Blog
“Mysterious Team Bangladesh” Targeting India with DDoS Attacks and Data Breaches
A hacktivist group known as Mysterious Team Bangladesh has been linked to over 750 distributed denial-of-service (DDoS) attacks and 78 website defacements since June 2022. "The group most frequently attacks logistics, government, and financial sector organizations in...
Marine Industry Giant Brunswick Corporation Lost $85 Million in Cyberattack, CEO Confirms
A cybersecurity incident will cost the Brunswick Corporation as much as $85 million, the company’s CEO told investors last week. The boating manufacturing firm disclosed a cyberattack on June 13 that impacted their systems and some facilities.
Researchers Discover Bypass for Recently Patched Critical Ivanti EPMM Vulnerability
Tracked as CVE-2023-35082 (CVSS score: 10.0) and discovered by Rapid7, the issue "allows unauthenticated attackers to access the API in older unsupported versions of MobileIron Core (11.2 and below)."
BlackCat Ransomware Group Claims Tempur Sealy Cyber Attack, Gains Access to General Counsel’s Data
The BlackCat ransomware group left a message on its dark web portal, claiming responsibility for the Tempur Sealy cyber attack. In the message, the ransomware group went on a lengthy rant about the company’s failure to respond to their demands. Tempur Sealy...
Russian Hacker Group ‘Midnight Blizzard’ Behind Microsoft Teams Cyber Attack
In a recent incident involving a Microsoft Teams cyber attack, the tech giant has attributed the malicious campaign to a notorious Russian hacker collective known as Midnight Blizzard hacking group. According to Microsoft researchers, this government-linked hacking...
AI-Powered CryptoRom Scam Targets Mobile Users
CryptoRom, a notorious scam that combines fake cryptocurrency trading and romance scams, has taken a new twist by utilizing generative artificial intelligence (AI) chat tools to lure and interact with victims.
Microsoft Exposes Russian Hackers’ Sneaky Phishing Tactics via Microsoft Teams Chats
Microsoft on Wednesday disclosed that it identified a set of highly targeted social engineering attacks mounted by a Russian nation-state threat actor using credential theft phishing lures sent as Microsoft Teams chats. The tech giant attributed the attacks to a group...
New Variants of NodeStealer Found Infecting Facebook Business Accounts
Unit 42 researchers discovered a previously unreported phishing campaign targeting Facebook business accounts. The campaign distributed new variants of NodeStealer malware that could fully take over these accounts, steal cryptocurrency, and download further payloads....
Researchers Discover Bypass for Recently Patched Critical Ivanti EPMM Vulnerability
Cybersecurity researchers have discovered a bypass for a recently fixed actively exploited vulnerability in some versions of Ivanti Endpoint Manager Mobile (EPMM), prompting Ivanti to urge users to update to the latest version of the software. Tracked...
Performance and security clash yet again in “Collide+Power” attack
It's a real vulnerability, but the data leakage rate can be as low as... let's just say that an IMAX-quality copy of the new "Oppenheimer" movie could take you 4 billion years to exfiltrate.
FREE GUIDE