ESET researchers have reported a new vulnerability, referred to as a UEFI Secure Boot bypass, that can potentially affect Microsoft-signed applications. Known as CVE-2024-7344, this vulnerability can be exploited to install bootkits, even if Secure Boot is enabled on the…
Latest posts
Urgent Security Patches Released: Apple Targets Zero-Click iMessage Exploit
Today, Apple rolled out crucial security patches aimed at neutralizing two active zero-day vulnerabilities. These flaws were part of a zero-click exploit chain that enabled the installation of NSO Group’s notorious Pegasus spyware on iPhones running the latest iOS 16.6…
Sourcegraph Falls Victim to Security Breach Through Exposed Admin Token
This week, Sourcegraph, the AI-driven coding platform, disclosed a security breach incident involving unauthorized access to their website. On August 28th, an attacker exploited an admin access token mistakenly made public on July 14th. By utilizing the exposed token, the…
Massive Data Breach Strikes French Government Employment Agency, Impacting 10 Million Individuals
Pôle emploi, the French authority overseeing unemployment registration and financial support, has confirmed a significant data breach. This breach has potentially exposed the personal information of a staggering 10 million people, including current and past job seekers. One more concerning…
Ransomware Assault on Hosting Firms Results in Massive Data Loss
Two leading Danish hosting companies, CloudNordic and AzeroCloud, have faced a devastating ransomware attack. The event led to a catastrophic loss of most customer data and the necessity to shut down the entire range of systems. This includes websites, customer…
Akira Ransomware Takes Aim at Cisco VPNs to Infiltrate Organizations
A recent surge in evidence indicates that Akira, a relatively new strain of ransomware, is leveraging vulnerabilities in Cisco VPN products. This attack method provides a pathway for cybercriminals to infiltrate corporate networks and steal valuable data, ultimately encrypting it.…
Auction House Cyber Breach: $120,000 Asking Price for Network Access
In a recent cyber breach, hackers have laid claim to penetrating a prominent multi-billion dollar auction house’s network. Their audacious offer? Selling the access to the highest bidder for the sum of $120,000. This alarming development reveals the dark world…
A Widespread 400,000-Node Proxy Botnet Uncovered
Researchers have recently revealed the existence of a vast and alarming Node Proxy Botnet. This network encompasses over 400,000 Windows systems, all infected with devious malware. The hidden operations of this botnet, along with its impacts and means of protection,…
U.S. Energy Giant Falls Victim to Unprecedented QR Code Phishing Attack
Phishing attackers have found a new method to infiltrate their targets. In an unprecedented move, a major U.S. energy company was subjected to a QR code phishing attack that utilized QR codes to bypass traditional email security tools. The QR…
Gafgyt Malware Attack: EoL Zyxel Router Vulnerability
In a world where cyber threats are a constant challenge, the Gafgyt botnet malware stands out. This malware has found a weakness in a critical flaw of the end-of-life Zyxel P660HN-T1A router. It’s a serious threat that requires immediate attention.…