Sunday, April 26, 2026
HomeUncategorized

Uncategorized

Arizona Woman Sentenced for Helping North Korean Hackers

Christina Marie Chapman, a 50-year-old Arizona woman, received a 102-month prison sentence for orchestrating a sophisticated fraud scheme that helped North Korean IT workers infiltrate over 300 U.S. companies while posing as American citizens and residents. The operation generated more than $17 million in...

Salesforce Vulnerabilities Expose Systems to RCE Attacks — Apply Patches Now

Salesforce has disclosed multiple critical security vulnerabilities affecting Tableau Server installations worldwide, with the most severe vulnerabilities enabling remote code execution and unauthorized database access. The vulnerabilities, addressed in the June 26, 2025 maintenance release, pose significant risks to organizations using affected versions of...

UNC3944 Cyberattack – Targeting VMware vSphere to Deploy Ransomware and Steal Data

Threat-hunting teams are warning that the financially motivated group UNC4, also tracked as 0ktapus, Octo Tempest, and Scattered Spider, has transitioned from credential-harvesting campaigns to a full-blown assault on virtualization stacks. Google’s Threat Intelligence Group states that the actors are now “living off the land” within VMware vSphere, exfiltrating Active Directory...

US Offers Up to $15 Million for Information on Three North Korean Officials Linked to IT Schemes

The United States government launched coordinated enforcement actions Friday targeting North Korean revenue generation schemes, offering substantial rewards for information leading to the arrest of key officials involved in illicit activities. The comprehensive operation involves the Departments of State, Justice, and Treasury working together...

Multiple Vulnerabilities in Tridium Niagara Framework Allow Attackers to Exfiltrate Sensitive Network Data

Critical vulnerabilities in Tridium's Niagara Framework®, a widely-used software platform that connects and manages diverse devices in building automation, industrial control systems, and smart infrastructure environments. These vulnerabilities, if exploited under specific conditions, could allow attackers to compromise entire Niagara systems and collect sensitive...

Critical Vulnerabilities in VMware Tools VGAuth Component Allow Attackers to Gain Full System Access

A critical vulnerabilities in VMware Tools that could allow attackers with basic user access to escalate privileges to full system control. The vulnerabilities, discovered by penetration tester Sergey Bliznyuk from PT Security, affect the VMware Guest Authentication Service (VGAuth) component and have been assigned...