A Russian APT group has launched a sophisticated credential harvesting campaign targeting Transnistria’s governing body using disguised official emails and malicious HTML attachments. The operation forms part of a broader espionage effort focused on European and NATO-aligned entities. #RussianAPT #Transnistria…
Category: Cyber Security News
A cyber espionage group called “Forum Troll” has shifted its focus from corporate networks to targeting Russian political scientists and economists through sophisticated phishing campaigns. This campaign featured personalized social engineering and utilized known commercial red-teaming tools to infiltrate high-profile individuals. #ForumTroll #RussianAcademics…
Wireless biometric authentication technology is revolutionizing enterprise security by significantly reducing login times and boosting productivity while preventing credential-based attacks. This innovative approach offers a measurable financial return from day one, making it a compelling alternative to traditional MFA methods. #TokenRing #TokenBioStick
A recent cybersecurity incident involved hackers exploiting the critical React2Shell vulnerability (CVE-2025-55182) to gain access and deploy Weaxor ransomware rapidly. This attack highlights the urgency for system administrators to review security logs and patch vulnerabilities proactively. #React2Shell #WeaxorRansomware
SonicWall has issued a warning about a critical security vulnerability in the SMA1000 Appliance Management Console (AMC) that has been exploited in zero-day attacks. Users are urged to upgrade to the latest hotfix to mitigate the risk of remote code execution and privilege escalation. #SonicWall #CVE2025-40602 #ZeroDayExploits
Operation ForumTroll is a sophisticated phishing campaign targeting individuals in Russia, utilizing zero-day Chrome vulnerabilities to deliver backdoors and spyware. The campaign features personalized emails and uses strategically aged domains to avoid detection, with ongoing threats observed since 2022. #OperationForumTroll #LeetAgent #Dante #Tuoni…
APT28, also known as Fancy Bear, has conducted a sustained credential-harvesting campaign targeting Ukrainian users through phishing emails and malicious links. The campaign reflects Russia’s strategic efforts to gather intelligence during the ongoing conflict in Ukraine. #APT28 #FancyBear #GRU #Ukraine #CredentialTheft…
Law enforcement agencies across Europe have successfully dismantled a large-scale fraud network operating call centers in Ukraine, resulting in over $11.7 million in victim losses. The criminal organization used sophisticated tactics, including impersonation and remote-access software, to deceive victims into transferring funds. #UkraineCallCenters #FraudRing…
The transportation industry is increasingly experiencing cyber-enabled cargo theft, which often leads to physical theft of goods. Attackers leverage hacking, social engineering, AI, and stolen data to divert shipments, with a growing emphasis on cyber tactics in criminal operations. #NMFTA #CyberEnabledTheft…
Microsoft has issued a warning urging businesses to seek advice on a MSMQ issue affecting enterprise applications and IIS sites following certain security updates. The problem involves permission changes to MSMQ directories, causing application failures and resource errors, with Microsoft working on a fix. #MSMQ #WindowsUpdate
Fortinet has revealed a vulnerability in multiple products, including FortiOS, FortiSwitchMaster, FortiProxy, and FortiWeb, due to improper cryptographic signature verification. This flaw could allow attackers to bypass cloud login authentication using crafted SAML messages. #FortiOS #CryptographicVulnerability…
This article details a critical vulnerability in Hitachi Energy’s AFS, AFR, and AFF series that can lead to data integrity issues and system disruptions. The flaw involves a forgery attack on the RADIUS protocol, affecting multiple product versions worldwide. #HitachiEnergy #CVE-2024-3596…
This article discusses a vulnerability in Mitsubishi Electric’s GT Designer3 software that allows attackers to obtain plaintext credentials from project files, potentially leading to unauthorized operation of GOT2000 and GOT1000 series devices. Protective measures and best practices are recommended to mitigate the risks associated with this vulnerable software. #CVE-2025-11009 #CWE-312 #MitsubishiElectric…
A Russia-linked hacker group has been exploiting vulnerabilities in edge devices of critical infrastructure sectors since 2021, focusing on credential harvesting and lateral movement. The campaign is linked to Russia’s GRU and aims mainly at energy, telecommunications, and cloud organizations in North America, Europe, and the Middle East. #Sandworm #GRU…
A photo kiosk company, Hama Film, faced a security breach that exposed hundreds of customer photos due to a basic vulnerability. This incident highlights the importance of proper data protection measures and prompt response to security threats. #HamaFilm #PhotoKioskSecurity…