In a recent cybersecurity incident, a South Korean APT group exploited a critical vulnerability in WPS Office, a popular office software widely used in China, to spy on high-profile targets. This breach shed light on other security issues within the …
South Korean APT Exploits 1-Click WPS Office Bug, Nabs Chinese Intel Read More »
Discover how AI and machine learning are revolutionizing patch management by providing real-time risk assessments. This innovative approach guides IT and security teams in prioritizing critical patches to reduce vulnerabilities and enhance cybersecurity. AI/ML-driven patch management is becoming increasingly essential …
How AI is helping cut the risks of breaches with patch management Read More »
24 WordPress website administrators who utilize the Litespeed Cache plugin are urged to promptly update their sites with the latest plugin release to address a critical vulnerability. This vulnerability could potentially allow an unauthorized attacker to gain control of targeted …
LiteSpeed Cache Plugin Vulnerability Risked 5+ Million Websites Read More »
î ‚Aug 25, 2024î „Ravie LakshmananLaw Enforcement / Digital Privacy Pavel Durov, founder and chief executive of the popular messaging app Telegram, was arrested in France on Saturday, according to French television network TF1. Durov is believed to have been apprehended pursuant …
Telegram Founder Pavel Durov Arrested in France for Content Moderation Failures Read More »
A newly discovered variant of the XenoRAT malware, dubbed MoonPeak, is being distributed by a threat actor believed to have ties to North Korea’s Kimsuky group. This sophisticated malware is equipped with a complex infrastructure of command-and-control servers, staging systems, …
Constantly Evolving MoonPeak RAT Linked to North Korean Spying Read More »
CrowdStrike 2024 Report Exposes North Korea’s Covert Workforce in U.S. Tech Firms In April 2024, CrowdStrike Services responded to the first of several incidents in which North Korea’s FAMOUS CHOLLIMA malicious insiders targeted U.S. firms. This report sheds light on …
CrowdStrike 2024 report exposes North Korea’s covert workforce in U.S. tech firms Read More »
43 Security researchers have issued a warning to macOS users regarding multiple unpatched vulnerabilities found in Microsoft apps designed for the system. These vulnerabilities could potentially allow malicious actors to gain unauthorized access to sensitive device permissions. Unpatched Vulnerabilities in …
Unpatched Vulnerabilities In Microsoft macOS Apps Pose Threat Read More »
î ‚Aug 21, 2024î „Ravie LakshmananSoftware Security / Vulnerability Cybersecurity researchers have disclosed a critical security flaw impacting Microsoft’s Copilot Studio that could be exploited to access sensitive information. Tracked as CVE-2024-38206 (CVSS score: 8.5), the vulnerability has been described as an …
Microsoft Patches Critical Copilot Studio Vulnerability Exposing Sensitive Data Read More »
The United States is facing an increasing threat from Chinese Wi-Fi routers produced by TP-Link Technologies, leading two Congressional representatives to call for an investigation. Representatives John Moolenaar (R-MI) and Raja Krishnamoorthi (D-IL), members of the House Select Committee on …
Chinese Wi-Fi Router Vendor Draws US Congressional Ire Read More »
Ransomware Gangs Up Their Game by Targeting Executives’ Family Members and Non-Payers Whether targeting executives’ family members or snitching on those that don’t pay, ransomware gangs are taking their tactics to new heights. Ransomware attacks continue to evolve as cybercriminals …
Sophos X-Ops: Ransomware gangs escalating tactics, going to ‘chilling’ lengths Read More »
