Attackers have targeted clients of stock-trading broker Robinhood with a phishing campaign planned to steal their credentials and spread malware utilizing counterfeit tax documents, the organization has cautioned. Robinhood Markets, Inc. is an...
GitHub launched an investigation in a series of attacks aimed at abusing its infrastructure to illicitly mine cryptocurrency. Such kind of attacks were reported at least since the end of 2020. click here to...
Cloud security company Qualys said that follow-up investigations have confirmed that the data breach it suffered in late 2020 and early 2021 was limited to customer data housed on third-party service provider Accellion’s file...
Cisco on Wednesday released software updates to address multiple vulnerabilities affecting its Jabber messaging clients across Windows, macOS, Android, and iOS. Successful exploitation of the flaws could permit an “attacker to execute arbitrary programs...
The SolarWinds supply chain attackers manipulated OAuth app certificates to maintain persistence and access privileged resources including email, according to researchers at Proofpoint. click here to read full Article Read more on Malware updates...
Microsoft has updated its Defender Antivirus to mitigate the ProxyLogon flaw on vulnerable Exchange Servers automatically, while the Cybersecurity and Infrastructure Security Agency (CISA) has released CHIRP, a forensic tool that can help defenders...
Cyberattacks have become increasingly sophisticated in the past year, with the SolarWinds hack unlikely to be an isolated event, according to VMware’s 2021 Global Cybersecurity Outlook report. click here to read full Article Read...
Chrome 89.0.4389.72, released for Windows, Mac, and Linux on Tuesday, comes with a total of 47 security fixes, the most severe of which concerns an “object lifecycle issue in audio.” Click here for image...
After a security researcher published the PoC exploit code targeting a critical vCenter RCE vulnerability, attackers are now actively scanning for vulnerable Internet-exposed VMware servers. Click here for image source link and to read...
We all know that the attack surface has expanded because of the sudden shift to work from home, and now, this has given a boost to Remote Desktop Protocol (RDP) attacks. Click here for...
Cybersecurity researchers have disclosed a novel attack that could allow criminals to trick a point of sale terminal into transacting with a victim’s Mastercard contactless card while believing it to be a Visa card. The research,...
Security experts stumbled across an unusual DNS query that eventually led to the discovery of a multi-step obfuscated malware using nslookup.exe to hide the actual malicious intent. Click here for image source link and...
Threat actors behind a distributed denial-of-service campaign targeted the same set of victims again after the organizations failed to pay the initial ransom, as per a new report by Radware. Click here for image...
In the year 2020, cyber attackers focused more on ransomware, while the consolidation of data into large databases led to fewer reported breaches but more records leaked. Click here for image source link and...
Researchers shed light on how a cybercriminal group is trying to step into bigger shoes by collaborating with attackers behind the Clop ransomware in its recent operations. Click here for image source link and...
This hybrid campaign combines the benefits of scale and legitimacy by leveraging Google Services with social engineering attacks, more commonly associated with BEC schemes. Click here for image source link and to read full...
