Microsoft Threat Intelligence has identified a sophisticated campaign by the Iranian state-sponsored group known as Peach Sandstorm. Between April and July 2024, the group deployed a custom multi-stage backdoor, dubbed...
Researchers at Cado Security have discovered a new piece of malware targeting macOS users. This malware, named “Cthulhu Stealer,” is designed to harvest a wide range of data from Apple...
Prasarana Malaysia Berhad, the largest public transportation operator in Malaysia, has confirmed reports of unauthorized access to its internal systems, as previously circulated on social media. The incident is linked...
Trend Micro researchers have identified a sophisticated malware campaign specifically targeting organizations in the Middle East. This campaign leverages a meticulously crafted tool masquerading as the legitimate Palo Alto GlobalProtect...
Cybercriminals are exploiting a clever Zoom phishing scam to distribute ScreenConnect remote access software, potentially enabling them to defraud unsuspecting victims, including Social Security Administration (SSA) beneficiaries. This new scheme,...
In a recent security advisory, Dell disclosed a high-severity vulnerability, identified as CVE-2024-39584, affecting the BIOS of several popular Dell client platforms. This vulnerability, carrying a CVSS score of 8.2,...
An open-source project on GitHub called Docker-OSX allows users to effortlessly run Apple’s OSX and macOS systems through containers, a method akin to virtual machines but significantly more convenient than...
In a significant security advisory, the Perl community has been alerted to a critical vulnerability, CVE-2024-45321, affecting the widely-used App::cpanminus (cpanm) tool. Rated with a CVSS score of 9.8, this...
Akamai’s Security Intelligence Response Team (SIRT) has discovered a widespread Mirai botnet campaign exploiting a recently disclosed zero-day vulnerability (CVE-2024-7029) in AVTECH IP cameras. The vulnerability, which allows for remote...
A critical vulnerability (CVE-2024-43425) has been identified in Moodle, a widely-used Learning Management System. This flaw could enable attackers to execute malicious code on affected servers, potentially compromising sensitive student...
Hitachi Energy has issued a cybersecurity advisory addressing multiple critical vulnerabilities discovered in their MicroSCADA X SYS600 product, widely used for monitoring and controlling power systems. The vulnerabilities, identified as...
A cybersecurity researcher has uncovered a critical vulnerability in the AI-powered assistant Copilot, integrated into Microsoft 365, which enables malicious actors to exfiltrate sensitive data. The exploit, previously submitted to...
The BlackByte ransomware group has re-emerged with an unsettling surge in activity and a refined set of tactics, techniques, and procedures (TTPs) that pose a heightened risk to organizations. Cisco...
Experts at SlashNext have uncovered a perilous phishing technique known as “Unicode QR Code Phishing,” which warrants close scrutiny. This sophisticated method circumvents traditional security measures and jeopardizes users, granting...
According to a recent report by experts at Arkose Labs, there has been a noticeable surge in the use of the tool Greasy Opal within cyberspace, which facilitates sophisticated attacks,...
Support Securityonline.info site. Thanks!
