A recent blog by security researcher Hossam Ehab has detailed an advanced technique for process injection through manipulation of the Kernel Callback Table within the Process Environment Block (PEB) on...
Cisco Talos, the threat intelligence and research arm of Cisco, has exposed a sophisticated espionage-focused threat actor known as LilacSquid (UAT-4820). This advanced persistent threat (APT) group has been operating...
In a serious development, CISA has added a high-severity Windows Kernel vulnerability (CVE-2024-21338) to its Known Exploited Vulnerabilities catalog. Threat actors have been actively leveraging this flaw to gain privileged...
Security researchers at Phylum have been tracking a sophisticated cyber campaign involving a series of npm packages since November. These packages, upon installation, execute a complex chain of actions –...
Kaspersky Lab has unveiled a comprehensive analysis of the operations of Asian cyber espionage groups conducting espionage activities globally. The experts examined approximately a hundred incidents linked to these groups,...
In recent months, the Lazarus group, a notorious cyber threat actor, has shown increased activity, exploiting software vulnerabilities to compromise systems. While the vulnerabilities themselves were not new, what is...
The Lazarus Group, a high-profile Korean-speaking threat actor, has long targeted cryptocurrency-related businesses. However, recent Kaspersky reports indicate an evolution in their tactics, techniques, and procedures, with shifts in targets...
Support Securityonline.info site. Thanks!
