ANY.RUN Cyber Attack: Employee Email Address Hacked

A leading cybersecurity company has become the latest victim of a sophisticated phishing attack. The incident, which began in late May and culminated in a large-scale email compromise on June 18, 2024, has sent shockwaves through the cybersecurity co…

New Zip Slip vulnerability Let Attackers Execute Arbitrary Code Via Path Traversal

A Zip Slip vulnerability was discovered in Artifactory, the leading software repository manager, allowing attackers to execute arbitrary code through path traversal attacks. JFrog's Artifactory is a software repository manager that leads the market.

Japan's space agency reports cyberattacks, possible data leak

The Japan Aerospace Exploration Agency, or JAXA, says it has suffered multiple cyberattacks since last year into this year and some data may have been leaked.

Chinese Hackers Deploy SpiceRAT and SugarGh0st in Global Espionage Campaign

Chinese hackers target government agencies worldwide with SugarGh0st and SpiceRAT malware.

TechCrunch is part of the Yahoo family of brands

New Rust-based Fickle Malware Uses PowerShell for UAC Bypass and Data Exfiltration

Fickle Stealer, a new Rust-based malware, and AZStealer, an open-source Python stealer, target sensitive data via multiple attack chains and exfiltrat

Singapore Police Extradites Malaysians Linked to Android Malware Fraud

Singapore Police extradite two men from Malaysia for alleged Android malware scam targeting citizens' bank accounts, resulting in financial losses.

Discord-Based Malware Attacking Orgs Linux Systems In India

Linux systems are deployed mostly in servers, in the cloud, and in environments that are considered vital; consequently, they are often compromised by attacks from threat actors.

FBI Kicks Hackers In The Teeth With Free 7,000 Ransomware Key Giveaway

If you’ve been a victim of ransomware, the FBI might be able to help you as it gives away thousands of LockBit decryption keys for free.

Commando Cat Attacking Docker remote API servers to Deploy Crypto Miners

A campaign dubbed "Commando Cat" has been observed exploiting exposed Docker remote API servers to deploy cryptocurrency miners. This campaign, active since the beginning of 2024, initiates its attacks using the publicly available Commando project.

Hackers Exploiting Amazon, Google & IBM Cloud Services To Steal Customer Data

Criminals are exploiting cloud storage services to host phishing websites for SMS scams by abusing the static website hosting feature of cloud storage to store HTML files with malicious URLs, which are included in SMS text messages that bypass firewa…

FlyingYeti APT Serves Up Cookbox Malware Using WinRAR

The Russia-aligned FlyingYeti's phishing campaign exploited Ukrainian citizens' financial stress to spread Cookbox malware.