Do Son Citrix has since revised its recommendations, noting that CVE-2023-4966 exploits were found on unprotected devices.
Cyber Security
Microsoft has flagged two North Korean cyber threats, Diamond Sleet and Onyx Sleet, capitalizing on a vulnerability in the JetBrains
Cybersecurity experts from Kaspersky identified a slew of fresh malware samples linked to the notorious MATA cluster
Google's TAG identified multiple state-sponsored hacking groups actively leveraging a known vulnerability (CVE-2023-38831) in WinRAR
Researchers from Elastic Security Labs have unearthed a new backdoor, BLOODALCHEMY, employed in attacks against the nations of ASIAN
According to Valve, fewer than 100 Steam users installed these malware-infested games, and they have already been notified via email.
According to experts at Check Point, these attacks, orchestrated by the Chinese hacker collective, ToddyCat, have been ongoing since 2021.
Simpson Manufacturing has disclosed a cybersecurity incident disrupting the company's operational cadence.
Threat actors are actively exploiting a recent vulnerability, CVE-2023-3519, within the Citrix NetScaler Gateway (with a CVSS score of 9.8)
Researchers from Cybernews have identified at least 165 exposed networked RTSP cameras in Israel and 29 in Palestine, accessible to anyone
This campaign displays significant overlaps with tactics, techniques, and procedures (TTPs) previously linked to cyber espionage initiatives
While the concept of lateral movement isn’t new, its application in cloud environments like SQL Server instances is
Menorah malware was spotted playing a crucial role in a recent targeted phishing attack demonstrating the group's undiminished proclivity
The Cl0p ransomware group exploited a popular SQL injection vulnerability (CVE-2023-34362) within the MOVEit file transfer solution
In a detailed expose, Symantec pointed out that Redfly employed the ShadowPad Trojan to infiltrate a national power grid in Asia
Anonymous Sudan, previously known for launching multiple DDoS attacks against Microsoft, recently targeted 'X' (formerly Twitter)
Prominent companies affected by the Lapsus$ hacking group include Microsoft, Cisco, Okta, Nvidia, T-Mobile, Samsung, Uber
Fitzpatrick, concurrently one of the founders of the BreachForums, was responsible for the design and construction of its fundamental infrastructure
Anonymous Sudan breached Microsoft and could access a large database containing 30 million Microsoft accounts and related information
ransomware group LockBit asserted they had successfully infiltrated the systems of TSMC, demanding a ransom of 70 million dollars
U.S. Department of Justice, other agencies, and certain members of Interpol announced the seizure of BreachForums' clearnet domain
British hacker, who commandeered the Twitter accounts of Obama and Musk to disseminate fraudulent messages, was extradited to the U.S.