Researchers at Wiz have uncovered an ongoing campaign by threat actor JINX-0126 targeting vulnerable PostgreSQL databases to deploy cryptocurrency mining malware. The operation, an evolution of the PG_MEM campaign, employs sophisticated evasion techniques including unique hash signatures, ...
Security researchers at Resecurity exploited a vulnerability in BlackLock ransomware's data leak site, gaining access to critical infrastructure files and operational details. The breach revealed the group's use of Rclone for data exfiltration to MEGA cloud storage, connections to other ra...
Google has introduced end-to-end encryption for Gmail enterprise users, allowing them to send encrypted emails to any recipient without specialized software or certificates. This client-side encryption feature, currently in beta, will gradually roll out to all Gmail users and eventually su...
Researchers have identified 46 security vulnerabilities (named SUN:DOWN) in solar inverters from Sungrow, Growatt, and SMA that could allow attackers to take control of devices or execute remote code, threatening electrical grid stability. Critical flaws include remote code execution, user...
Lucid, an advanced phishing-as-a-service platform developed by Chinese hacking group XinXin, targets users across 88 countries through Apple iMessage and Android RCS messaging. Operating on a subscription model, it uses iPhone device farms and mobile emulators to distribute phishing links ...
