A large-scale phishing campaign dubbed "HubPhish" is targeting European manufacturing companies' Azure cloud infrastructure, affecting over 20,000 users. The operation uses HubSpot's Free Form Builder to create convincing Docusign-themed phishing emails that steal Office 365 credentials th...
A critical Apache Struts vulnerability (CVE-2024-53677) with a CVSS score of 9.5 is under active exploitation, enabling remote code execution through file upload manipulation. The flaw affects multiple Struts versions from 2.0.0 to 6.3.0.2 and allows path traversal attacks, potentially lea...
Russia-linked APT29 launches sophisticated cyber espionage campaign targeting government entities and Ukrainian organizations using malicious RDP configuration files. The attack, affecting 200 high-profile targets, leverages legitimate "rogue RDP" techniques with PyRDP relays and TOR nodes...
Interpol advocates replacing the term "Pig Butchering" with "romance baiting" for online relationship investment scams to reduce victim stigma. These scams, which combine fake relationships with fraudulent investment schemes, caused $4.57 billion in losses in 2023. The terminology change a...
A newly discovered tax-themed phishing campaign targeting Pakistan deploys sophisticated backdoor malware through MSC files disguised as tax documents. The operation, named FLUX#CONSOLE, uses innovative techniques including double file extensions and JavaScript execution through Microsoft ...
