Security Intelligence
RedLine and META MaaS platforms disrupted, mastermind charged
DoJ charges Russian national for leading operations for two malware-as-a-service (MaaS) platforms.
Security Intelligence
U.S. telecoms breached by China-linked hackers
FBI and CISA advises China-linked threat actors have breached several U.S. telecoms.
Security Intelligence
Critical SonicWall vulnerability exploited by ransomware groups
Several cybersecurity researchers are advising that the Fog and Akira ransomware groups are actively exploiting a...
Security Intelligence
FortiJump: Threat actor exploits zero-day in Fortinet's FortiManager
Zero-day vulnerability in Fortinet's FortiManager actively exploited by UNC5820 since June 2024.
Security Intelligence
Unmasking Braodo: Inside the operations of a relentless info stealer
Field Effect security intelligence analysts provide insight into the features of the Braodo info stealer.
Security Intelligence
Roundcube Webmail flaw actively exploited
Threat actors exploiting XSS vulnerability in Roundcube Webmail, allowing them to steal email credentials and messages...
Security Intelligence
North Korean hackers, posing as IT workers, extorting Western firms
North Korean hackers begin extorting unsuspecting Western companies that mistakenly hire them.
Security Intelligence
Critical SolarWinds vulnerability actively exploited
CISA warns threat actors actively exploiting two-month-old critical vulnerability in SolarWinds Web Help Desk.
Security Intelligence
FBI’s fake cryptocurrency company used to bust crypto manipulators
FBI's own cryptocurrency token and company leads to the arrests.
Security Intelligence
8-month-old Fortinet RCE vulnerability actively exploited
CISA warns threat actors actively exploiting critical Fortinet vulnerability.
Security Intelligence
Mozilla releases emergency patch for actively exploited zero-day
Mozilla has releases emergency patch to address actively exploited zero-day vulnerability in its Firefox browser.
Security Intelligence
Emerging Mamba 2FA phishing kit biting M365 user accounts
New phishing-as-a-service (PhaaS) platform, Mamba 2FA, surfaces threatening Microsoft 365 user accounts.