Supply Chain Attacks Fueling a Self-Reinforcing Cybercrime Economy
Recent findings reveal that supply chain attacks are evolving into a complex ecosystem of cybercrime, linking various forms of breaches and identity theft.
Category Security & Privacy
Ciberseguridad, vulnerabilidades y privacidad
APT36 and SideCopy Target Indian Entities with Cross-Platform RAT Campaigns
Recent cyber espionage campaigns have targeted Indian defense and government organizations using cross-platform remote access trojans (RATs).
Microsoft Outlook: Discovery of First Malicious Outlook Add-In Compromises Over 4,000 Credentials
A newly identified malicious add-in for Microsoft Outlook has been found to steal user credentials through a phishing scheme, affecting thousands of users.
UK Government Faces Scrutiny Over Afghan Data Breach Response
UK officials address legacy IT challenges in preventing data leaks following the Afghan informants incident, while emphasizing the need for improved security measures.
CISA Directs Removal of Unsupported Edge Devices to Enhance Security
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has mandated that federal agencies eliminate unsupported edge devices to mitigate security risks posed by cyber threats.
German Agencies Issue Warning on Signal Phishing Campaign Targeting Key Figures
A joint advisory from Germany's BfV and BSI highlights a phishing campaign exploiting the Signal messaging app, aimed at politicians, military personnel, and journalists.
China-Linked DKnife AitM Framework Targets Routers for Traffic Hijacking and Malware Delivery
Cybersecurity researchers have identified a sophisticated framework named DKnife, linked to Chinese threat actors, designed for traffic manipulation and malware delivery via routers.
Flickr Reports Data Breach Linked to Third-Party Provider
Flickr has informed users of a data breach attributed to a third-party email service provider, potentially exposing various personal information.
Chrome’s Manifest v3: Ad Blocking Effectiveness Remains Intact
A recent study reveals that Chrome's new extension architecture, Manifest v3, does not significantly hinder ad blocking capabilities compared to its predecessor.
Substack Confirms Security Breach Involving User Data
Substack has revealed that an unauthorized party accessed user contact information months before detection, impacting email addresses and phone numbers.
