Latest Technology News
The U.S. Department of Justice (DoJ) has indicted 14 nationals belonging to the Democratic People's Republic of Korea (DPRK or North Korea) for their alleged involvement in a long-running conspiracy …
DoJ Indicts 14 North Koreans for $88M IT Worker Fraud Scheme Over Six YearsRead More
Iran-affiliated threat actors have been linked to a new custom malware that's geared toward IoT and operational technology (OT) environments in Israel and the United States. The malware has been …
Iran-Linked IOCONTROL Malware Targets SCADA and Linux-Based IoT PlatformsRead More
Run by the team at orchestration, AI, and automation platform Tines, the Tines library contains pre-built workflows shared by real security practitioners from across the community, all of which are …
How to Generate a CrowdStrike RFM Report With AI in TinesRead More
Cybersecurity researchers have uncovered a new Linux rootkit called PUMAKIT that comes with capabilities to escalate privileges, hide files and directories, and conceal itself from system tools, while …
New Linux Rootkit PUMAKIT Uses Advanced Stealth Techniques to Evade DetectionRead More
The U.S. Department of Justice (DoJ) on Thursday announced the shutdown of an illicit marketplace called Rydox ("rydox.ru" and "rydox[.]cc") for selling stolen personal information, access devices, …
FBI Busts Rydox Marketplace with 7,600 PII Sales, Cryptocurrency Worth $225K SeizedRead More
Cybersecurity researchers are warning that thousands of servers hosting the Prometheus monitoring and alerting toolkit are at risk of information leakage and exposure to denial-of-service (DoS) as …
Over 300K Prometheus Instances Exposed: Credentials and API Keys Leaking OnlineRead More
The Russia-linked state-sponsored threat actor tracked as Gamaredon has been attributed to two new Android spyware tools called BoneSpy and PlainGnome, marking the first time the adversary has been …
Gamaredon Deploys Android Spyware “BoneSpy” and “PlainGnome” in Former Soviet StatesRead More
Details have emerged about a now-patched security vulnerability in Apple's iOS and macOS that, if successfully exploited, could sidestep the Transparency, Consent, and Control (TCC) framework and …
Researchers Uncover Symlink Exploit Allowing TCC Bypass in iOS and macOSRead More
SaaS services are one of the biggest drivers of OpEx (operating expenses) for modern businesses. With Gartner projecting $247.2 billion in global SaaS spending this year, it's no wonder SaaS budgets …
Malicious actors are exploiting a critical vulnerability in the Hunk Companion plugin for WordPress to install other vulnerable plugins that could open the door to a variety of attacks. The flaw, …
WordPress Hunk Companion Plugin Flaw Exploited to Silently Install Malicious PluginsRead More
