BeyondTrust, a leading Privileged Access Management provider, suffered a security breach in December 2023 affecting its Remote Support SaaS platforms. Attackers gained unauthorized access to API keys, enabling password resets for local accounts. Two vulnerabilities were identified: a criti...
Ukrainian cybercriminal Mark Sokolovsky received a five-year prison sentence for operating Raccoon Stealer, a malware-as-a-service operation that compromised over 52 million credentials worldwide. Arrested in 2022 through international law enforcement cooperation, he pleaded guilty to frau...
Federal authorities are investigating TP-Link over national security concerns, potentially leading to a 2025 product ban. The probe follows the discovery of Chinese hackers exploiting TP-Link routers in sensitive government networks and concerns over the company's market dominance and pric...
A sophisticated phishing campaign targeting European manufacturing companies has compromised approximately 20,000 Microsoft Azure accounts by exploiting HubSpot's Free Form Builder. The attackers created deceptive DocuSign-branded forms redirecting to fake Microsoft login pages, primarily ...
A sophisticated supply chain attack involving 18 malicious Visual Studio Code extensions and npm packages has been discovered targeting developers and cryptocurrency projects. The malware, masquerading as legitimate development tools, uses obfuscated payloads and suspicious domains to comp...
