A sophisticated cyber threat group, known as GoldenEyeDog Subgroup, has been linked to a major breach of DigiCert’s certificate authority infrastructure, resulting in the theft of code-signing certificates. This malicious activity has significant implications for software security and highlights the growing threat posed by advanced AI-powered attacks. The breach is believed to have occurred sometime … Read more
A new botnet, dubbed NadMesh, has been identified hunting for exposed AI services that have been left unsecured on cloud platforms and Kubernetes clusters. This alarming trend highlights the growing threat of AI-powered attacks, which are increasingly being used by malicious actors to compromise sensitive systems. NadMesh is a sophisticated botnet that leverages machine learning … Read more
In just over three months, Microsoft will withdraw mainstream support for its popular server operating system, Windows Server 2022. This means that after October 13, 2026, no new features or security updates will be released for this version of the software, leaving systems vulnerable to emerging threats. The withdrawal of mainstream support is a natural … Read more
A Critical Windows Vulnerability Exploited in the Wild: What You Need to Know In a worrying development, a security researcher has uncovered a previously unknown Windows vulnerability that allows attackers to gain admin privileges on up-to-date systems. The exploit, dubbed LegacyHive, takes advantage of a weakness in the Windows User Profile Service and can be … Read more
Criminal actors are refining their playbook to evade detection online, and at the heart of this strategy is a sophisticated approach to using residential proxies for carding. These individuals no longer view residential IPs as a simple anonymity tool, but rather as one component of a broader identity-simulation stack. They’re now combining these proxies with … Read more
Ernst & Young, one of the world’s largest auditing and professional services providers, has disclosed a data breach that occurred when an unauthorized third-party accessed its support ticket system. The breach is significant not only because of Ernst & Young’s size and reach but also because it highlights the potential vulnerabilities in even the most … Read more
The latest threat from the dark side of the web has been uncovered, and it’s a doozy. Fake coding tests are being used to deliver malware that’s eerily reminiscent of an infamous 2018 attack, known as the “OtterCookie” campaign. This time around, malicious actors have taken to hiding their malware in SVG flag images, making … Read more
A new strain of malware, dubbed GoSerpent, has been discovered targeting Southeast Asian governments and diplomats for espionage purposes. This highly sophisticated threat leverages advanced tactics, techniques, and procedures (TTPs) to evade detection and compromise sensitive information. GoSerpent is a type of backdoor malware that allows attackers to remotely access and control infected systems. It’s … Read more
A sophisticated malware campaign is underway, targeting organizations and individuals with a particularly insidious technique. ACR Stealer, a type of malicious software designed to steal sensitive data, has been linked to a series of attacks that use fake Microsoft error messages as lures. These messages, masquerading as legitimate notifications from ClickFix, a popular online support … Read more
Armenian authorities have detained a Russian tourist on a US warrant, but lawyers claim it’s the wrong man – one accused of being a member of the notorious REvil hacking group. This case highlights the complex and often murky world of international cybersecurity law enforcement, where innocent bystanders can get caught in the crossfire. The … Read more