A notorious cybercrime syndicate has been dealt a significant blow as five of its leaders face serious charges in the United States. The Black Axe gang, known for its involvement in global-scale financial fraud, has allegedly coordinated an internet scam campaign from South Africa that targeted victims in the US over the past decade. The … Read more
A Critical Vulnerability in VMware vCenter is Being Exploited by Ransomware Gangs, Warns CISA The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a stark warning to security teams that ransomware gangs have joined ongoing attacks exploiting a critical vulnerability in VMware’s vCenter server. This highly sought-after exploit was patched in July, but it … Read more
A massive scanning campaign has been discovered targeting exposed development servers, exploiting a previously unknown vulnerability in the Vite framework to extract cloud credentials. The campaign, which has been ongoing since August, affects an estimated 3,000 developers worldwide, putting their projects and personal data at risk. The attackers are using a sophisticated scanning tool to … Read more
Cybersecurity teams have long been focused on identifying and patching “attack surfaces” – areas of a system or network where vulnerabilities can be exploited by attackers. But a growing body of evidence suggests that this approach is missing the mark, as hackers are increasingly using complex chains of techniques to breach even seemingly secure systems. … Read more
A Human Attacker Exploits Marimo RCE, Breaches SSH Bastion in Under 8 Seconds In a shocking display of speed and stealth, a human attacker has successfully exploited the Marimo remote code execution (RCE) vulnerability to breach an organization’s SSH bastion in just eight seconds. This alarming incident highlights the need for companies to prioritize security … Read more
Five alleged leaders of the notorious Black Axe cybercrime syndicate have been extradited to the United States to face serious charges. The suspects, who used their online scams to swindle victims out of millions of dollars, are accused of coordinating a massive internet fraud campaign from Cape Town between 2011 and 2021. This case highlights … Read more
A Critical Flaw in LiteSpeed Enterprise Exposes Shared Servers to Root Access Attacks A recently disclosed vulnerability in LiteSpeed Enterprise, a popular web server software used by hosting providers, has left thousands of websites vulnerable to root access attacks. The flaw, which allows one compromised account on a shared server to gain complete control over … Read more
A massive scanning campaign is underway, targeting cloud servers running on Vite, a popular development framework. The attackers are exploiting a known flaw in Vite’s implementation of the Web3 protocol to extract sensitive cloud credentials from exposed developer servers. This has significant implications for developers and organizations that rely on these platforms. The attack works … Read more
A recent analysis of 11 real-world security incidents has revealed a disturbing trend in modern cyber attacks. Rather than relying on broad, surface-level vulnerabilities, attackers are increasingly leveraging identity exposure to unlock active attack paths and gain unfettered access to sensitive systems. This approach not only allows for more targeted and effective exploitation but also … Read more
A human attacker has successfully exploited a remote code execution (RCE) vulnerability in Marimo, a popular open-source SSH bastion host solution. The exploit allowed the attacker to reach the SSH bastion in a mere eight seconds, demonstrating the devastating potential of human-driven attacks. Marimo is designed to provide an additional layer of security by acting … Read more