Critical Flaw in JFrog Artifactory Exposes Users to Admin Token Theft A critical vulnerability in JFrog’s popular Artifactory software has been exploited by attackers, just days after its disclosure. The flaw allows unauthorized access to admin tokens, potentially giving hackers complete control over affected systems. JFrog Artifactory is a widely used platform for managing and … Read more
Despite the proliferation of edge security controls, attackers are still managing to evade detection by hiding in plain sight. Security teams have at their disposal a range of tools designed to inspect requests, validate credentials, and identify automation signals – but even with the best technology, malicious actors can slip through undetected. The problem lies … Read more
A major healthcare company’s sensitive patient data has been compromised in a cyberattack, leaving over 1,400 cancer patients vulnerable to potential identity theft and medical record tampering. Novocure, a global oncology firm specializing in non-invasive electromagnetic field therapy for cancer tumors, revealed that its network was breached in mid-August, exposing the private information of employees … Read more
A Sophisticated Cyberattack Targets Virtualizor VPS Management Software A highly coordinated cyberattack has targeted the Virtualizor virtual private server (VPS) management software, leaving a small number of users vulnerable to potential security breaches. The attackers exploited a Border Gateway Protocol (BGP) hijacking attack to redirect update requests for Virtualizor to malicious servers, allowing them to … Read more
Iranian hackers have been using a sophisticated tactic to deliver cross-platform Remote Access Trojans (RATs) to unsuspecting victims, with the attackers posing as recruiters offering coding tests. This brazen approach has allowed them to successfully compromise multiple organizations across various industries, exploiting vulnerabilities in human psychology and technical systems alike. The modus operandi of these … Read more
A sophisticated malware campaign has been uncovered, targeting unpatched iPhones and exploiting a vulnerability in their package management system. At least 13 malicious packages have been discovered on Packagist, a popular PHP library repository, which are designed to steal cryptocurrency wallet seeds from unsuspecting iPhone users. The attack begins when an iPhone user installs one … Read more
A devastating data breach has struck cancer treatment company Novocure, exposing sensitive information of over 1,400 US cancer patients and an undisclosed number of employees. The attack, which occurred in mid-August, highlights the ongoing vulnerability of healthcare organizations to cyber threats. Novocure, a global oncology company with operations in multiple continents, is known for its … Read more
A malicious update to the Virtualizor VPS management software has been delivered to a small number of installations after hackers hijacked Border Gateway Protocol (BGP) routing for its update infrastructure. The attack, which occurred between August 28 and 30, involved a BGP hijacking that enabled the threat actor to divert traffic from Softaculous software update … Read more
A disturbing trend has emerged in the world of cybersecurity, where threat actors are no longer focused on launching innovative and complex attacks. Instead, they’re shifting their attention towards creating repeatable and reliable exploits that can be easily replicated across multiple targets. This shift in strategy highlights a concerning reality: identity exposure is becoming an … Read more
Iranian hackers have been using a sophisticated tactic to deliver malicious software, exploiting vulnerabilities in coding test platforms to gain unauthorized access to target devices. The group’s modus operandi involves posing as recruiters or HR personnel, luring unsuspecting individuals into participating in online coding tests that promise lucrative job opportunities. These seemingly legitimate coding tests … Read more