A critical vulnerability discovery in U-Boot, a widely-used open-source firmware for embedded devices, has left many organizations scrambling to secure their systems. Six new flaws have been identified that could allow attackers to crash devices or run malicious code at boot time, potentially leading to devastating consequences. The vulnerabilities, discovered by researchers using AI-powered scanning … Read more
A Devastating GitHub Compromise Rocks the Cryptocurrency Ecosystem, Exposing Millions of Users to Wallet-Stealing Malware In a brazen and sophisticated attack, Injective Labs’ GitHub repository has been compromised, allowing malicious actors to push wallet-key-stealing npm packages to unsuspecting developers. The affected projects have already been downloaded thousands of times, putting millions of cryptocurrency users at … Read more
Progress Tells ShareFile Customers to Halt Storage Zone Controllers Over Critical Security Threat A critical security vulnerability has been discovered in Progress’s ShareFile, a cloud-based file-sharing service used by millions of users worldwide. In an urgent notice sent out yesterday, the company instructed its customers to immediately shut down their Storage Zone Controllers (SZCs) due … Read more
A massive study of free Android VPN apps has revealed shocking security lapses, compromising user data and exposing them to potential threats. Researchers analyzed 281 popular VPN applications available on Google Play Store, discovering that many of these apps are leaking sensitive information, storing unencrypted data, and engaging in tracking activities. The researchers found that … Read more
A Sophisticated Cyber Attack Exploits Unpatchable Wallet Cards, Resetting User Passwords In a concerning incident that highlights the vulnerabilities of even the most secure systems, hackers have successfully exploited unpatchable wallet cards issued by Tangem, a Swiss-based company known for its high-security digital wallets. The attackers used a technique called a “laser attack” to reset … Read more
A newly discovered set of vulnerabilities in U-Boot, a popular open-source bootloader used in millions of devices worldwide, could allow attackers to crash or hijack devices during boot-up. The six flaws were uncovered by researchers using artificial intelligence (AI) models, highlighting the growing importance of AI-driven security testing. The affected devices include a wide range … Read more
A Malicious Operation Unfolds on GitHub: Wallet-Key-Stealing npm Packages Exposed Researchers have discovered a sophisticated operation on GitHub, where malicious actors exploited the platform’s weaknesses to push wallet-key-stealing packages to unsuspecting developers. The compromised accounts belong to Injective Labs, a blockchain development company, and the affected users are likely those who have installed the tainted … Read more
Progress, the software giant behind the ShareFile file-sharing platform, is urging its customers to shut down Storage Zone Controllers (SZCs) due to a critical security threat. This move affects thousands of businesses worldwide, emphasizing the need for swift action to prevent potential data breaches and system compromises. ShareFile’s SZCs are essentially on-premises servers that act … Read more
A notorious ransomware negotiator, who made headlines for facilitating lucrative attacks on behalf of the BlackCat gang, has been sentenced to 70 months in prison. The individual’s conviction serves as a stark reminder that the underworld of cybercrime is not just a distant threat, but a tangible reality with real-world consequences. The accused, a self-proclaimed … Read more
A sophisticated cyberattack has left cryptocurrency enthusiasts reeling, with over $5 million drained from wallets due to an exploit of the “Ill Bloom” vulnerability. The attack targets users of several popular cryptocurrency exchanges and wallets, leaving a trail of financial losses in its wake. The Ill Bloom vulnerability is a type of software bug that … Read more