North Korean state-sponsored hackers have stolen $659 million in cryptocurrency through major heists targeting exchanges and blockchain companies, according to US, South Korean, and Japanese authorities. Chainalysis reports even higher losses of $1.34 billion in 2023 alone. The threat exte...
A widespread cyber attack campaign targeting Microsoft 365 accounts has been detected, utilizing FastHTTP Go library for automated password brute-force attempts against Azure Active Directory. With 65% of attacks originating from Brazil, the campaign achieves a 9.7% success rate in account...
CISA warns of actively exploited vulnerabilities in BeyondTrust's remote access solutions, with CVE-2024-12686 and CVE-2024-12356 affecting federal agencies including the U.S. Treasury. Chinese state-sponsored group Silk Typhoon leveraged these flaws to access sensitive departments. While ...
A sophisticated credit card skimming campaign targets WordPress e-commerce sites by injecting malicious JavaScript into database tables. The attack focuses on checkout pages, creating fake payment forms that capture and encrypt credit card data before transmitting it to malicious servers. ...
Researchers hijacked over 4,000 web backdoors by acquiring abandoned domain infrastructure used by threat actors, exposing vulnerabilities in government, military, and educational institutions worldwide. The operation, costing minimal amounts per domain, revealed over 135,000 systems still...
