Rapid7 researchers discovered eight critical vulnerabilities affecting 742 printer models from Brother, Fujifilm, Toshiba, and Konica Minolta. The most severe flaw (CVE-2024-51978) allows attackers to remotely generate administrator passwords using a predictable algorithm based on device s...
Cybersecurity researchers have identified a sophisticated campaign (CL-CRI-1014) targeting African financial institutions since July 2023, where attackers operate as initial access brokers selling network credentials on underground forums. The cybercriminals use legitimate tools like PoshC...
A 27-year-old former Western Sydney University student has been arrested on 20 cybercrime charges for a multi-year hacking campaign that began with parking fee manipulation and escalated to stealing over 100GB of confidential data, altering academic records, and demanding $40,000 in crypto...
CISA has added three actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog: a critical AMI MegaRAC authentication bypass (CVE-2024-54085) enabling complete system control, an unpatched D-Link DIR-859 router path traversal flaw (CVE-2024-0769) used for credential...
North Korean state-backed hackers have deployed NimDoor, a sophisticated new macOS malware targeting cryptocurrency and web3 organizations through social engineering tactics disguised as Zoom SDK updates. The malware features an innovative signal-based persistence mechanism that automatica...
