The U.S. Department of Justice (DoJ) announced the indictment of a 38-year-old Chinese national and a California resident of allegedly stealing proprietary information from Google while covertly working for two China-based tech companies.
Linwei Ding (aka Leon Ding), a former Google engineer who was arrested on March 6, 2024, “transferred sensitive Google trade secrets and other confidential
JetBrains released patches for two TeamCity authentication bypass vulnerabilities (CVE-2024-27198 and CVE-2024-27199), and public exploit code led to active exploitation observed from March 5, 2024. Cyble observed weaponization, internet-exposed instances, and…
The fallout from the devastating hacker attack on IT provider Xplain continues as the Swiss National Cyber Security Centre (NCSC) publishes a detailed report on the leaked data. The report reveals both the scope of the breach and the complex challenges faced by authorities in analyzing the massive t…
Crypters—tools that encrypt, obfuscate, or otherwise modify malware—are widely used to help threat actors evade detection and deliver final payloads, offered as open-source projects, private builds, or subscription-based Crypter-as-a-Service. The report detail…
Facebook messages are being used by threat actors to a Python-based information stealer dubbed Snake that’s designed to capture credentials and other sensitive data.
“The credentials harvested from unsuspecting users are transmitted to different platforms such as Discord, GitHub, and Telegram,” Cybereason researcher Kotaro Ogino said in a technical report.
Details about the campaign&
Threat actors have been leveraging fake websites advertising popular video conferencing software such as Google Meet, Skype, and Zoom to deliver a variety of malware targeting both Android and Windows users since December 2023.
“The threat actor is distributing Remote Access Trojans (RATs) including SpyNote RAT for Android platforms, and NjRAT and DCRat for Windows
Victim: Merchant ID Country : ID Actor: ransomhub Source: http://ransomxifxwc5eteopdobynonjctkxxvap77yqifu2emfbecgbqdw6qd.onion/8a31a2b8-594e-48f3-88d0-b674bb83d0a3/ Discovered: 2024-03-07 14:58:07.361284 Description: Visits: 22 Data Size: 50GB Published: False…
In a recent eye-opening report from cybersecurity experts at Perception Point, a major spike in sneaky online attacks has been uncovered. These attacks, called Business Email Compromise (BEC), zoomed up by a whopping 1,760% in 2023. The bad actors behind these attacks are using fancy tech called gen…
2024 will redefine CISO leadership while acknowledging the management gap.
Pet retail giant PetSmart is warning some customers their passwords were reset due to an ongoing credential stuffing attack attempting to breach accounts. […]
Hackers have started to exploit the critical-severity authentication bypass vulnerability (CVE-2024-27198) in TeamCity On-Premises, which JetBrains addressed in an update on Monday. […]
Planet Stealer is a Go-based information-stealing Trojan marketed as malware-as-a-service and used by multiple actors in recent campaigns. It collects browser data, credentials, and other sensitive information, exfiltrating it via HTTP C2 and Telegram, with sa…
A Japanese ministry blames a shared Active Directory between merged tech companies Line and South Korea’s Naver for a massive data breach last November.
"Spinning YARN" cyberattackers wielding a Linux webshell are positioning for broader cloud compromise by exploiting common misconfigurations and a known Atlassian Confluence bug.
Hackers are conducting widescale attacks on WordPress sites to inject scripts that force visitors’ browsers to bruteforce passwords for other sites. […]