Threat actors have been systematically scanning and mapping GitHub organizations, repositories, and user accounts using a network of dormant “ghost” accounts. The abuse of GitHub’s API has been ongoing for several months, with multiple overlapping campaigns using leaked credentials and automated scanners to gather information. The activity, discovered by cybersecurity firm Datadog, involves exploiting publicly … Read more
A new wave of sophisticated cyberattacks has hit Pakistan’s Balochistan region, with hackers exploiting vulnerabilities in the province’s police portal to conduct espionage operations across multiple groups. The attacks, which have been linked to a well-coordinated campaign, highlight the growing threat of AI-powered vulnerability discovery and exploitation. The Balochistan Police Portal is an online platform … Read more
A critical vulnerability in the npm package jscrambler 8.14.0 has been exploited by attackers, installing a malicious Rust-based infostealer on victims’ systems during installation. The compromised package was available for download from npm’s official registry until July 7, when it was removed after being flagged by users. The vulnerability is particularly concerning due to the … Read more
A critical component of a computer’s memory has been compromised, leaving many organizations vulnerable to attack. The stack, a region where temporary data is stored, has been targeted by malicious actors looking to hijack program execution. The stack works like a physical pile of plates in your kitchen – new “plates” are added to the … Read more
Cybersecurity professionals and network administrators are breathing a sigh of relief as Wireshark, a popular network protocol analyzer, has just released its latest version – 4.6.7. This update addresses a pressing concern for anyone who relies on Wireshark to monitor and troubleshoot their network traffic: the presence of several security vulnerabilities. The update is notable … Read more
A major credential leak in May has prompted the US Cybersecurity and Infrastructure Security Agency (CISA) to take decisive action to strengthen its security posture. The agency’s swift response to the incident, which included revoking access to sensitive materials and analyzing log files to assess the scope of the breach, has been hailed as a … Read more
A key player in a wave of devastating Ryuk ransomware attacks has been brought to justice, with an Armenian national pleading guilty to computer fraud and conspiracy. Karen Serobovich Vardanyan’s guilty plea marks a significant development in the ongoing effort to hold accountable those responsible for unleashing chaos on businesses and organizations worldwide. Between November … Read more
A Global Campaign of Cyber Attacks Targets Vulnerable Websites Worldwide, with Australian Businesses Hit Hardest The Australian Cyber Security Centre (ACSC) has sounded the alarm about a massive global campaign aimed at exploiting weaknesses in content management systems (CMS) and plugins. This coordinated attack is not only targeting businesses in Australia but also spreading its … Read more
A recent tool has been released to help students and cybersecurity professionals alike better understand how a program’s memory stack works, a critical component of malware analysis. The “stack simulator” created by Xavier Mertens is an interactive assembly editor that visualizes the impact on the stack and registers when code is executed. The stack is … Read more
A Critical Patch for Wireshark Released, Securing Millions of Users Worldwide Wireshark, a widely-used network protocol analyzer, has just received an urgent update to fix 12 critical vulnerabilities and 16 bugs in its latest release, version 4.6.7. This is not just a routine patch – it’s a critical security update that affects millions of users … Read more