Ashish Gupta – Jammu and Kashmir Government Ashish Gupta has been designated as Chief Information Security Officer for the Department…
News
Key Takeaways Evolved Tactics: The HoneyMyte APT group now uses a kernel-mode rootkit driver signed with a stolen digital certificate…
Key Takeaways Critical Authentication Bypass: A major flaw could allow complete account takeover for any user with a Google login,…
Key Takeaways Critical vulnerability: A significant security flaw has been identified in MongoDB, allowing attackers to read uninitialized heap memory…
Key Takeaways Massive compensation: Coupang announced $1.2 billion compensation plan for the 33.7 million customers initially said to be affected…
We see a recurring pattern across recent cybersecurity incidents where trust, and identity controls are being exploited across government systems,…
Key TakeawaysVersion-specific incident: Only Trust Wallet Browser Extension version 2.68 is affected.Immediate mitigation: Users are urged to disable the extension…
Key TakeawaysActive exploitation: Fortinet says attackers are abusing a long-standing SSL VPN flaw.Authentication protections: Misconfigurations can allow logins without completing…
Key TakeawaysSophisticated TTPs: The Evasive Panda APT utilizes advanced techniques, including DNS poisoning and adversary-in-the-middle (AitM) attacks.Geographic focus: The campaign…
Key TakeawaysDeceptive distribution: The WebRAT malware is being distributed through GitHub repositories disguised as PoC exploits for high-severity flaws.Targeted audience:…
Key TakeawaysAntitrust penalty: Italy's competition authority fined Apple €98.6 million for abusing its dominant market position through the App Tracking…
Key Takeaways Service paralysis: A suspected DDoS attack disrupted La Poste's websites and mobile apps, causing significant delays in parcel…
Key Takeaways Operation disruption: The Department of Justice seized a database containing stolen user credentials used to facilitate unauthorized bank…
Key Takeaways Deceptive VPN service: Two extensions, active since 2017, masquerade as a legitimate VPN service, tricking users into paying…
Key Takeaways Widespread disruption: 1,000 computer systems were compromised in a Romanian Water Agency attack, forcing a return to communication…
Key Takeaways Vendor-related breach: A server managed by Red Hat, a third-party vendor developing a customer management system for Nissan,…
Windscribe Anonymous Account: Login uses a 32-character hash, no email, username, or password required. Privacy-focused design: Reduces personal data storage,…
Vlad Korsunsky – Tenable HoldingsVlad Korsunsky has been named Chief Technology Officer and Managing Director of Tenable Israel, where he…
Key Takeaways High impact: The NPM package lotusbail, downloaded over 56,000 times, functions as a malicious backdoor that steals WhatsApp…
NordVPN & Saily Finds Loyalty Accounts Theft: Thousands of airline and hotel loyalty accounts sold cheaply on dark web forums.…
Get expert insights on threats, breaches, scams, and security trends — delivered every Saturday.
Most Popular