Cyber Security

Microsoft’s Ongoing Feud with Disgruntled Researcher Nightmare-Eclipse Continues to Unfold A highly skilled and prolific security researcher, known by their online handles as Nightmare-Eclipse or Chaotic Eclipse, has struck again with yet another zero-day exploit targeting Windows Defender. Dubbed “ShieldCrash,” this latest vulnerability enables privilege escalation and bypasses a previously patched flaw in the Microsoft … Read more

Indonesia has become an early testing ground for a sophisticated Android malware campaign, with threat actors exploiting the Google Work Profile feature to evade banking security controls and siphon off millions of dollars from unsuspecting victims. The attack, which has already compromised over 1,469 devices and 1,281 potentially vulnerable logins in Indonesia, is a stark … Read more

European Organizations Face New Reporting Obligations Under EU Cyber Resilience Act As of this week, European organizations selling products in member countries will have to report product security issues quickly and diligently or face severe penalties. The EU’s Cyber Resilience Act (CRA) has introduced strict reporting obligations for organizations that distribute their products anywhere in … Read more

The Shadowy World of Zero-Day Exploits: Nightmare-Eclipse Strikes Again with ‘ShieldCrash’ A highly skilled and disgruntled security researcher, known by various handles including Nightmare-Eclipse and Infinite Nightmare, has unleashed another zero-day exploit on Windows Defender, this time targeting a vulnerability in the Microsoft Malware Protection Engine. The “ShieldCrash” exploit, released on GitHub, allows attackers to … Read more

**Threat Actors Exploit BYOD Vulnerability to Reach Microsoft 365 Data** In a brazen and increasingly common tactic, cyber attackers are using personal devices to bypass corporate security protections and gain access to sensitive data stored in Microsoft 365. By targeting employees on their own mobile phones, these threat actors can exploit the Microsoft Graph API … Read more

Indonesia Becomes Testing Ground for Sophisticated Android Banking Malware Technique A new wave of targeted attacks is sweeping through Indonesia, exploiting a vulnerability in Google’s Android Work Profile feature to deliver malware that can evade banking security controls. The threat group behind this campaign, known as GoldFactory, has been observed using the Gigabud Trojan to … Read more

A recent wave of problems affecting Windows users has finally been addressed by Microsoft, which has fixed a known issue that caused mouse settings to reset on some systems. The company has confirmed that its September updates, specifically KB5124008, resolve the bug that had been causing frustration for many. The issue was first identified after … Read more

Cyberattackers are exploiting a seemingly low-risk vulnerability in remote work settings to gain access to corporate data, including sensitive information stored on Microsoft 365 platforms. By targeting employees’ personal devices and using a combination of social engineering tactics and technical exploits, attackers are able to bypass companies’ security protections and extract valuable data. The attacks, … Read more

In a stark reminder of the ongoing cat-and-mouse game between attackers and defenders, a recent investigation into every alert in customer environments over a three-month period has shed light on the top four threats facing organizations today. The findings, published in Prophet Security’s first quarterly threat report, reveal that identity was the target in roughly … Read more

Cybersecurity threat actors have unleashed a powerful exploit kit dubbed “BlueMoon” that combines three critical vulnerabilities to infiltrate systems running Microsoft Windows and Google Chrome. The toolkit leverages zero-day flaws in Chromium-based browsers, allowing remote code execution and sandbox escape, along with a kernel local privilege escalation in Windows. This potent combination has been used … Read more