A sophisticated Russian-linked cyber campaign disrupted Romania's presidential elections, leading to their invalidation. The operation combined over 85,000 cyberattacks on election infrastructure with a coordinated TikTok influence operation involving 100+ influencers and 25,000 suspicious...
A newly discovered zero-day vulnerability affecting Windows 7 through Windows 11 24H2 allows attackers to steal NTLM credentials when users simply view malicious files in File Explorer. The flaw triggers unauthorized NTLM connections to remote shares, exposing credential hashes without req...
Termite ransomware group claims responsibility for a November cyberattack on Blue Yonder, a major supply chain software provider, affecting global clients like Microsoft, DHL, and Western Digital. The attack disrupted services, impacting operations at Starbucks, UK supermarkets, and other ...
Russian state-backed Gamaredon group targets Ukrainian entities using Cloudflare Tunnels to mask malware infrastructure. Their sophisticated spear-phishing campaigns deliver GammaDrop malware through HTML smuggling, utilizing DNS fast-fluxing and DNS-over-HTTPS for stealth. The malware ena...
Venom Spider threat actors expand their malware-as-a-service operations with two new malware families: RevC2, an information-stealing backdoor, and Venom Loader, a customized loader malware. Both are deployed through VenomLNK and feature advanced capabilities including WebSocket C2 communi...
