A Critical Vulnerability Uncovered: Malicious Cloned Repositories Can Now Trigger Windows Code Execution A disturbing discovery has been made in the world of cybersecurity, where hackers are exploiting a flaw in popular version control systems to execute malicious code on Windows computers. The vulnerability, known as the “Cursor Flaw,” affects repositories cloned from GitHub and … Read more
Critical Vulnerabilities Patched in Latest Chrome and Firefox Updates In a move to protect millions of internet users worldwide, Google and Mozilla have released fresh updates for their respective browsers, Chrome 150 and Firefox 152. These patches address critical vulnerabilities that could be exploited by attackers to gain unauthorized access to sensitive data or even … Read more
Microsoft 365 Users at Risk as New Phishing Kits Emerge, Evading Multi-Factor Authentication Cybersecurity researchers have discovered two sophisticated phishing kits, Jalisco and OmegaLord, designed to target Microsoft 365 accounts and evade multi-factor authentication (MFA) protections. These tools demonstrate how threat actors are continually adapting their tactics to stay ahead of modern security defenses. Jalisco … Read more
US Charges Alleged Operators of Russian Bulletproof Hosting Service, Seeking $62M in Damages In a major crackdown on cybercrime infrastructure, US federal prosecutors have unsealed charges against three Russian nationals accused of providing “bulletproof hosting” (BPH) services to ransomware gangs that caused over $62 million in damages worldwide. The alleged operators of the BPH services, … Read more
Microsoft has temporarily blocked a recent batch of Windows 11 security updates on certain Dell PCs due to shutdowns and performance issues caused by an incompatibility between new Windows software and existing hardware drivers. The issue, which affects only some Dell devices after installing the KB5101650 update, is a stark reminder that even well-intentioned updates … Read more
Cybersecurity firm SonicWall has issued a warning about two critical zero-day vulnerabilities affecting its SMA 1000 series of remote access appliances, potentially allowing attackers to gain unauthorized access and execute administrative commands on affected systems. The flaws, discovered by security researchers using artificial intelligence-powered tools, have sparked concerns among organizations that rely on the widely-used … Read more
Nigeria’s rapid digital transformation has led to a surge in cyberattacks, with the average organization facing 4,361 attempted attacks per week. Despite a 46% drop in reported fraud incidents over four years, losses from those incidents have increased as cybercriminals create more lucrative schemes. The country’s economic liberalization efforts, including allowing its currency to float … Read more
The US Treasury Department’s Office of Foreign Assets Control (OFAC) has taken a significant step in combating ransomware attacks against American organizations, sanctioning two individuals and one entity that enabled such crimes. The move targets First VPN Service (1VPNS), a virtual private network provider with ties to ransomware groups, as well as its administrator, Dmytro … Read more
Cyberattackers have unleashed two sophisticated phishing kits that target Microsoft 365 accounts, exploiting vulnerabilities in multi-factor authentication (MFA) to gain unauthorized access. The Jalisco and OmegaLord toolkits, analyzed by cybersecurity firm ReliaQuest, demonstrate the evolving tactics of threat actors as they adapt to modern security measures. Jalisco employs a device-code phishing method to trick victims … Read more
The US government has taken a significant step in its ongoing fight against cybercrime, charging three Russian nationals with operating a bulletproof hosting (BPH) service that provided infrastructure to ransomware gangs responsible for over $62 million in damages worldwide. The indictment unsealed on Tuesday targets Aleksandr Volosovik, Yulia Pankova, and Kirill Zatolokin, who allegedly owned … Read more