CyberNews

China’s FamousSparrow APT Spies on US Politics in Latin America with Sophisticated Backdoor A highly sophisticated cyber-espionage group known as “FamousSparrow” has been secretly gathering intelligence on government agencies and major industries in Central and South America, using a custom-made backdoor called SparroWocky. This stealthy malware has allowed the Chinese threat actors to build a … Read more

A sophisticated hacking campaign linked to Iranian actors has been uncovered, leveraging a previously unknown backdoor in the Telegram messaging app. Dubbed “HEAVYGRAM,” this exploit allows hackers to gain access to sensitive information, including passwords, from compromised devices. The operation, dubbed “Handala,” is believed to have targeted organizations and individuals with ties to countries critical … Read more

A Critical Vulnerability in Docker Sandboxes Allows Malicious Guest Code to Read and Modify macOS Host Files, Leaving Thousands of Users Exposed Docker’s containerization technology has revolutionized the way developers build, ship, and run applications. However, a critical vulnerability discovered in Docker sandboxes on macOS allows malicious guest code to read and modify host files, … Read more

Cybersecurity threats are becoming increasingly sophisticated, and one of the most insidious tactics being used by attackers is exploiting identity exposure to create active attack paths. A recent wave of incidents has highlighted the dangers of this type of threat, where an attacker uses legitimate user credentials to gain access to sensitive systems and data. … Read more

Critical Check Point Management Flaw Exposes Organizations to Root-Level Attacks A critical vulnerability in Check Point’s management interface has been uncovered, allowing unauthenticated attackers to execute code as the root user. This means that even without legitimate access credentials, hackers can gain complete control over affected systems. The flaw affects multiple versions of Check Point’s … Read more

China’s FamousSparrow APT Spies on US Politics in Latin America In a move that highlights the escalating tensions between China and the United States in Latin America, a sophisticated cyber-espionage group known as “FamousSparrow” has been using a custom backdoor to gather sensitive information from government agencies and major industries in Central and South America. … Read more

The US Cybersecurity and Infrastructure Security Agency (CISA) has announced it will discontinue its weekly vulnerability bulletins as of September 28. This move marks a significant shift in CISA’s approach to cybersecurity, one that prioritizes risk-based vulnerability management over traditional severity-based approaches. For years, CISA had been releasing weekly vulnerability bulletins, which listed newly disclosed … Read more

Cybercrime just got a whole lot more efficient, thanks to AI-powered attacks that are changing the game for identity security. In a disturbing demonstration of what’s possible with artificial intelligence, Google Threat Intelligence Group (GTIG) recently revealed several attacks that showcase the speed and scalability of cybercrime. One such attack saw a threat actor compromise … Read more

Cybersecurity Nightmare Unfolds as Brevo Supply-Chain Attack Injects Malware on Customer Sites A devastating supply-chain attack has rocked the cybersecurity world, with customer relationship management (CRM) company Brevo confirming that its systems were compromised by attackers. The malicious actors exploited a hardcoded Cloudflare API key to inject ClickFix scripts into Brevo’s websites and JavaScript files … Read more

A New Breed of Android Malware Leverages AI to Automate Device Control Cybersecurity researchers have uncovered a sophisticated Android malware strain called RatHat, which uses artificial intelligence (AI) to navigate and control compromised devices with unprecedented ease. This highly adaptable malware is being distributed through malicious advertisements, phishing websites, and SMS scams, targeting users who … Read more