Malicious websites have been using a sophisticated technique to build and deliver malware directly within browser memory, evading traditional detection methods. A massive malvertising campaign has been underway since late 2024, targeting retail traders and crypto investors in 12 countries across Asia Pacific and Latin America. The scheme relies on fake websites masquerading as legitimate … Read more
A critical vulnerability in the popular Java library Fastjson, version 1.x, is being actively exploited by attackers, leaving many systems exposed and potentially vulnerable to remote code execution (RCE). The issue, discovered through AI-powered security research, has sparked a scramble among developers to patch affected applications before they become the target of malicious attacks. Fastjson … Read more
Rockwell Automation has issued patches to fix four critical vulnerabilities in its Arena Simulation software, which could allow an attacker to execute arbitrary code on a compromised system. The flaws, affecting versions of the software up to 17.00.00, are memory corruption issues stemming from improper validation of user-supplied data. The vulnerability affects organizations that use … Read more
A New Wave of Sextortion Emails is Scamming Victims with Leaked Data Breaches Cybersecurity experts are sounding the alarm about a growing trend of sextortion emails that are tricking victims into sending thousands of dollars in Bitcoin. These malicious messages are using email addresses exposed in data breaches leaked by the ShinyHunters extortion group to … Read more
A Sneaky Malware Campaign Exploits Browser Memory to Evade Detection Malicious websites are using a clever tactic to assemble malware directly in browser memory, evading detection and making it harder for security experts to analyze. The campaign, dubbed SourTrade, has been active since late 2024 and targets retail traders and crypto investors in Asia Pacific … Read more
Fastjson, a popular Java library used for JSON parsing and serialization, has been hit with a critical Remote Code Execution (RCE) vulnerability that’s being actively exploited by attackers. The bug, which affects versions 1.x of Fastjson, allows hackers to inject malicious code on vulnerable systems, putting countless organizations at risk. Fastjson is widely used in … Read more
A major outage has crippled access to ChatGPT worldwide, leaving users unable to load chats or send messages. The disruption, which began at around 5 AM ET, affected not only those in the US and Europe but also users across the globe. For nearly an hour, chat enthusiasts and developers were locked out of the … Read more
A Centralized Ransomware-as-a-Service (RaaS) Portal Puts Thousands at Risk of Devastating Cyberattacks A recent discovery has shed light on a sophisticated ransomware-as-a-service (RaaS) portal, codenamed “DevMan,” that’s been quietly wreaking havoc on unsuspecting victims. Dubbed the “Amazon of Ransomware” by cybersecurity experts, this centralized platform enables malicious actors to create, distribute, and manage their own … Read more
Cl0p Gang’s Latest Tactic Exposes Companies Using PTC Windchill and FlexPLM Software A new wave of attacks has been spotted targeting organizations using software from PTC (Parametric Technology Corporation) – specifically, those running versions of PTC Windchill and FlexPLM that haven’t implemented the latest security patches. The Cl0p gang, a notorious group known for its … Read more
A New Wave of Account Hijacking Threats Loom Large, As Insurance Phishing Evolves into Real-Time Attacks Insurance phishing scams have been a persistent menace for individuals and businesses alike, preying on vulnerabilities in email security. However, researchers at CTM360 have uncovered a disturbing evolution in these tactics – from mere phishing attempts to real-time account … Read more