North Korean hackers targeting NPM packages
In recent weeks, the cybersecurity landscape has witnessed a concerning uptick in malicious activities targeting developers through compromised NPM (Node Package Manager) packages. Researchers from Phylum have uncovered...
Zero-day vulnerability CVE-2024-7971 and the threat posed by Citrine Sleet
Recent findings by Microsoft have shed light on a significant cybersecurity threat emerging from North Korea. The discovery of a zero-day vulnerability in the Chromium browser, labeled CVE-2024-7971,...
Hacktivist group exploits WinRAR vulnerability to launch attacks
The hacktivist group Head Mare has made headlines for exploiting a vulnerability in WinRAR to infiltrate and encrypt systems across both Windows and Linux platforms. Active since the...
Voldemort: new wave of Google Sheets exploits
In a concerning development within the cybersecurity landscape, researchers from Proofpoint have identified a sophisticated campaign leveraging Google Sheets as a covert platform for data exfiltration and malware...
The emergence of ManticoraLoader: a new threat in the cybersecurity landscape
In recent weeks, the cybersecurity community has been alerted to the rise of a new Malware-as-a-Service (MaaS) offering known as ManticoraLoader. Developed by the notorious group DeadXInject, which...
A critical vulnerability in Mirai botnet: remote DoS exploit discovered
Recent investigations into the Mirai botnet have unveiled a significant remote denial-of-service (DoS) exploit, identified as CVE-2024-45163. This vulnerability was discovered within the source code of the Mirai...
E-commerce vulnerabilities exposed: the Magento skimmer incident
A recent cyberattack targeting Magento, a widely used e-commerce platform, has raised significant concerns within the cybersecurity community. Hackers have successfully injected a malicious skimmer into Magento stores,...
Emergence of PG_MEM malware targeting PostgreSQL databases
Aqua Nautilus researchers have uncovered a dangerous new malware strain named PG_MEM, specifically designed to exploit the PostgreSQL database management system for illicit cryptocurrency mining. The attack begins...