Snowflake Warns: Targeted Credential Theft Campaign Hits Cloud Customers

04/06/2024 0 Comments 0 tags

Cloud computing and analytics company Snowflake said a “limited number” of its customers have been singled out as part of a targeted campaign. “We have not identified evidence suggesting this

DarkGate Malware Replaces AutoIt with AutoHotkey in Latest Cyber Attacks

04/06/2024 0 Comments 0 tags

Cyber attacks involving the DarkGate malware-as-a-service (MaaS) operation have shifted away from AutoIt scripts to an AutoHotkey mechanism to deliver the last stages, underscoring continued efforts on the part of

Oracle WebLogic Server OS Command Injection Flaw Under Active Attack

04/06/2024 0 Comments 0 tags

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a security flaw impacting the Oracle WebLogic Server to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active

Researchers Uncover RAT-Dropping npm Package Targeting Gulp Users

03/06/2024 0 Comments 0 tags

Cybersecurity researchers have uncovered a new suspicious package uploaded to the npm package registry that’s designed to drop a remote access trojan (RAT) on compromised systems. The package in question

Authorities Ramp Up Efforts to Capture the Mastermind Behind Emotet

03/06/2024 0 Comments 0 tags

Law enforcement authorities behind Operation Endgame are seeking information related to an individual who goes by the name Odd and is allegedly the mastermind behind the Emotet malware.  Odd is

SASE Threat Report: 8 Key Findings for Enterprise Security

03/06/2024 0 Comments 0 tags

Threat actors are evolving, yet Cyber Threat Intelligence (CTI) remains confined to each isolated point solution. Organizations require a holistic analysis across external data, inbound and outbound threats and network

Researcher Uncovers Flaws in Cox Modems, Potentially Impacting Millions

03/06/2024 0 Comments 0 tags

Now-patched authorization bypass issues impacting Cox modems that could have been abused as a starting point to gain unauthorized access to the devices and run malicious commands. “This series of

Andariel Hackers Target South Korean Institutes with New Dora RAT Malware

03/06/2024 0 Comments 0 tags

The North Korea-linked threat actor known as Andariel has been observed using a new Golang-based backdoor called Dora RAT in its attacks targeting educational institutes, manufacturing firms, and construction businesses

Beware: Fake Browser Updates Deliver BitRAT and Lumma Stealer Malware

03/06/2024 0 Comments 0 tags

Fake web browser updates are being used to deliver remote access trojans (RATs) and information stealer malware such as BitRAT and Lumma Stealer (aka LummaC2). “Fake browser updates have been

AI Company Hugging Face Detects Unauthorized Access to Its Spaces Platform

01/06/2024 0 Comments 0 tags

Artificial Intelligence (AI) company Hugging Face on Friday disclosed that it detected unauthorized access to its Spaces platform earlier this week. “We have suspicions that a subset of Spaces’ secrets