Cybersecurity Insights
& Security Research

Hacking

North Korean Threat Actors Target Developers with Malicious npm Packages

A recent surge in malicious npm packages has been linked to North Korean threat actors, highlighting a coordinated effort to target software developers and...

• Eng. Donya Bino
• Aug 30, 2024

Read Article

Hacking

Chinese-Speaking Users Targeted in Sophisticated Cobalt Strike Campaign

A highly organized and sophisticated cyber attack campaign, codenamed SLOW#TEMPEST, is targeting Chinese-speaking users. Researchers from Securonix have un...

• Eng. Donya Bino
• Aug 30, 2024

Read Article

Hacking

Critical Atlassian Confluence Flaw Exploited for Cryptocurrency Mining

Threat actors are actively exploiting a critical security vulnerability in Atlassian Confluence Data Center and Confluence Server to conduct unauthorized c...

• Eng. Donya Bino
• Aug 30, 2024

Read Article

Exploits

APT29 Exploits Chrome and Safari Flaws in Watering Hole Attack Campaigns

Cybersecurity researchers have uncovered a series of exploit campaigns conducted by the Russian state-backed hacking group known as APT29 (aka Midnight Bli...

• Eng. Donya Bino
• Aug 30, 2024

Read Article

Hacking

U.S. Agencies Warn of Iranian Hacking Group's Ongoing Ransomware Attacks

U.S. cybersecurity and intelligence agencies have called out an Iranian hacking group for breaching multiple organizations across the country and coordinat...

• Eng. Donya Bino
• Aug 30, 2024

Read Article

Exploits

Critical Security Flaw in WPML WordPress Plugin Allows Remote Code Execution

Critical Security Flaw in WPML WordPress Plugin Allows Remote Code Execution A critical security flaw has been identified in the WPML (WordPress Multiling...

• Eng. Donya Bino
• Aug 30, 2024

Read Article

Hacking

New QR Code Phishing Campaign Exploits Microsoft Sway to Steal Credentials

Cybersecurity researchers have identified a new wave of phishing attacks that exploit Microsoft Sway, a cloud-based content creation tool, to host fake pag...

• Eng. Donya Bino
• Aug 30, 2024

Read Article

Exploits

BlackByte Ransomware Group Exploits VMware ESXi Flaw and Vulnerable Drivers

The BlackByte ransomware group has been observed exploiting a recently patched authentication bypass vulnerability in VMware ESXi, tracked as CVE-2024-3708...

• Eng. Donya Bino
• Aug 30, 2024

Read Article