FakeBat Loader Malware Spreads Widely Through Drive-by Download Attacks

03/07/2024 0 Comments 0 tags

The loader-as-a-service (LaaS) known as FakeBat has become one of the most widespread loader malware families distributed using the drive-by download technique this year, findings from Sekoia reveal. “FakeBat primarily

South Korean ERP Vendor’s Server Hacked to Spread Xctdoor Malware

03/07/2024 0 Comments 0 tags

An unnamed South Korean enterprise resource planning (ERP) vendor’s product update server has been found to be compromised to deliver a Go-based backdoor dubbed Xctdoor. The AhnLab Security Intelligence Center

Israeli Entities Targeted by Cyberattack Using Donut and Sliver Frameworks

03/07/2024 0 Comments 0 tags

Cybersecurity researchers have discovered an attack campaign that targets various Israeli entities with publicly-available frameworks like Donut and Sliver. The campaign, believed to be highly targeted in nature, “leverage target-specific

New Intel CPU Vulnerability ‘Indirector’ Exposes Sensitive Data

02/07/2024 0 Comments 0 tags

Modern CPUs from Intel, including Raptor Lake and Alder Lake, have been found vulnerable to a new side-channel attack that could be exploited to leak sensitive information from the processors.

How MFA Failures are Fueling a 500% Surge in Ransomware Losses

02/07/2024 0 Comments 0 tags

The cybersecurity threat landscape has witnessed a dramatic and alarming rise in the average ransomware payment, an increase exceeding 500%. Sophos, a global leader in cybersecurity, revealed in its annual

Chinese Hackers Exploiting Cisco Switches Zero-Day to Deliver Malware

02/07/2024 0 Comments 0 tags

A China-nexus cyber espionage group named Velvet Ant has been observed exploiting a zero-day flaw in Cisco NX-OS Software used in its switches to deliver malware. The vulnerability, tracked as

Meta’s ‘Pay or Consent’ Approach Faces E.U. Competition Rules Scrutiny

02/07/2024 0 Comments 0 tags

Meta’s decision to offer an ad-free subscription in the European Union (E.U.) has faced a new setback after regulators accused the social media behemoth of breaching the bloc’s competition rules

Australian Man Charged for Fake Wi-Fi Scam on Domestic Flights

02/07/2024 0 Comments 0 tags

An Australian man has been charged with running a fake Wi-Fi access point during a domestic flight with an aim to steal user credentials and data. The unnamed 42-year-old “allegedly

Critical Flaws in CocoaPods Expose iOS and macOS Apps to Supply Chain Attacks

01/07/2024 0 Comments 0 tags

A trio of security flaws has been uncovered in the CocoaPods dependency manager for Swift and Objective-C Cocoa projects that could be exploited to stage software supply chain attacks, putting

Indian Software Firm’s Products Hacked to Spread Data-Stealing Malware

01/07/2024 0 Comments 0 tags

Installers for three different software products developed by an Indian company named Conceptworld have been trojanized to distribute information-stealing malware. The installers correspond to Notezilla, RecentX, and Copywhiz, according to