Microsoft Warns of Malvertising Scheme Spreading CACTUS Ransomware
Microsoft has warned of a new wave of CACTUS ransomware attacks that leverage malvertising lures to deploy DanaBot as an initial access vector.
Browsing Category
Cyber Security
Iranian Hackers Exploit PLCs in Attack on Water Authority in US
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) revealed that Iranian Hackers target the Municipal Water Authority of Aliquippa in US.
Exploit for Critical Windows Defender Bypass Goes Public
Microsoft issued a patch for the issue in its security update, but the bug was already under active exploit at the time as a zero-day.
Microsoft Releases Patch Updates for 5 New Zero-Day Vulnerabilities
Microsoft has released fixes to address 63 security bugs in its software for the month of November 2023, including three vulnerabilities.
HelloKitty Ransomware Group Exploiting Apache ActiveMQ Vulnerability
A warning of suspected exploitation of a recently disclosed critical security flaw in the Apache ActiveMQ open-source message broker service.
Iranian Group Tortoiseshell New Wave of IMAPLoader Malware Attacks
Iranian threat actor known as Tortoiseshell has been attributed to a new wave of watering hole attacks designed to deploy malware dubbed IMAPLoader.
Hackers Stole Access Tokens from Okta Support Unit
Okta has suffered a security breach involving a compromise of its customer support unit, after the hackers access to Okta’s support platform.
Adobe Acrobat Reader Vuln Now Under Attack
Exploited vulnerabilities reported in adobe acrobat and reader document. The use-after-free vuln allows an attacker to remotely execute malicious code.
Suspected Crime Gang Hacks Israeli President’s Telegram Account
Israeli president’s residence said the hack appeared to be criminal in nature and related to an online scam, suggesting it was neither carried out by a hostile…
Apple Patch Zero-Day Flaws Exploited for Pegasus Spyware on iPhones
Apple released security updates for iOS, iPadOS, macOS, and watchOS to address two zero-day flaws that have been exploited to deliver Pegasus spyware.