Two malicious Python packages, zebo and cometlogger, were discovered on PyPI repository, targeting users worldwide. Zebo captures keystrokes and screenshots, while cometlogger steals sensitive data from popular platforms and monitors system activities. Both packages employ sophisticated te...
North Korean hackers from the TraderTraitor group stole $308 million in cryptocurrency from DMM Bitcoin through a sophisticated social engineering attack targeting Ginco, a Japanese wallet software company. The attackers compromised an employee using a malicious Python script, accessed une...
A new sophisticated Mirai botnet variant is actively exploiting vulnerabilities in DigiEver NVRs, TP-Link routers, and Teltonika RUT9XX devices since October. The malware uses advanced encryption techniques, targets multiple system architectures, and compromises devices for DDoS attacks an...
ESA's merchandise web store was taken offline following the discovery of a payment skimming attack that used malicious JavaScript to redirect customers to fake Stripe payment pages. The attackers used a lookalike domain to harvest credit card information, highlighting sophisticated e-comme...
Apache Tomcat releases critical security patches for remote code execution vulnerabilities (CVE-2024-56337 and CVE-2024-50379) affecting multiple versions. The issues involve TOCTOU race conditions on case-insensitive file systems. Users must upgrade to latest versions and adjust Java conf...
