Security Intelligence
North Korean hackers, posing as IT workers, extorting Western firms
North Korean hackers begin extorting unsuspecting Western companies that mistakenly hire them.
Security Intelligence
Critical SolarWinds vulnerability actively exploited
CISA warns threat actors actively exploiting two-month-old critical vulnerability in SolarWinds Web Help Desk.
Security Intelligence
FBI’s fake cryptocurrency company used to bust crypto manipulators
FBI's own cryptocurrency token and company leads to the arrests.
Security Intelligence
8-month-old Fortinet RCE vulnerability actively exploited
CISA warns threat actors actively exploiting critical Fortinet vulnerability.
Security Intelligence
Mozilla releases emergency patch for actively exploited zero-day
Mozilla has releases emergency patch to address actively exploited zero-day vulnerability in its Firefox browser.
Security Intelligence
Emerging Mamba 2FA phishing kit biting M365 user accounts
New phishing-as-a-service (PhaaS) platform, Mamba 2FA, surfaces threatening Microsoft 365 user accounts.
Security Intelligence
High-severity zero-day vulnerability in Qualcomm chips actively exploited
Qualcomm releases update to address an actively exploited zero-day vulnerability impacting dozens of its chipsets used...
Security Intelligence
Apple fixes flaw that dictates passwords out loud
Apple has addressed two flaws, including one that allows iPad and iPhone users’ passwords to be read out loud by the...
Security Intelligence
These aren’t your grandmother’s ‘warm cookies’
SocGolish observed targeting users in France with fake browser updates that install WarmCookie backdoor.
Security Intelligence
Golden Chickens lays ‘More_eggs’ malware
Golden Chickens observed leveraging job-themed lures to compromise human resources employees with ‘More_eggs’ backdoor.
Security Intelligence
Operation Cronos continues game of whack-a-mole with LockBit
The Operation Cronos Task Force arrests four suspects linked to the prolific ransomware gang LockBit.
Security Intelligence
NK-based APT compromises German missile manufacturer via phishing scam
North Korean state-sponsored cyber actors Kimsuky blamed for compromise of German missile and ammunition manufacturer...