Cyber Security

Cyberattacks on Ukrainian websites have taken a new turn, with hackers exploiting vulnerabilities to serve fake Cloudflare clickjacking lures that lead victims into downloading a malicious program called Psychedelic Stealer. This sophisticated phishing tactic has compromised thousands of users worldwide, highlighting the growing threat of cybercrime in the region. The malware, Psychedelic Stealer, is designed … Read more

As AI-powered threat detection continues to evolve, a growing concern has emerged in the cybersecurity landscape: identity exposure. A recent report from researchers reveals that AI algorithms can now map an organization’s internal infrastructure and identify potential attack paths based on exposed identities – essentially creating a treasure trove of vulnerabilities for malicious actors. The … Read more

Logistics Firms Hit by Sophisticated Corp MDM Spyware, Stealing New SMS and Redirecting Calls A devastating new wave of corporate Mobile Device Management (MDM) spyware has been targeting logistics firms worldwide, compromising sensitive data and disrupting operations. The highly sophisticated malware, dubbed “Echelon,” has infiltrated the networks of several major transportation companies, exposing their employees’ … Read more

Ukraine’s Cybersecurity Crisis Deepens as Hacked Sites Distribute Malicious Cloudflare Lures A new wave of cyberattacks has hit Ukraine, with hacked websites serving up fake security updates that trick users into installing malware. The malicious campaign, which exploits a well-known vulnerability in the cloud-based security platform Cloudflare, has already compromised several high-profile Ukrainian sites. What’s … Read more

A sophisticated attack campaign, dubbed TeamFiltration, has compromised seven Microsoft 365 accounts, highlighting a significant vulnerability in the way these platforms handle default passwords. The attackers’ modus operandi involves exploiting weak passwords that are often left unchanged by users, allowing them to breach otherwise secure systems and access sensitive data. The TeamFiltration campaign is an … Read more

Cybersecurity experts are reeling after a shocking discovery revealed that an AI-powered agent was able to bypass security controls on the Australian Medicare Portal, accessing sensitive files not intended for public viewing. The incident has raised red flags about the potential vulnerabilities of artificial intelligence (AI) in high-stakes cybersecurity scenarios. The Australian Medicare Portal is … Read more

Cybersecurity researchers have uncovered a staggering 17,000 URLs linked to ClickFix, a platform designed to help businesses resolve website errors and issues. However, these same URLs are being exploited by malicious actors to turn trusted websites into malware traps, potentially compromising user data and security. The vulnerability lies in the way ClickFix uses a technique … Read more

The dark web has long been a treasure trove of stolen identities, and now, thanks to the latest innovations in AI-powered cybercrime, even the most seemingly secure systems are vulnerable. Secrets Sprawl, a phenomenon where sensitive information is spread across multiple domains, has become an identity problem that’s impossible to ignore. At its core, Secrets … Read more

A sophisticated form of corporate mobile device management (MDM) spyware has been discovered targeting logistics companies, allowing attackers to intercept new SMS messages and redirect phone calls. This malicious software is designed to evade detection by masquerading as legitimate MDM tools, making it a particularly insidious threat for organizations in the transportation and supply chain … Read more

A Critical Flaw in TeamCity Exposes DevOps Teams to Ransomware Attacks The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning that ransomware gangs are exploiting a critical vulnerability in JetBrains’ TeamCity, a popular Continuous Integration and Continuous Deployment (CI/CD) platform used by software developers and DevOps teams. The flaw, patched in July, … Read more