Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler

Cybersecurity researchers have identified a concerning expansion of the Nimbus Manticore toolset, which has added two new capabilities that significantly enhance its attack potential. The updated toolkit now includes a backdoor similar to TWOSTROKE and an SSH tunneler, allowing attackers to move undetected across networks and establish persistent access. The Nimbus Manticore toolset has been … Read more

FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations

FBI Disrupts China-Led Infrastructure Used to Siphon Data from U.S. Organizations The FBI has successfully disrupted a sophisticated cyber infrastructure, allegedly linked to Chinese hackers, that had been quietly siphoning sensitive data from various U.S.-based organizations for months. The operation, dubbed “QTFY,” was a complex web of compromised networks and servers used to facilitate large-scale … Read more

FBI disrupts proxy network enabling Chinese espionage operations

Federal authorities have disrupted a sophisticated proxy network used by Chinese cyber operatives to carry out espionage operations against high-stakes targets in the US. The FBI’s operation has dealt a significant blow to the group, known as QTFY/QT/QTCYBER, which employed advanced tools and infrastructure to evade detection. QTFY, backed by the China-based Nanjing Xinjiuwei Network … Read more

Meta agrees to $18 billion settlement over teen social media harms

Meta’s $18 Billion Settlement Marks a Major Shift in Social Media Regulation In a groundbreaking move, Meta has agreed to an $18 billion settlement with a bipartisan coalition of 52 attorneys general over allegations that Facebook and Instagram were designed to encourage compulsive use among teenagers. The proposed settlement resolves a lawsuit filed in 2023 … Read more

New GPUThor attack defeats NVIDIA ECC protection for root access

A New Rowhammer Attack Exposes NVIDIA GPUs to Root Access Vulnerability In a disturbing revelation, University of Toronto researchers have disclosed a new attack called GPUThor that can bypass error-correcting code (ECC) protections on NVIDIA’s high-end graphics processing units (GPUs). This devastating attack enables denial-of-service (DoS) and root-level privilege escalation, posing a significant threat to … Read more

Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler

Nimbus Manticore, a notorious threat actor group, has significantly enhanced its arsenal of cyber tools with two critical additions: a TWOSTROKE-like backdoor and an SSH tunneler. These new features allow the group to compromise even more organizations and individuals, underscoring the importance of robust cybersecurity measures. The Nimbus Manticore group, known for its sophisticated tactics … Read more

FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations

A major cybersecurity operation has been underway in the United States, with the FBI disrupting a network of compromised infrastructure linked to China. Dubbed “QTFY,” this network has been used to steal sensitive data from various U.S. organizations, including government agencies and private companies. The disruption marks a significant blow to the Chinese hacking groups … Read more

Boston Scientific says cyberattack disrupted operations globally

Boston Scientific Fights to Recover from Global Cyberattack Disruption Medical technology giant Boston Scientific is reeling from a devastating cyberattack that has crippled its IT systems worldwide. The attack, which was detected on August 25, has caused operational disruptions globally, including the inability to process and ship customer orders. The company’s systems are used in … Read more

Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code

A newly discovered vulnerability in Kaltura’s mwEmbed plugin has left hundreds of thousands of websites vulnerable to remote attacks, allowing attackers to read sensitive files and execute arbitrary code. The unpatched flaw, disclosed on Wednesday, affects all versions of the plugin, making it a pressing concern for organizations that rely on the popular video management … Read more