Cybersecurity researchers have discovered ShadowV2, a sophisticated botnet that exploits misconfigured Docker containers on AWS to create a DDoS-for-hire service. The botnet uses a unique approach by creating Ubuntu containers and installing attack tools directly within them, featuring adv...
ClickFix social engineering attacks have surged 517% in 2024, using fake CAPTCHA verifications to trick users into executing malicious scripts through Windows Run dialog or macOS Terminal. The technique deploys infostealers, ransomware, and other threats, with highest activity in Japan, Pe...
Cybercrime losses hit a record $16.6 billion in 2024, up 33% from the previous year, according to the FBI's IC3 report. With 859,532 complaints filed, victims lost an average of $19,372 per incident. Seniors were particularly vulnerable, accounting for $4.8 billion in losses. Fraud dominat...
A large-scale phishing campaign has compromised 35 Chrome extensions affecting 2.6 million users by targeting developers through fake Google policy violation notices. Attackers used malicious OAuth applications to gain access and modify extensions with code designed to steal Facebook user ...
CISA warns of two actively exploited vulnerabilities affecting Windows Kernel and Adobe ColdFusion. The Windows flaw (CVE-2024-35250) enables local privilege escalation, while the Adobe vulnerability (CVE-2024-20767) allows unauthorized remote access. Federal agencies must patch by January...
