News
  • "Apple Patches WebKit Code Execution in iPhones, MacBooks"

    Apple’s product security response team recently rolled out patches to cover numerous serious security vulnerabilities affecting users of its flagship iOS and macOS platforms.  Apple warned that the most serious documented vulnerabilities affect…

  • "Attacks Targeting Realtek SDK Vulnerability Ramping Up"

    Palo Alto Networks recently warned of an increase in cyberattacks targeting CVE-2021-35394, a remote code execution (RCE) vulnerability in the Realtek Jungle SDK.  The vulnerability was disclosed in August 2021, and the vulnerability impacts…

  • "Record-Breaking Year for DDoS Attacks Targeting Russia"

    According to Russia's largest internet service provider, Russian organizations were deluged with web and DDoS attacks last year in a bid to disrupt operations, deface websites, and "sow panic." Rostelecom said in a new report that in 2022 it recorded "a…

  • "Up to 350,000 Open-Source Projects Vulnerable to 15-Year-Old Python Bug"

    A 15-year-old Python vulnerability has impacted hundreds of thousands of open-source projects over the course of its existence. The vulnerability, tracked as CVE-2007-4559, is a path traversal flaw in the extract and extractall functions of the Python…

  • "Companies Impacted by Mailchimp Data Breach Warn Their Customers"

    Multiple organizations have been hit by the recent Mailchimp data breach, with some already notifying their customers. Mailchimp, a popular email marketing and newsletter creation platform, revealed facing a data breach that exposed the personal…

  • "Hunting Insider Threats on the Dark Web"

    Malicious employees have been found to be responsible for 20 percent of security incidents. Attacks carried out by insiders are 10 times larger, on average, than those carried out by external actors. All organizations should monitor marketplaces,…

  • "Hackers Use Golang Source Code Interpreter to Evade Detection"

    A Chinese-speaking hacking group called DragonSpark was seen using Golang source code interpretation to avoid detection while conducting espionage attacks against East Asian companies. SentinelLabs is monitoring the attacks and reports that DragonSpark…

  • "FBI Says North Korean Hackers Behind $100 Million Horizon Bridge Crypto Theft"

    The FBI has confirmed that North Korean threat actors stole $100 million in cryptocurrency assets from the Harmony Horizon Bridge in June 2022. According to the law enforcement agency, the hack was attributed to the Lazarus Group and APT38, the latter of…

  • "Organizations Not Prepared for Cyber Warfare"

    Russia has been at war with Ukraine for nearly a year, and while the conflict has moved to the cyber world, many organizations continue to underestimate its intensity. According to an Armis survey of over 6,000 Information Technology (IT) and security…

  • "GTA V Vulnerability Exposes PC Users to Partial Remote Code Execution Attacks"

    Grand Theft Auto V (GTA V), a popular video game, has been found to contain a vulnerability that could enable partial Remote Code Execution (RCE). Hackers initially exploited the flaw to get to higher levels in the game and ban other users. However, it…

  • "A Hack at ODIN Intelligence Exposes a Huge Trove of Police Raid Files"

    Detailed tactical plans for upcoming police raids, confidential police reports describing crimes and suspects, and a forensic extraction report describing the contents of a suspect's phone were compromised following a recent hack and defacement of the…

  • "International Counter Ransomware Task Force Kicks Off"

    An international task force aimed at combating ransomware, which was unveiled at a White House event in November 2022, has officially begun operations, according to the Australian government. The mission of the International Counter Ransomware Task Force…