Ongoing exploitation of VMware ESXi vulnerability CVE-2024-37085
A vulnerability in VMware’s ESXi virtualization platform, identified as CVE-2024-37085, continues to leave thousands of servers susceptible to ransomware attacks. Despite ongoing exploitation by cybercriminals and warnings from...
False File Immutability (FFI) Vulnerability
A newly discovered vulnerability class, termed “False File Immutability” (FFI), has been identified by Gabriel Landau of Elastic Security, exposing a significant flaw in Windows Code Integrity (CI)....
Rapid7 Unveils Kimsuky APT Group’s Evolving Tactics
Rapid7, a leading cybersecurity firm, has released an in-depth report on the Kimsuky advanced persistent threat (APT) group, a North Korean state-sponsored actor. Known for targeting government, research,...
WhatsApp Messenger for Android vulnerability allows malicious apps to disguise as PDF files
In a recent discovery that has raised concerns within the cybersecurity community, malware analyst @0x6rss identified a significant security issue in WhatsApp Messenger for Android. This vulnerability allows...
Ransomware saga: Change Health’s exploits
After paying a staggering $22 million ransom to safeguard sensitive patient data, a new threat emerged in the form of RansomHUB, demanding $20 million to prevent the public...
Cybercrime kingpin Vladimir Dunaev pleads guilty: Trickbot’s mastermind faces 35 years in prison
In a landmark development in the battle against cybercrime, Russian national Vladimir Dunaev, the mastermind behind the notorious Trickbot malware, has pleaded guilty to orchestrating cyber-attacks on American...
Unveiling the Shadows: Kaspersky Security Bulletin 2023 Exposes Alarming Cyber Threats
The Kaspersky Security Bulletin 2023 provides key insights into the ever-changing cybersecurity landscape, highlighting trends and challenges. Discover the staggering figures of cyber attacks and the rise of...
Tracking the Development of SysJoker: A Cross-Platform Backdoor Used in Attacks Against Israel
Check Point Research has discovered a new variant of the SysJoker backdoor malware, believed to be used by a Hamas-linked hacker group to target Israel. This blog post...