Blog

Cross-Domain Attacks: A Growing Threat to Modern Security and How to Combat Them

In today’s increasingly interconnected world, cybersecurity has become more complex and challenging. Cross-domain attacks, which exploit vulnerabilities across multiple interconnected systems

Title: PLAYFULGHOST Delivered via Phishing and SEO Poisoning in Trojanized VPN Apps.

“PLAYFULGHOST” refers to a cyber threat actor behind a sophisticated campaign that utilizes phishing and SEO poisoning techniques to deliver trojanized

Apache Tomcat Vulnerability CVE-2024-56337 Exposes Servers to RCE Attacks

The Apache Software Foundation (ASF) has released a crucial security update addressing a significant vulnerability in its Tomcat server software, identified

Hackers Exploiting Critical Fortinet EMS Vulnerability to Deploy Remote Access Tools

A now-patched critical security flaw impacting Fortinet FortiClient EMS is being exploited by malicious actors as part of a cyber campaign

Hackers Leveraging Cloudflare Tunnels, DNS Fast-Flux to Hide GammaDrop Malware

The notorious hacker group Gamaredon, also known as BlueAlpha, is using Cloudflare Tunnels to hide their infrastructure hosting the malware GammaDrop.

Researchers Uncover 4-Month Cyberattack on U.S. Firm Linked to Chinese Hackers

Researchers have uncovered a major cyberattack that targeted a U.S. firm for four months. The attack is suspected to have been

Phishing-as-a-Service “Rockstar 2FA” Targets Microsoft 365 Users with AiTM Attacks

Cybersecurity researchers have issued warnings about a new wave of malicious email campaigns leveraging a phishing-as-a-service (PhaaS) toolkit named Rockstar 2FA,

“Researchers Discover “Bootkitty” – First UEFI Bootkit Targeting Linux Kernels”

Cybersecurity researchers have unveiled the first Unified Extensible Firmware Interface (UEFI) bootkit designed specifically for Linux systems. Named “Bootkitty” by its

North Korean Hackers Steal $10M with AI-Driven Scams and Malware on LinkedIn

The North Korea-linked threat actor known as Sapphire Sleet is estimated to have stolen over $10 million worth of cryptocurrency through

NodeStealer Malware Targets Facebook Ad Accounts, Harvesting Credit Card Data

NodeStealer is a type of malware designed to target Facebook ad accounts and steal sensitive user data, including credit card information.