Critical Flaws in Widely Used Bootloader Could Enable Stealthy Firmware Attacks A recent discovery of six vulnerabilities in the U-Boot bootloader has raised concerns about the security of embedded Linux devices, enterprise servers, networking equipment, and IoT appliances. The flaws could allow attackers to execute malicious code during device boot, potentially compromising security protections and … Read more
Progress Software has urged administrators of its ShareFile secure file-sharing platform to immediately shut down their servers due to a “credible external security threat” targeting on-premises Storage Zone Controllers. The warning, sent via email to customers last night, is the latest example of a sophisticated cyberattack aimed at enterprise file transfer and sharing software. The … Read more
Dutch Police Suspect Local Hackers Behind Massive Odido Data Breach In a significant development in the ongoing investigation into the massive Odido data breach, Dutch police have revealed that they have found strong indications of involvement from local hackers. The breach, which was first disclosed by Odido on February 12, affected a staggering 6.2 million … Read more
A former member of the notorious Ryuk ransomware gang has pleaded guilty in a US court to hacking and deploying the malware on multiple corporate networks, including those of several American companies. The 34-year-old Armenian man, Karen Serobovich Vardanyan, faces up to 15 years in prison for his role in the scheme, which netted his … Read more
Widespread U-Boot Flaws Put Devices at Risk of Stealthy Firmware Attacks A recent security audit has uncovered six critical vulnerabilities in the widely used open-source bootloader, U-Boot. These flaws could allow attackers to execute malicious code during device boot, potentially enabling stealthy firmware attacks that compromise security protections and install persistent malware. U-Boot is a … Read more
A sophisticated hacking campaign is making headlines after hackers exploited a previously unknown vulnerability in Microsoft’s Entra Passkey enrollment process to gain unauthorized access to Microsoft 365 accounts. The attack, which has been linked to a nation-state actor, highlights the ongoing cat-and-mouse game between cyber attackers and defenders. The technique used by the hackers involves … Read more
A Dutch Telecom Firm’s Data Breach May Be Linked to Local Hackers In a significant development, the Dutch National Police has revealed “strong indications” that local hackers were involved in a major data breach at Odido, one of the country’s largest telecommunications providers. The company disclosed the attack on February 12, stating that the attackers … Read more
A Key Player Behind the Devastating Ryuk Ransomware Operation Pleads Guilty in the US, Faces Up to 15 Years in Prison Karen Serobovich Vardanyan, a 34-year-old Armenian man, has pleaded guilty to deploying the notorious Ryuk ransomware on multiple US companies’ systems between November 2019 and April 2020. This significant development marks a major breakthrough … Read more
A critical vulnerability discovery in U-Boot, a widely-used open-source firmware for embedded devices, has left many organizations scrambling to secure their systems. Six new flaws have been identified that could allow attackers to crash devices or run malicious code at boot time, potentially leading to devastating consequences. The vulnerabilities, discovered by researchers using AI-powered scanning … Read more
A Devastating GitHub Compromise Rocks the Cryptocurrency Ecosystem, Exposing Millions of Users to Wallet-Stealing Malware In a brazen and sophisticated attack, Injective Labs’ GitHub repository has been compromised, allowing malicious actors to push wallet-key-stealing npm packages to unsuspecting developers. The affected projects have already been downloaded thousands of times, putting millions of cryptocurrency users at … Read more