CyberNews US Firms Under Attack as Hackers Exploit Critical Vulnerability in FastJson Library Hackers have been targeting US-based organizations with a devastating zero-day attack that leverages a critical vulnerability in the widely used FastJson Java library. The malicious activity, which has been observed by security researchers at ThreatBook and Imperva, affects various industries including finance, healthcare, … Read more
Coca-Cola Confirms Data Theft in Fairlife Ransomware Attack, Production Resumes Amid Investigation A devastating ransomware attack on Coca-Cola’s dairy subsidiary, Fairlife, has left the company scrambling to restore operations and protect its sensitive data. The global beverages giant confirmed that hackers stole data from Fairlife during a high-profile cyberattack earlier this month. While production in … Read more
Windows Domain Hijacking Exploit Released, Warns of Significant Risks A new proof-of-concept exploit has been released for a previously patched vulnerability in Windows Active Directory Certificate Services, allowing attackers to potentially hijack entire domains. The exploit, dubbed “Certighost,” can be used by authenticated users to manipulate domain controller accounts and gain domain-level administrative capabilities. The … Read more
Dysphoria Botnet Expands to Over 200,000 Devices Worldwide, Threatening Global Networks A highly resilient and rapidly evolving botnet called Dysphoria has compromised over 200,000 devices worldwide, using them for distributed denial-of-service (DDoS) attacks and traffic relay operations. What’s more alarming is that this botnet leverages a covert blockchain-based command-and-control (C2) resolution mechanism to evade detection. … Read more
A New Chapter in IoT Botnet Evolution: Dysphoria Expands its Reach with Blockchain Command and Control The world of IoT botnets has just become even more complex, thanks to an emerging development involving a notorious threat actor group. Dysphoria, a highly sophisticated botnet, has recently expanded its capabilities by introducing a blockchain-based command and control … Read more
NVIDIA’s groundbreaking move to open-source its NOOA framework and form the 37-member Open Secure AI Alliance has sent shockwaves through the tech industry, sparking both excitement and trepidation among security professionals. At the heart of this initiative is a bold effort to harness artificial intelligence (AI) for cybersecurity, leveraging AI models to uncover previously unknown … Read more
Shadow AI agents are proliferating across organizations at an alarming rate. These hidden entities have been created in popular platforms such as Salesforce Agentforce, Microsoft Copilot Studio, and Zapier, often without IT or security teams being aware of their existence. With capabilities to connect to sensitive systems and take action on their own, shadow AI … Read more
A major accounting firm’s sensitive client data has been compromised in a recent data breach, with the notorious ShinyHunters extortion gang claiming responsibility for the attack. Ernst & Young (EY), one of the world’s largest professional services firms, disclosed the breach earlier this month, revealing that an attacker had accessed its third-party support ticket system … Read more
Apple Faces Class-Action Lawsuit Over Fake Crypto Wallet App That Stole $1.8M in Bitcoin A group of three individuals has filed a class-action lawsuit against Apple, alleging that the tech giant’s failure to properly review and monitor apps distributed through its App Store led to the theft of approximately $1.8 million in Bitcoin. The plaintiffs … Read more
A highly sophisticated and resilient botnet, known as Dysphoria, has evolved its command-and-control (C2) infrastructure by incorporating blockchain technology, allowing it to remain operational even after attempts to disrupt it. The botnet, which targets Internet of Things (IoT) devices, has also introduced a new feature called victim relays, enabling it to amplify attacks and evade … Read more