A critical vulnerability (CVE-2024-27198) in the TeamCity On-Premises CI/CD solution from JetBrains can let a remote unauthenticated attacker take control of the server with administrative permissions. […]
Category: Cyber Security News
The hacking group known as TA577 has recently shifted tactics by using phishing emails to steal NT LAN Manager (NTLM) authentication hashes to perform account hijacks. […]
Massachusetts Air National Guard member Jack Teixeira pleaded guilty on Monday to leaking highly classified military documents about the war in Ukraine and other national security secrets under a deal with prosecutors that calls for him to serve at least 11 years in prison. Teixeira, of North Dighto…
Yet challenges remain as many nation’s policies for the email authentication protocol remain lax and could run afoul of Google’s and Yahoo’s restrictions.
In 2023, a majority of African economies witnessed a decline in overall cyber threats, signaling a positive trend. However, notable exceptions were observed, with Kenya experiencing a substantial 68% increase in ransomware attacks, while South Africa encountered a notable 29% surge in phishing incid…
The European Commission has fined Apple €1.8 billion, or approximately $1.95 million, for allegedly abusing its market dominance in music streaming app distribution to prevent developers from promoting cheaper services outside the app. […]
On the financial front, traditional powerhouses like Grayscale, BlackRock, and Fidelity are diving into Bitcoin, earning them the moniker ‘Bitcoin whales.’ These heavyweights are injecting billions into the digital currency, holding a sizable chunk of the finite 21 million bitcoins available.Out of…
The Main Intelligence Directorate (GUR) of Ukraine’s Ministry of Defense claims that it breached the servers of the Russian Ministry of Defense (Minoborony) and stole sensitive documents. […]
The attack that took down a large portion of the City of Hamilton’s digital network is only the latest weapon in a global fight against cybersecurity, claims one of Canada’s leading cybersecurity experts. Regarding the unprecedented attack on the municipality’s network that affected emergency s…
The generative AI systems of the present are becoming more advanced due to the rise in their use, such as Google’s Gemini and OpenAI’s ChatGPT. Tech firms and startups are making AI bits and ecosystems that can do mundane tasks on your behalf, think about blocking a calendar or product shopping. But…
By helping CISOs navigate the expectations being placed on their shoulders, CEOs can greatly benefit their companies.
Authorities in Germany last week announced the takedown of the cybercrime marketplace ‘Crimemarket’ and the arrest of six people believed to be linked with its operations. Crimemarket, authorities say, was the “biggest illegal, German-speaking online trading platform”, enabling miscreants to trade n…
GitHub, a cornerstone for programmers worldwide, faces a severe threat as an unknown attacker deploys an automated assault, cloning and creating malicious code repositories. The attack, involving sophisticated obfuscation and social engineering, poses a significant challenge to GitHub’s security inf…
Cybercriminals are using a network of hired money mules in India using an Android-based application to orchestrate a massive money laundering scheme.
The malicious application, called XHelper, is a “key tool for onboarding and managing these money mules,” CloudSEK researchers Sparsh Kulshrestha, Abhishek Mathew, and Santripti Bhujel said in a report.
Details about the scam
Chinese video surveillance equipment manufacturer Hikvision has announced patches for two vulnerabilities in its security management system HikCentral Professional. The most important of these flaws is CVE-2024-25063, a high-severity bug that could lead to unauthorized access to certain URLs. The bu…