Mandiant has uncovered alarming evidence of a sophisticated Iranian state-sponsored cyber campaign orchestrated by UNC1860, a threat actor likely affiliated with Iran’s Ministry of Intelligence and Security (MOIS). Known for...
In a concerning development for organizations relying on Keycloak for secure identity and access management, a high-severity vulnerability has been discovered in its SAML signature validation process. Tracked as CVE-2024-8698,...
Qualys has released a comprehensive report shedding light on the Black Basta ransomware, a highly disruptive threat that has wreaked havoc across industries since its emergence in April 2022. Operating...
In an alarming trend observed by McAfee Labs, cybercriminals have refined their tactics, luring unsuspecting users into downloading AsyncRAT malware disguised as popular cracked software. This evolving menace leverages the...
Two individuals have been apprehended this week in connection with a significant cryptocurrency theft amounting to over $230 million. The suspects, 20-year-old Malone Lam and 21-year-old Jeandiel Serrano, were arrested...
Versa Networks has issued a security advisory regarding a vulnerability discovered in its Versa Director product, CVE-2024-45229. This vulnerability, which carries a CVSS score of 6.6, could potentially expose sensitive...
Phishing attacks continue to evolve in complexity, and the latest report from the Cofense Phishing Defense Center highlights a troubling trend: cybercriminals are increasingly using HR-related phishing tactics to trick...
In a significant development for website owners and administrators using Camaleon CMS, a critical security update has been released to address several vulnerabilities, some of which are already being exploited...
In mid-2024, cybersecurity specialists from Confiant identified a new malicious actor known as MutantBedrog. This threat raised alarm due to its aggressive campaigns of forced user redirections to malicious sites,...
The American pharmaceutical giant Cencora has made the largest known ransom payment in history, shelling out a staggering $75 million in Bitcoin to cybercriminals following a devastating February attack. This...
Apple’s latest operating system release, macOS Sequoia, has been causing unexpected headaches for cybersecurity professionals and everyday users alike. The update has disrupted the functionality of several major security tools,...
Unit 42 researchers have uncovered a new cyberattack campaign by the North Korean-affiliated APT group, Gleaming Pisces, targeting Linux and macOS systems via poisoned Python packages. The campaign involves the...
In a landmark operation, law enforcement agencies from Spain and Latin America, with support from Europol, Ameripol, and cybersecurity leader Group-IB, successfully dismantled a notorious phishing network operating under the...
Ivanti, a leader in enterprise software, has disclosed a critical vulnerability in its Ivanti Connect Secure Appliance (CSA) 4.6, identified as CVE-2024-8963. This vulnerability, rated at a CVSS score of...
The Nigeria Computer Emergency Response Team (ngCERT) has issued an urgent alert warning of ransomware groups actively targeting critical systems across Nigeria. The alert focuses on a high-severity vulnerability (CVE-2023-27532)...
Support Securityonline.info site. Thanks!
