CyberNews

A new wave of sophisticated cyber attacks is sweeping across the globe, as China-linked hackers have been spotted deploying a novel ransomware variant called StormEncryptor. The malware is likely being spread via a vulnerability in N-central, a widely used IT management software that provides remote monitoring and management capabilities to organizations. The emergence of StormEncryptor … Read more

A Member of Notorious Cybercrime Collective Sentenced for Blackmail and Sextortion Against Nearly 120 Children Worldwide In a significant blow to a notorious online cybercrime collective that has been terrorizing children and teenagers, one of its members has been sentenced to two years in prison for blackmail and sextortion offenses against nearly 120 victims worldwide. … Read more

As AI-enhanced attacks become increasingly sophisticated, traditional identity security measures are struggling to keep pace. The days of relying solely on passwords and multi-factor authentication (MFA) responses to secure online accounts are numbered, as attackers find new ways to bypass and exploit these controls. The rise of artificial intelligence has not introduced a fundamentally new … Read more

A highly motivated threat actor, previously linked to the notorious Medusa ransomware operation, has resurfaced with a new strain of malware called StormEncryptor. The attacker, tracked by Microsoft as “Storm-1175,” has been using this powerful tool to extort money from victims worldwide. The bad news is that Storm-1175 is believed to be based in China … Read more

As we wrap up another week in the world of cybersecurity, a disturbing trend has emerged that highlights the increasing threat of identity exposure and its potential consequences. In a series of incidents that span multiple industries and geographies, it’s become clear that when an individual’s identity is compromised, the door to active attack paths … Read more

A New Storm is Brewing: China-Linked Hackers Deploy Sophisticated Ransomware via N-central Flaw In a worrying trend, China-linked hackers have been spotted deploying a new type of ransomware known as StormEncryptor, which exploits a previously unknown flaw in the popular network management platform N-central. The attackers are using this vulnerability to gain unauthorized access to … Read more

CISA Confirms Ransomware Gangs Exploit SonicWall SMA1000 Flaws, Despite Patches A critical vulnerability in SonicWall’s enterprise-grade secure remote access gateway, the SMA1000, has been confirmed to be actively exploited by ransomware gangs. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the two flaws to its Known Exploited Vulnerabilities (KEV) Catalog, warning that the … Read more

TrueConf Server Flaws Exposed, Client Installers Hijacked in Sophisticated Attack A sophisticated cyberattack has been uncovered, where hackers exploited vulnerabilities in TrueConf server software to replace client installers with a malicious payload called PhantomCore. The attack, which affects users of the popular video conferencing platform, highlights the importance of secure server-side configurations and underscores the … Read more

As we continue to move further into an era of rapid technological advancements, the risk of identity exposure has become a pressing concern for organizations worldwide. A recent webinar highlighted 11 real-life stories where compromised identities were used to unlock active attack paths, resulting in devastating consequences for those affected. The concept of cross-domain privilege … Read more

A new wave of Passkey attacks has emerged, putting users’ sensitive data at risk by exploiting a vulnerability in password managers that sync private keys across devices. These sophisticated attacks can not only recover synced private keys but also bypass even the most secure multi-factor authentication (MFA) systems. The targeted threat actors use complex methods … Read more