Special Offer for Today only!
Hackers are being infected by malware hidden in a fake OnlyFans hacking tool
Hackers are targeting other hackers with a fraudulent OnlyFans tool that claims to help steal accounts but instead infects cybercriminals with the Lumma…
Clearview AI Penalized by €30.5M for Developing an Illegal Facial Recognition Database
The Dutch Data Protection Authority (Dutch DPA) has levied a €30.5 million ($33.7 million) fine against Clearview AI, a facial recognition company, for…
Vulnerabilities in Microsoft’s macOS apps enable hackers to gain full access
Eight security vulnerabilities have been identified in Microsoft applications for macOS that could be exploited by attackers to gain elevated privileges or access…
GitHub comments exploited to distribute password-stealing malware disguised as fixes
GitHub is currently being misused to distribute the Lumma Stealer, an information-stealing malware, through fake fixes posted in project comments. The campaign was…
Google Sheets Exploited by Hackers for Malware Control
Cybersecurity researchers have identified a new malware campaign that uses Google Sheets as a command-and-control (C2) channel. Proofpoint first detected this activity on…
Employee arrested for locking out Windows admins in an extortion attempt
A former core infrastructure engineer from an industrial company based in Somerset County, New Jersey, was arrested for locking Windows administrators out of…
BlackByte ransomware exploits a VMware ESXi flaw
The BlackByte ransomware group has been observed likely exploiting a recently patched security flaw in VMware ESXi hypervisors while also using vulnerable drivers…
Chinese hackers, Volt Typhoon exploited Versa
The Chinese state-sponsored hacking group Volt Typhoon is responsible for attacks exploiting a zero-day vulnerability in Versa Director, enabling them to upload a…
Linux malware ‘sedexp’ avoided detection for two years
Since 2022, a sophisticated Linux malware known as ‘sedexp‘ has been successfully avoiding detection by leveraging a persistence technique not yet recognized in…
Qilin Ransomware using VPN Credentials to Steal Chrome Data
The cybercriminals responsible for a recent Qilin ransomware attack have successfully extracted credentials stored in Google Chrome browsers from a limited number of…
GitHub Fixes Critical Security Vulnerability
GitHub has rolled out updates to resolve three security vulnerabilities affecting its Enterprise Server product, including a critical flaw that could be exploited…
Vulnerability in GiveWP WordPress Plugin Exposes Over 100,000 Websites
A critical security vulnerability has been uncovered in the GiveWP donation and fundraising plugin for WordPress, potentially affecting more than 100,000 websites and…
