With October Patch Tuesday Read More »
î ‚Oct 20, 2024î „Ravie LakshmananVulnerability / Email Security Unknown threat actors have been observed attempting to exploit a now-patched security flaw in the open-source Roundcube webmail software as part of a phishing attack designed to steal user credentials. Russian cybersecurity company …
Hackers Exploit Roundcube Webmail XSS Vulnerability to Steal Login Credentials Read More »
A vulnerability in the Safari browser on macOS devices has left users vulnerable to spying, data theft, and malware attacks. Apple’s special permissions for its proprietary apps, particularly Safari, have allowed attackers to access important app configuration files, bypassing the …
MacOS Safari Exploit Exposes Camera, Mic, Browser Data Read More »
The Growing Threat of Data Breaches in the Age of AI The risk of a data breach today has reached unprecedented levels, largely due to the proliferation of generative AI tools. These advanced technologies have revolutionized the way businesses operate, …
Shadow IT risks are on the rise as GenAI tools gain popularity with employees Read More »
139 Phishing attacks are constantly evolving, utilizing new tactics to deceive users. A recent discovery by ANY.RUN, an interactive malware analysis service, revealed a phishing campaign that uses fake CAPTCHA prompts to run malicious scripts on victims’ systems. In this …
ANY.RUN Discovers Tricky Phishing Attack Using Fake CAPTCHA – Latest Hacking News Read More »
î ‚Oct 16, 2024î „Ravie LakshmananEndpoint Security / Malware Threat actors are trying to exploit the open-source EDRSilencer tool in an attempt to manipulate endpoint detection and response (EDR) solutions and conceal malicious behavior. Trend Micro has identified \”threat actors trying to …
Hackers Abuse EDRSilencer Tool to Bypass Security and Hide Malicious Activity Read More »
