Cyber News

UNC1151 Targets Polish Entities via Roundcube Vulnerability in Spearphishing Campaign

A highly targeted spear phishing campaign has struck Polish organizations this week, leveraging a known Roundcube webmail vulnerability (CVE-2024-42009) to…

11 months ago

Wireshark Vulnerability Allows DoS Attacks Through Malicious Packet Injection

Wireshark, the world’s most recognized and widely used network protocol analyzer, has recently come under scrutiny following the discovery of…

11 months ago

Hackers Use Stealth Syscalls to Bypass EDR and Event Tracing

Researchers recently uncovered that the attackers are deploying advanced techniques to evade even the most secured security environments. The latest…

11 months ago

China Alleges Taiwan, Backed by the U.S., Is Behind Advanced Persistent Threat Operations

Chinese cybersecurity agencies, backed by leading research labs and security firms, have publicly accused Taiwan’s Information, Communications and Electronic Force…

11 months ago

Hackers Leverage Stealth Syscalls Technique to Bypass Event Tracing and EDR Systems

In a striking escalation of attack sophistication, advanced threat actors are now leveraging “stealth syscalls” to systematically evade Windows security…

11 months ago

Fake WordPress Caching Plugin Steals Admin Credentials, Experts Warn Site Owners

Cybersecurity analysts have issued a stark warning to WordPress site owners after uncovering a sophisticated fake caching plugin, dubbed wp-runtime-cache, that…

11 months ago

Iranian APT ‘BladedFeline’ Evades Detection for 8 Years Inside Targeted Networks

A previously little-known Iranian advanced persistent threat (APT) group dubbed “BladedFeline” has been quietly operating inside high-value Middle Eastern networks…

11 months ago

Dell PowerScale Vulnerability Allows Unauthorized Filesystem Access

Dell Technologies has recently disclosed a significant security vulnerability impacting its widely deployed PowerScale OneFS storage solution, alerting organizations worldwide…

11 months ago

New ViperSoftX Variant Boosts Modularity, Stealth, and Persistence Capabilities

Threat intelligence teams began tracking an evolution in the PowerShell-based ViperSoftX malware family, which has rapidly gained notoriety across underground…

11 months ago

Alleged Insider Leaks Odoo Employee Database For Sale On Dark Web Forum

Odoo, one of the world’s most prominent providers of open-source business management software, has reportedly suffered a significant data breach,…

11 months ago