CyberNews Nimbus Manticore, a notorious threat actor group, has significantly enhanced its arsenal of cyber tools with two critical additions: a TWOSTROKE-like backdoor and an SSH tunneler. These new features allow the group to compromise even more organizations and individuals, underscoring the importance of robust cybersecurity measures. The Nimbus Manticore group, known for its sophisticated tactics … Read more
A major cybersecurity operation has been underway in the United States, with the FBI disrupting a network of compromised infrastructure linked to China. Dubbed “QTFY,” this network has been used to steal sensitive data from various U.S. organizations, including government agencies and private companies. The disruption marks a significant blow to the Chinese hacking groups … Read more
Boston Scientific Fights to Recover from Global Cyberattack Disruption Medical technology giant Boston Scientific is reeling from a devastating cyberattack that has crippled its IT systems worldwide. The attack, which was detected on August 25, has caused operational disruptions globally, including the inability to process and ship customer orders. The company’s systems are used in … Read more
A landmark settlement has been reached between Meta, the parent company of Facebook and Instagram, and a bipartisan coalition of 52 attorneys general. The agreement addresses long-standing concerns about the impact of social media on teenagers and children, with Meta agreeing to pay up to $18 billion over ten years. The lawsuit, filed in 2023 … Read more
A newly discovered vulnerability in Kaltura’s mwEmbed plugin has left hundreds of thousands of websites vulnerable to remote attacks, allowing attackers to read sensitive files and execute arbitrary code. The unpatched flaw, disclosed on Wednesday, affects all versions of the plugin, making it a pressing concern for organizations that rely on the popular video management … Read more
Cybersecurity’s Dark Mirror: CISA Red Team Compromises Two Critical Infrastructure Orgs, Exposing Deep Vulnerabilities The US Cybersecurity and Infrastructure Security Agency (CISA) has revealed a disturbing incident that highlights the vulnerabilities of even the most secure systems. In an internal exercise, the CISA Red Team successfully compromised two critical infrastructure organizations, with one organization remaining … Read more
A sophisticated cyber campaign, dubbed “NovaCookies,” has been uncovered, leveraging genuine DocuSign notifications to steal Microsoft 365 session credentials. The attacks, which have been ongoing for months, target organizations with a high volume of DocuSign usage, allowing hackers to phish employees and gain unauthorized access to sensitive data. At the heart of the NovaCookies campaign … Read more
Cybersecurity Threats Rampant as Hackers Target Microsoft SharePoint Servers Threat actors are exploiting a pair of vulnerabilities in Microsoft’s SharePoint platform, allowing them to execute arbitrary code on unpatched servers. The chain of attacks involves a vulnerability in the JWT token validation pipeline, which can be exploited by attackers without privileges, and a subsequent remote … Read more
Boston Scientific Hit by Global Cyberattack, Disrupting Operations and Customer Orders Medical technology giant Boston Scientific has been caught in a global cyberattack that has caused operational disruptions and impacted access to critical systems. The company, which develops and manufactures devices used in minimally invasive procedures, detected the incident on August 25 and is still … Read more
A critical vulnerability in Kaltura’s mwEmbed software has been discovered, allowing remote attackers to read sensitive files and execute malicious code on affected systems. The unpatched flaw affects various industries, including media, education, and healthcare, where Kaltura’s video streaming platform is widely used. Kaltura’s mwEmbed is a JavaScript library that enables cross-domain communication between web … Read more