2024 saw a 20% increase in exploited vulnerabilities, with 768 CVEs reported compared to 639 in 2023. Research shows 23.6% of vulnerabilities were weaponized during or before disclosure, with Chinese threat actors heavily involved. Log4j remains the most targeted vulnerability, while 400,0...
Taiwan has banned Chinese AI platform DeepSeek across government agencies and critical infrastructure due to security concerns over data transmission and information leakage. Following similar actions by other nations, this decision comes amid growing global challenges including vulnerabil...
A new threat actor named GamaCopy has emerged, mimicking tactics of the Russian Gamaredon group to target Russian-speaking entities. Using military-themed bait files, GamaCopy deploys UltraVNC remote access tool through sophisticated phishing campaigns. The group shares technical similarit...
A sophisticated malware campaign using MintsLoader targets critical infrastructure sectors in the US and Europe, employing advanced social engineering and multi-stage attacks. The campaign delivers malware through spam emails with fake CAPTCHA pages, utilizing PowerShell-based loader malwa...
Five individuals, including North Korean nationals, were indicted in a sophisticated fraud scheme where North Korean IT workers used forged identities to secure remote positions at U.S. companies. Operating from 2018 to 2024, the scheme targeted 64 companies, generated over $866,000 in rev...
