Threat Actor: Pharanos Cyber Army (PCA) Victim: Ukrainian Government-Controlled Systems Information: 🌟 PCA claims to have successfully breached a system operated by private companies and ISPs within Ukraine. 🌟 The Ukrainian government is allegedly engaging in surveillance of its citizens. 🌟 The Ukra…
Summary: Binarly has closed a $10.5M seed financing round to further expand its AI-powered firmware and software supply chain security platform. Key Point: * Binarly raised $10.5M in Seed funding led by Two Bear Capital. * The company plans to use the funds to expand its engineering team and scale a…
Summary: Retail chain Hot Topic was hit by new credential stuffing attacks in November, exposing customers’ personal information and partial payment data. Key Point: * Cybercriminals used automated tools to trigger login attempts on Hot Topic Rewards accounts. * Sensitive information such as names,…
____________________ Summary: CISA has issued a notice for the long-awaited critical infrastructure reporting requirements, which will require covered entities to report cyber disruptions and ransomware payments promptly. Key Point: * Covered entities must report significant cyber incidents within 7…
____________________ Summary: Google’s latest research shows a significant increase in zero-day vulnerabilities exploited by attackers in enterprise-specific software and appliances compared to previous years. Key Point 🛡️: – The number of found and exploited enterprise-specific technology zero-day…
Summary: Nvidia’s ChatRTX bot has been patched for security vulnerabilities, including privilege escalation and remote code execution, in its latest update. Key Point 🛡️: – CVE‑2024‑0083 vulnerability could lead to denial of service attacks, data theft, and remote code execution. – CVE‑2024‑0082 vul…
Threat Actor: Just Evil Victim: UK Defense Personnel employed by BAE Systems Information: – 📌 Just Evil hacking collective claims to have access to sensitive data from UK defense service personnel. – 📌 The group allegedly obtained personal information such as resumes, certifications, and job roles….
Summary : UnitedHealth Group has admitted that patient data was taken in a mega attack, leading to a significant breach of sensitive personal, financial, and health information. Key Point : ⭐ The U.S. Department of State is offering a reward of up to $10 million for information on the ransomware gro…
Summary : A decade-old Linux bug in the ‘wall’ command allows attackers to create fake SUDO prompts and steal passwords. Key Point : 🔒 Exploiting the vulnerability requires access to a Linux server with multiple users connected. 🛡️ The vulnerability can be exploited by creating fake SUDO prompts on…
Summary: Bedrock Security, a data security company, raised $10M in Seed funding to expand operations and development efforts. Key Point 🛡️: – Bedrock Security raised $10M in Seed funding led by Greylock. – The company provides a data security platform empowered by AI reasoning engine (AIR) for moder…
____________________ Summary: Apple users are being targeted by a campaign that bombards them with phony password reset requests, leading to potential security risks. Key Point 🚨 – Users are flooded with password reset requests, causing inconvenience and potential security breaches. – Scammers are s…
Summary : Cisco released patches to address high-severity flaws in IOS and IOS XE software, including vulnerabilities that could lead to denial-of-service attacks. Key Point : 🔒 CVE-2024-20311 – Vulnerability in LISP feature can cause device reload. 🔒 CVE-2024-20314 – Vulnerability in SD-Access fabr…
Hot Topic suffered credential stuffing attacks that exposed customers’ personal information and partial payment data. Hot Topic, Inc. is an American fast-fashion company specializing in counterculture-related clothing and accessories, as well as licensed music. The company was the victim of credential stuffing attacks against its website and mobile application on November 18-19 and November 25, 2023. The attackers detected suspicious login activity […]
This educational session introduces the concept of Privileged Access Management (PAM), focusing on why securing privileged accounts is crucial in today’s cybersecurity landscape. The session covers the challenges associated with managing privileged accounts, the risks they pose, and how CyberArk, a…
This video dives into the analysis of a malware sample involving UAC (User Account Control) bypass techniques. It provides a detailed walkthrough of static and dynamic malware analysis processes, including insights into threat intelligence using tools like any.run. The content focuses on dissecting…