CyberNews A massive phishing campaign targeting Remote Monitoring and Management (RMM) software has put 46 countries in its sights, with the United States emerging as the top target. The scheme exploits vulnerabilities in RMM tools used by managed service providers (MSPs), allowing attackers to gain access to sensitive business data and potentially even take control of … Read more
A critical issue has surfaced in Microsoft Teams and Outlook on certain Windows devices, causing launch failures and crashes. This problem specifically affects ARM-based Windows PCs running Windows 11 24H2 or later, such as the Surface Laptop 7 and Surface Pro 11. Users who have installed updates released since August’s Patch Tuesday are most likely … Read more
A Critical Security Alert Hits Plex Users: Patch Now to Avoid Potential Disaster Plex, a popular media server platform, has issued an urgent warning to its users about multiple security vulnerabilities affecting their desktop clients and media servers. The company is urging everyone to update their systems immediately to prevent potential attacks that could lead … Read more
A Zero-Click Spyware Exploit Rocks Serbian Student Movement, Raises Concerns Over iPhone Security In a shocking incident that highlights the vulnerabilities of modern smartphones, a member of Serbia’s student movement has been infected with Pegasus zero-click spyware, raising concerns over the security of iPhones. The news has sent shockwaves throughout the cybersecurity community, underscoring the … Read more
Shai-Hulud, a notorious credential-stealing malware strain, has expanded its reach to 469 new locations worldwide. This significant increase in its footprint poses a substantial threat to organizations and individuals with sensitive information online. What does this mean for those affected? And how does Shai-Hulud exploit vulnerabilities to wreak havoc on networks? Shai-Hulud is known for … Read more
A notorious group of attackers has been exploiting Node.js, a popular open-source runtime environment for web applications, to distribute malware as part of sophisticated targeted attacks. The campaign, which has been unfolding over several months, involves compromising trusted Node.js installations on servers and using them to inject malicious code into vulnerable systems. The hackers appear … Read more
**Major Issue Hits Microsoft Teams and Outlook Users on ARM-Based Windows PCs** A significant problem has emerged for users of Microsoft Teams and New Outlook on ARM-based Windows devices, including popular models like the Surface Laptop 7 and Surface Pro 11. Since installing updates released since August’s Patch Tuesday, many users have reported that these … Read more
Plex Urges Users to Patch Critical Security Flaws Immediately Streaming media giant Plex has issued an urgent warning to its users, advising them to update their desktop clients and media servers as soon as possible to patch multiple critical security vulnerabilities. The company has released new versions of its software, Plex Media Server 1.43.3 and … Read more
A Serbian Student Movement Member’s iPhone Infected with Pegasus Zero-Click Spyware, Exposing Personal Data and Activism Records Last week, a disturbing incident came to light involving a member of the Serbian Student Movement whose iPhone was compromised by a zero-click exploit of the notorious Pegasus spyware. This malicious software, developed by Israeli company NSO Group, … Read more
Shai-Hulud, a notorious threat actor, has expanded its reach to 469 credential locations, leaving countless organizations vulnerable to sophisticated attacks. This development is particularly alarming, given the group’s history of orchestrating complex breaches that leveraged exposed identities and exploited cross-domain privilege escalation. Shai-Hulud’s modus operandi revolves around infiltrating enterprise networks through compromised credentials, which provide … Read more