News

U.S. Indicts 14 North Koreans in Fake IT Worker Scheme

The 14 indicted North Koreans generated at least $88 million over six years.

After Salt Typhoon Hack, Wyden Calls For Telecom Security Mandates

Under Wyden's proposed bill, the Federal Communications Commission (FCC) would be required to issue security mandates for telecoms systems, aimed at preventing "unauthorized interceptions"

Threat Actors Exploit Flaw in Cleo File Transfer Tools ‘En Masse’

Threat actors are exploiting a vulnerability (CVE-2024-50623) in Cleo file transfer tools.

Russian APT Secret Blizzard Piggybacks on Other Groups' Infrastructure

The FSB-affiliated group has taken over other APT teams' C2 servers and tools

U.S. Officials Tell Americans to Use Encrypted Apps as Scope of Cyberattack Grows

At least eight U.S. telecom firms and dozens of nations have been tied up in the unprecedented Salt Typhoon attack, according to new details from U.S. officials.

Solana's Web3.js Library Compromised in Supply Chain Attack

Two unauthorized library versions - 1.95.6 and 1.95.7 - have since been unpublished, and Solana app developers should upgrade to version 1.95.8

Attacks Target Cisco ASA Flaw From 2014

The flaw is a cross-site scripting vulnerability and a botnet has been seen exploiting it

FTC Prohibits Two Data Brokers From Selling Sensitive Location Data

The FTC is cracking down on data brokers Gravy Analytics Inc. and Mobilewalla, alleging they tracked and sold sensitive location data linked to places like medical or religious facilities, without consent.

Global Crackdown on Cybercrime Nets 5,500 Arrests

Zabbix Warns of Critical SQL Injection Flaw

The Zabbix vulnerability could allow attackers to escalate privileges and take over vulnerable Zabbix servers.

Inside ExxonMobil's Alleged Hack-for-Hire Campaign Targeting Climate Activists

Exxon Lobbyist Under Investigation for Hacking and Leaking Environmentalist Emails

Russian Group RomCom Used Firefox, Windows Zero Days in Recent Attacks

The RomCom attackers used two zero days to target companies worldwide