Cisco has disclosed a critical zero-day vulnerability in its core network software that hackers have exploited since 2023. The flaw carries a maximum severity s

Compact and powerful tools are becoming increasingly essential in the world of cybersecurity and network testing. The ESP32 Marauder Pocket Unit Mini is a ne

The notorious threat actor Mysterious Elephant (also known as APT-K-47) has been detected orchestrating a sophisticated cyber attack campaign utilizing an advanced version of the Asyncshell malware. Security researchers at Knownsec 404 have uncovered evidence of the group exploiting Hajj-themed lures to deceive victims into executing malicious payloads disguised as Microsoft Compiled HTML Help (CHM) files. Background and Targeting Mysterious Elephant, which emerged in 2022, has primarily focused its operations on Pakistani entities. The group’s tactical approach and toolset share notable similarities with other regional threat actors, including SideWinder, Confucius, and Bitter. Their activities gained significant attention in October 2023 […]

In the latest blow to U.S. telecommunications security, Chinese hackers have successfully breached T-Mobile's network as part of an aggressive espionage campai

In an era where smart devices have become ubiquitous in our homes, a disturbing reality lurks beneath their convenient features. Is that robot vacuum diligently cleaning your floors? It’s creating detailed 3D maps of your home. The biometric scanner at your local grocery store? It’s collecting more than just payment data. These revelations come from data privacy experts Aram Senriq and Jesse Gilbert, authors of “The Secret Life of Data,” who warn that our digital footprints are far more extensive – and permanent – than most people realize. “Data isn’t really an object so much as it’s a frame of […]

Trump's potential return to the White House signals a shift in AI policy, raising cybersecurity concerns as federal safeguards are dismantled, heightening vulnerability to state-sponsored attacks.

Roman Sterlingov, the 36-year-old operator of Bitcoin Fog, has been sentenced to 12 years and six months in federal prison for running what prosecutors describe

Russia accused of manufacturing fake video claiming Haitians illegally voted in Georgia, part of broader disinformation campaign to undermine 2024 US presidential election integrity.

Shocking 14-year qBittorrent security flaw exposed: Hackers could exploit SSL validation weakness to inject malware through update, RSS, and Python installers.

Midnight Blizzard's spear-phishing campaign targets thousands across government, defense, academia, NGOs; Microsoft warns of stolen data, persistent access risks.

Millions of gaming accounts face renewed security threats 7 months after major breach affecting Activision Blizzard users, with accounts being hacked now.

LinkedIn faces massive €310M EU fine for GDPR violations related to unauthorized user data processing for targeted advertising purposes.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has escalated concerns over a significant Microsoft SharePoint vulnerability by adding it to it

Microsoft's Threat Intelligence team has unveiled details about a significant security vulnerability in Apple's macOS operating system. The flaw, dubbed "HM

Warning This article contains important information about potentially fraudulent practices in cryptocurrency trading. Always conduct thorough research before investing. In the Wild West of cryptocurrency, where fortunes can seemingly be made overnight, it’s crucial to stay informed about the risks and scams that plague the industry. One hazardous trend is the rise of “pump and dump” schemes, often facilitated by sophisticated-sounding software tools. Many of these tools including Pump.Fun Bundlers are being released for free and fully open source on Github. Tools like this are being used to carry out these schemes. Understanding Pump and Dump Schemes Pump-and-dump schemes are […]

Researchers uncover widespread vulnerability in open-source package ecosystems, exposing new avenues for supply chain attacks through entry point exploitation.

FBI creates crypto token NexFundAI to expose fraud, leading to charges against 18 entities for market manipulation in a landmark cryptocurrency case.

In a continuing series of security challenges, Ivanti has disclosed three new vulnerabilities in its Cloud Services Appliance (CSA) currently being exploited in the wild. This announcement is part of the company’s ongoing efforts to address and mitigate security risks in its products. Vulnerability Details and Exploitation The newly identified vulnerabilities, designated as CVE-2024-9379, CVE-2024-9380, and CVE-2024-9381, are being exploited in conjunction with a previously reported zero-day vulnerability (CVE-2024-8963). Ivanti reports that the exploitation of these vulnerabilities is currently limited. Breakdown of the Vulnerabilities: CVE-2024-9379 (CVSS 6.5): Allows remote authenticated attackers with privileges to execute SQL statements. CVE-2024-9380 (CVSS 7.2): […]

American Water, the United States’ largest publicly regulated water and wastewater utility, has reported a cyber-attack affecting its internal systems. The New Jersey-based company, which serves over 14 million people across 14 states, discovered unauthorized activity within its networks on October 3, prompting immediate action to secure its operations. Impact on Operations and Customer Services In a regulatory filing with the U.S. Securities and Exchange Commission (SEC) on Monday, American Water assured us that the cyber incident had not compromised the functionality of its water and wastewater facilities. These critical infrastructure components operate normally, maintaining essential services for millions of […]

New Linux malware "Perfctl" infects thousands of machines, exploiting CVE-2023-33246 and misconfigurations. Learn about its stealth techniques and how to protect your systems.

Cybersecurity researchers have uncovered a sophisticated spear-phishing campaign targeting HR professionals with a potent JavaScript backdoor known as More_eggs

Rackspace, a leading cloud-hosting provider, successfully detected and mitigated a cyber intrusion that exploited a zero-day vulnerability in a third-party appl

ChatGPT's DAN 7.0 & 1.0 jailbreak raises concerns over AI ethics. Experts warn of risks as users bypass safeguards, sparking debate on responsible AI development.

Explore the Zero Trust security model, where trust is never assumed. Learn how continuous authentication and strict access controls enhance your network security.

Telegram CEO announces major policy changes, allowing user data sharing with authorities for criminal investigations and intensifying content moderation efforts.