CISA and partners warn that threat actors are actively exploiting multiple Ivanti Connect Secure and Ivanti Policy Secure vulnerabilities (CVE-2023-46805, CVE-2024-21887, CVE-2024-21893) to achieve unauthenticated RCE, implant web shells, and exfiltrate creden…
Lookout identified a phishing kit, dubbed CryptoChameleon, that builds near-perfect replicas of SSO pages (notably Okta) and uses email, SMS and voice lures to harvest usernames, passwords, MFA tokens, password‑reset URLs and photo IDs from hundreds of mostly …
GUloader is a stealthy malware loader that evades detection through polymorphic code and encryption, enabling persistent infiltration. McAfee Labs details a campaign where a malicious SVG file delivered via email drops a ZIP containing a WSF, which via PowerSh…
Security researchers detail Huntress’s analysis of the ALPHV/BlackCat ransomware affiliate operation, focusing on a ScreenConnect compromise used to deploy BlackCat and move laterally while evading defenses. The report emphasizes embedded RaaS commands to disa…
A scam campaign uses calendar-link phishing via Calendly to deliver macOS malware, with attackers posing as crypto investors to lure victims into a video call. The delivered AppleScript trojan is linked to North Korean threat actors BlueNoroff and Lazarus, and…
Pharmaceutical giant Cencora suffered a cyber attack and threat actors stole data from its infrastructure. Pharmaceutical giant Cencora disclosed a data breach after it was the victim of a cyberattack. Cencora, Inc., formerly known as AmerisourceBergen, is an American drug wholesale company and a contract research organization that was formed by the merger of Bergen Brunswig and AmeriSource in 2001. […]
New kids on the cybercrime block, pig butchering scams, have been making waves lately, and it is not surprising why. Scammers have been earning tons from them by being able to trick users into investing in seemingly legitimate business ventures but losing their hard-earned cash instead.
Azure Batch pools and jobs can expose sensitive artifacts — including generated Storage SAS tokens, environment variables, and node-resident certificates — to principals with Reader or Contributor roles. Attackers can use Contributor privileges or node access …
Infostealers like Rhadamanthys continue to be a favorite among malware distributors who leverage search engine ads to lure victims.
This article examines a novel technique employed by the Savvy Seahorse DNS threat actor to facilitate large-scale investment scams, primarily targeting individuals through fake platforms. The method involves using DNS CNAME records to create a traffic distribu…
Avast discovered a live exploit chain where the Lazarus Group abused a zero-day in the AppLocker driver appid.sys (CVE-2024-21338) to escalate from user/local-service to kernel, yielding a kernel read/write primitive used to deploy an updated FudModule data-on…
In today’s digital era, data privacy isn’t just a concern; it’s a consumer demand. Businesses are grappling with the dual challenge of leveraging customer data for personalized experiences while navigating a maze of privacy regulations. The answer? A privacy-compliant Customer Data Platform (CDP).
Join us for a transformative webinar where we unveil Twilio Segment’s state-of-the-art CDP.
Sekoia.io reports that Predator spyware infrastructure remained active after the Predator Files disclosures, with new domains and command-and-control clusters created post-publication. The investigation links these clusters to Intellexa customers tracked as Ly…
Securonix Threat Labs describes a growing trend of “DOSfuscation” where threat actors hide malicious payloads inside obfuscated batch/DOS commands—often delivered via .lnk shortcuts—to evade AMSI and antivirus detections. The post details common obfuscation te…
https://web-check.xyz/ Supported Checks IP Info SSL Chain DNS Records Cookies Crawl Rules Headers Quality Metrics Server Location Associated Hosts Redirect Chain TXT Records Server Status Open Ports Traceroute Carbon Footprint Server Info Whois Lookup Domain Info DNS Security Extensions Site Feature…