Ransomware groups have shifted their focus to targeting backup infrastructure, raising the stakes for organizations that rely on these safety nets in case of an attack. The financial costs of losing a backup can be devastating, with average incident costs reaching $5.08 million and reputational damage affecting up to 41% of victims. The attacks on … Read more
A sophisticated attack has compromised several country-code top-level domains (ccTLDs), allowing hackers to hijack Google domains and issue unauthorized HTTPS certificates. The attackers breached third-party operators managing ccTLD registries in Ghana, American Samoa, and Sierra Leone, modifying authoritative DNS records to point domains to infrastructure under their control. This maneuver enabled the threat actor to … Read more
SonicWall’s Critical Patch for SMA1000 Appliances Marks a High-Stakes Reminder of the Importance of Regular Security Updates A severe pre-authentication vulnerability in SonicWall’s Secure Mobile Access (SMA) 1000 appliances has been patched by the company, following an assessment that classified it as a CVSS 10.0 flaw – the highest rating on the Common Vulnerability Scoring … Read more
Malicious npm Packages Infect Thousands of Developers with Overlord RAT and Stealer Malware A devastating wave of malware infections has swept through the developer community, courtesy of eight malicious packages uploaded to the popular npm package repository. Dubbed “Overlord”, this insidious malware has already been downloaded over 40,767 times from the unsuspecting public. The repercussions … Read more
Hackers have successfully hijacked three top-level domain (TLD) registries, allowing them to obtain digital certificates for several Google domains. The affected registries are .gh (Ghana), .sl (Sierra Leone), and .as (American Samoa). This brazen attack has left security experts scrambling to understand the scope of the breach and its potential impact on online trust. The … Read more
Critical Vulnerability in Atlassian Products Exploited in Attacks After Public PoC Release A critical vulnerability in multiple Atlassian product families has been exploited by hackers after a detailed technical report was published online. The flaw, identified as CVE-2026-21589, allows an unauthenticated attacker to access specific files in the application’s web root directory if they know … Read more
Ransomware gangs have been terrorizing organizations for years, but recently they’ve set their sights on a new target: backups. These critical recovery points are meant to provide a safety net in case of an attack, but if attackers can erase them, the pressure to pay a ransom grows exponentially. The devastating effects of this tactic … Read more
A Critical Vulnerability Hits SonicWall’s SMA1000 Appliances, Leaving Thousands Exposed SonicWall has issued an emergency patch for its SMA1000 series of security appliances, addressing a critical flaw that allows attackers to remotely execute arbitrary code on affected devices. The vulnerability, rated CVSS 10.0, is considered one of the most severe types of flaws due to … Read more
A devastating wave of malware infections has hit the npm ecosystem, with eight malicious packages being downloaded over 40,000 times. These packages, masquerading as legitimate software development tools, have been found to deliver two notorious pieces of malware: Overlord RAT (Remote Access Tool) and a stealer, designed to siphon sensitive data from unsuspecting users’ systems. … Read more
Attackers have exploited vulnerabilities in three domain registries, successfully obtaining SSL certificates for Google domains. The impacted registries are those responsible for .gh (Ghana), .sl (Sierra Leone), and .as (American Samoa). This breach has significant implications for Google’s secure certificate infrastructure and its users. The attackers’ approach was to compromise the registrars’ systems, allowing them … Read more