A sophisticated Windows botnet, dubbed x47.c, has been discovered on the market, leveraging AI to maintain persistence on infected hosts and drain victims’ paid AI credits. The botnet, advertised by a threat actor named WraithTools, offers a range of malicious capabilities, including DDoS attacks, credential theft, and SOCKS5 proxies. The x47.c botnet’s command-and-control (C&C) panel … Read more
Cybersecurity firm Kiteworks has issued an urgent warning to its customers, advising them to shut down their systems for nine hours due to a possible cyber attack. The company’s notification comes after it detected potential indicators of compromise (IoCs) suggesting that hackers may be actively targeting its products. For those unfamiliar with the term, IoCs … Read more
Cybersecurity Threats on the Rise: SharePoint and MikroTik Vulnerabilities Exploited in the Wild A double whammy of security threats has emerged, with hackers actively exploiting critical vulnerabilities in Microsoft’s SharePoint platform and MikroTik RouterOS. The attacks are putting organizations and individuals at risk, highlighting the importance of robust cybersecurity measures. The exploits take advantage of … Read more
A critical vulnerability in the popular WordPress plugin Elementor has been discovered, allowing attackers to take control of websites by exploiting a Cross-Site Request Forgery (CSRF) flaw. The issue affects thousands of sites that rely on Elementor for website building and management, putting sensitive data at risk. The bug is triggered when an administrator clicks … Read more
A new wave of malware infections has been reported, targeting devices worldwide with a particularly insidious strain that masquerades as a legitimate Windows update. The threat, dubbed “UpdateScammer,” is spreading rapidly through unsuspecting networks and compromising systems at an alarming rate. At its core, UpdateScammer works by exploiting vulnerabilities in outdated software and then installing … Read more
MacFinger ClickFix Malware Campaign: A Closer Look at the Threat A sophisticated malware campaign targeting Mac users has been making headlines lately, with reports suggesting a link to the Atomic macOS (AMOS) Stealer. However, further investigation by cybersecurity experts reveals significant differences between this new threat and its alleged counterpart. The malware in question, delivered … Read more
The US Supreme Court has given states permission to use a federal database to verify voter citizenship, overturning lower court decisions that found the system to be inaccurate and potentially disenfranchise eligible voters. The ruling allows states to access the SAVE (Systematic Alien Verification for Entitlements) database, which was originally designed to determine benefit eligibility … Read more
A former Army soldier has been sentenced to 70 months in prison for a brazen series of cyberattacks and extortion attempts targeting major companies, including AT&T, Snowflake, and Ticketmaster. Cameron Wagenius, who was on active duty when he committed the crimes, spent over a year and a half carrying out a sweeping cybercrime campaign that … Read more
Three critical vulnerabilities discovered by cybersecurity firm Zenity Labs could have allowed attackers to steal sensitive customer relationship management (CRM) data and even hijack trusted agents for phishing attacks. Dubbed “SalesBleed,” these flaws were found in Salesforce’s Agentforce, a tool used to automate lead collection and interaction. The most alarming aspect of SalesBleed is its … Read more
A Highly Evasive Malware Campaign Targets Global Organizations with Sophisticated Tactics A disturbing new wave of malware attacks has been detected sweeping across the globe, affecting organizations in various sectors and leaving security experts scratching their heads. The attackers’ arsenal is an amalgamation of cutting-edge techniques and tactics that have left traditional defenses struggling to … Read more