Rapid7’s vulnerability research team identified two new vulnerabilities affecting JetBrains TeamCity CI/CD server: CVE-2024-27198 and CVE-2024-27199, both of which are authentication bypasses.
In 2023, a majority of African economies witnessed a decline in overall cyber threats, signaling a positive trend. However, notable exceptions were observed, with Kenya experiencing a substantial 68% increase in ransomware attacks, while South Africa encountered a notable 29% surge in phishing incid…
The European Commission has fined Apple €1.8 billion, or approximately $1.95 million, for allegedly abusing its market dominance in music streaming app distribution to prevent developers from promoting cheaper services outside the app. […]
The ALPHV/BlackCat ransomware gang has shut down its servers amid claims that they scammed the affiliate responsible for the attack on Optum, the operator of the Change Healthcare platform, of $22 million. […]
On the financial front, traditional powerhouses like Grayscale, BlackRock, and Fidelity are diving into Bitcoin, earning them the moniker ‘Bitcoin whales.’ These heavyweights are injecting billions into the digital currency, holding a sizable chunk of the finite 21 million bitcoins available.Out of…
FortiGuard Labs uncovered CHAVECLOAK, a Brazil-focused banking trojan delivered via a malicious PDF that downloads a ZIP and uses DLL side-loading to run a malicious Lightshot.dll. The malware establishes persistence, checks-in to HTTP C2 servers, monitors for…
The Main Intelligence Directorate (GUR) of Ukraine’s Ministry of Defense claims that it breached the servers of the Russian Ministry of Defense (Minoborony) and stole sensitive documents. […]
The attack that took down a large portion of the City of Hamilton’s digital network is only the latest weapon in a global fight against cybersecurity, claims one of Canada’s leading cybersecurity experts. Regarding the unprecedented attack on the municipality’s network that affected emergency s…
The generative AI systems of the present are becoming more advanced due to the rise in their use, such as Google’s Gemini and OpenAI’s ChatGPT. Tech firms and startups are making AI bits and ecosystems that can do mundane tasks on your behalf, think about blocking a calendar or product shopping. But…
By helping CISOs navigate the expectations being placed on their shoulders, CEOs can greatly benefit their companies.
The National Intelligence Service (NIS) in South Korea warns that North Korean hackers target domestic semiconductor manufacturers in cyber espionage attacks. […]
Authorities in Germany last week announced the takedown of the cybercrime marketplace ‘Crimemarket’ and the arrest of six people believed to be linked with its operations. Crimemarket, authorities say, was the “biggest illegal, German-speaking online trading platform”, enabling miscreants to trade n…
GitHub, a cornerstone for programmers worldwide, faces a severe threat as an unknown attacker deploys an automated assault, cloning and creating malicious code repositories. The attack, involving sophisticated obfuscation and social engineering, poses a significant challenge to GitHub’s security inf…
Cybercriminals are using a network of hired money mules in India using an Android-based application to orchestrate a massive money laundering scheme.
The malicious application, called XHelper, is a “key tool for onboarding and managing these money mules,” CloudSEK researchers Sparsh Kulshrestha, Abhishek Mathew, and Santripti Bhujel said in a report.
Details about the scam
American Express is warning customers that credit cards were exposed in a third-party data breach after a merchant processor was hacked. […]