Kimsuky Expands Cyber Arsenal with New Malware Campaigns
The North Korean threat actor Kimsuky has launched new cyber attacks targeting South Korean entities, deploying sophisticated malware techniques.
Tag Cybersecurity
Critical Gogs RCE Vulnerability Allows Arbitrary Code Execution
A serious vulnerability in Gogs, an open-source Git service, enables authenticated users to execute arbitrary code, raising significant security concerns.
Microsoft Faces Escalating Tensions with Disgruntled 0-Day Researcher
The conflict between Microsoft and a researcher known as Nightmare Eclipse intensifies, with threats of further zero-day exploit disclosures looming.
MuddyWater’s Espionage Campaign Targets Nine Countries Using DLL Side-Loading
The Iranian hacking group MuddyWater has launched a cyber espionage campaign affecting organizations across nine countries, employing DLL side-loading techniques to infiltrate networks.
Zombie User Account Compromises City Water Control
A former employee's unmonitored account allowed unauthorized access to critical city utilities, raising significant security concerns.
Grafana Labs Confirms GitHub Breach Linked to TanStack npm Attack
Grafana Labs has reported a breach of its GitHub environment, revealing source code and internal information but confirming no compromise of customer production systems.
Developer Workstations Integrated into Software Supply Chain Security Concerns
Recent campaigns targeting developer environments highlight the need for enhanced security measures around developer workstations as they become critical points in the software supply chain.
Turla Enhances Kazuar Backdoor into a Modular P2P Botnet
The Russian hacking group Turla has upgraded its Kazuar backdoor into a modular peer-to-peer botnet, enhancing its stealth and persistence capabilities.
Instructure Confirms Double Canvas Breach Amid ShinyHunters Threats
Instructure has acknowledged two unauthorized intrusions affecting its Canvas platform, with data potentially belonging to over 275 million users at risk.
Japan’s PM Initiates Cybersecurity Review Amid AI Concerns
In response to the potential threats posed by Anthropic's AI model Mythos, Japan's Prime Minister Sanae Takaichi has ordered a comprehensive review of the nation's cybersecurity strategy.
