Vulnerabilities

In brief: Threat actors exploit multiple Cisco flaws, Sandworm launched multiple data-wiping cyberattacks against Ukraine, and more.  ​ Read More  ​ 

Еhe malicious activity was limited to unauthorized access of cloud backup files from a specific cloud environment via an API callю  ​ Read More  ​ 

PROMPTFLUX is written in VBScript and uses a hard-coded API key to query Google’s Gemini model.  ​ Read More  ​ 

The campaign’s TTPs bear strong resemblance to known Iranian cyber espionage groups, including TA455, Charming Kitten, and MuddyWater.  ​ Read More  ​ 

The trio acted as affiliates of the BlackCat ransomware gang, breaching corporate networks, stealing sensitive data, encrypting systems, and demanding ransom payments.  ​ Read More  ​ 

The sanctions are part of a broader effort to curb North Korea’s global financial network that support the regime’s weapons development.  ​ Read More  ​ 

The attackers deployed two custom tools CurlyShell and CurlCat designed for remote code execution and covert communications.  ​ Read More  ​ 

The company disclosed that the exploit specifically targeted its V2 Composable Stable Pools.  ​ Read More  ​ 

The malware deploys a complex infrastructure that combines OpenSSH for Windows with a customized Tor hidden service.  ​ Read More  ​ 

The infection chain uses a loader and a .NET-based backdoor component that leverages OpenAI as a C&C channel.  ​ Read More  ​ 

Attackers have used a combination of spear-phishing emails, hijacked business conversations, and compromised accounts to post fake freight listings on load boards.  ​ Read More  ​ 

Ruter confirmed that the Chinese company has access to the bus’s software updates, diagnostics, and battery systems.  ​ Read More  ​ 

The malicious campaign used a ZIP attachment, which masqueraded as a VPN invoice.  ​ Read More  ​ 

BadCandy grants attackers root-level command execution on compromised systems.  ​ Read More  ​ 

In brief: Microsoft patches a WSUS flaw, a major US telecom supplier compromised by nation-state hackers, and more.  ​ Read More  ​