Chinese state-linked hackers targeted Southern European IT providers in 'Operation Digital Eye' using Visual Studio Code tunnels as a backdoor. The campaign, discovered between June-July 2024, exploited SQL injection vulnerabilities and leveraged legitimate VSCode installations to maintain...
Black Basta ransomware group has evolved their tactics, incorporating Zbot and DarkGate payloads alongside sophisticated social engineering techniques. They now utilize email bombing and direct communication through Microsoft Teams, impersonating IT support. The group deploys legitimate re...
Medical device manufacturer Artivion suffered a ransomware attack on November 21, causing operational disruptions and data theft. While core operations have been restored, the Atlanta-based company expects costs beyond insurance coverage. The incident joins recent healthcare sector cyberat...
A critical security vulnerability (CVE-2024-54143, CVSS v4: 9.3) was discovered in OpenWrt's Attended Sysupgrade feature, potentially enabling attackers to distribute malicious firmware. The flaw involves command injection vulnerability and insecure hash implementation in the sysupgrade se...
Microsoft partially lifts Windows 24H2 update restriction affecting Ubisoft games like Star Wars Outlaws and Avatar: Frontiers of Pandora, following temporary hotfixes for crash and audio issues. New safeguard holds implemented for systems with outdated Google Workspace Sync, incompatible ...
