Unveiling UNC1860: Iran’s stealthy cyber threat
In the ever-evolving cybersecurity landscape, state-sponsored threat actors continue to pose significant risks to organizations worldwide. Among them is UNC1860, an Iranian-based cyber espionage group recently exposed by...
TeamTNT resurfaces: cybersecurity experts warn of new cloud server attacks
The notorious hacking group TeamTNT has returned with a new campaign targeting Virtual Private Server (VPS) infrastructures running on the CentOS operating system. This attack highlights the escalating...
Windows MiniFilter vulnerability: a threat to EDR security
Endpoint Detection and Response (EDR) solutions are essential for modern cybersecurity defenses. However, research has revealed a vulnerability in Windows MiniFilter drivers that can be exploited to prevent...
Ghostly cybercrime lair exposed: admin faces charges
In a groundbreaking triumph for law enforcement, the sophisticated encrypted communication platform Ghost has been dismantled in a worldwide operation known as “Kraken.” This international collaboration effectively targeted...
PRC-Linked cyber actors leveraging massive botnet for malicious activities
In a joint cybersecurity advisory, the FBI, Cyber National Mission Force (CNMF), and National Security Agency (NSA) have exposed a significant threat to Internet-connected devices. Chinese hackers have...
Fileless Remcos RAT: a threat to watch out for in weaponized Excel documents
Remcos, a Remote Access Trojan (RAT), has been actively used in cybercriminal campaigns since 2016. Recently, cybersecurity researchers have uncovered a new wave of malware operations involving Excel...
Android malware on the rise: Ajina threatens mobile banking security
The cybersecurity landscape is constantly evolving, with malicious actors developing increasingly sophisticated malware to target users’ devices. Recent advancements in Android malware have taken a concerning turn, as...
Medusa ransomware exploits critical Fortinet vulnerability
The notorious Medusa ransomware group has once again demonstrated its advanced capabilities by exploiting a critical SQL injection vulnerability (CVE-2023-48788) in Fortinet’s FortiClient EMS software. This vulnerability has...