A newly discovered Linux kernel vulnerability, dubbed “Bad Epoll,” is allowing unprivileged users to gain root access on affected systems, putting millions of Android devices at risk. This critical flaw can be exploited by attackers with minimal privileges, making it a particularly insidious threat. The Bad Epoll bug lies in the way the Linux kernel … Read more
A 19-year-old alleged member of the notorious Scattered Spider extortion crew has been extradited to the United States and is currently facing multiple cybercrime charges. Peter Stokes, a dual citizen of the US and Estonia, has been accused of participating in Scattered Spider’s operations since its formation in 2022. The group, known for its sophisticated … Read more
A Major Blow to Cybercrime: Google Disrupts NetNut Proxy Network, Cutting Off 2 Million Infected Devices In a significant victory against cybercrime, a joint operation involving Google has taken down NetNut, a massive residential proxy network that provided access to millions of compromised Android devices. The botnet, also known as Popa, was used by threat … Read more
A recent discovery has shed light on an insidious threat targeting web developers, with North Korea-linked actors exploiting popular JavaScript libraries to steal sensitive information. The malicious activity involves manipulating npm packages, which are used by millions of developers worldwide, to mimic legitimate Rollup polyfills and siphon off vital secrets. The attackers have been using … Read more
A new, highly sophisticated malware framework called Avalon has been discovered, incorporating advanced features from the notorious CrownX ransomware. This dual-capable threat poses significant risks for organizations worldwide, particularly those with weak security protocols or outdated software. Developed by a group of experienced hackers, Avalon leverages AI-powered tools to evade detection and identify vulnerabilities in … Read more
A newly discovered flaw in Linux kernel code, dubbed “Bad Epoll,” allows unprivileged users to gain root privileges on vulnerable systems. This bug affects multiple flavors of Linux, including Android, and has significant implications for system security. Bad Epoll’s discovery serves as a stark reminder that even the most robust operating systems can be compromised … Read more
A String of Cybersecurity Incidents Rocks the Global Community In a worrying trend that highlights the ongoing evolution of cyber threats, a series of high-profile incidents has come to light in recent weeks. From hacktivists being brought to justice to major corporations falling victim to sophisticated attacks, it’s clear that no organization is immune to … Read more
Chinese AI Models Blur the Line Between Attackers and Defenders In a worrying development for cybersecurity defenders, two new language models from Chinese firms have been released in recent weeks, showcasing capabilities that are outpacing those of their US counterparts. The release of these models has sparked concerns among experts, who warn that they could … Read more
A sophisticated phishing platform dubbed “ARToken” has been uncovered by Cisco Talos researchers, revealing a vast toolkit designed to compromise Microsoft 365 users. The platform appears to be an affiliate of the notorious EvilTokens phishing platform, which was first exposed earlier this year. The discovery was made while investigating phishing infrastructure used in an incident … Read more
A sophisticated malware threat, dubbed Armored Likho, has been uncovered targeting government agencies and power sector organizations worldwide. This cyber espionage campaign leverages the BusySnake stealer malware to infiltrate and exfiltrate sensitive data from high-profile targets. At its core, Armored Likho is a highly customized and heavily modified version of BusySnake, a notorious information-stealing malware … Read more