Hackers Abusing GitHub to Evade Detection and Control Compromised Hosts
Threat actors are increasingly making use of GitHub for malicious purposes through novel methods, including abusing secret Gists and issuing malicious commands via git...
WhatsApp Privacy Policy, Terms of Service Update Makes Facebook Data Sharing Mandatory
WhatsApp has updated its privacy policy and terms of service to better integrate with other products and services offered by Facebook. Unlike the release...
Experts Uncover Chinese Cybercrime Network Behind Gambling and Human Trafficking
A Chinese organized crime syndicate with links to money laundering and human trafficking across Southeast Asia has been using an advanced "technology suite" that...
Turkish Hackers Exploiting Poorly Secured MS SQL Servers Across the Globe
Poorly secured Microsoft SQL (MS SQL) servers are being targeted in the U.S., European Union, and Latin American (LATAM) regions as part of an...
Hackers allegedly leak data of Army personnel using Airtel network; company denies any breach
A Hacker Group has purportedly spilled information of Army staff utilizing the Bharti Airtel network in Jammu and Kashmir, notwithstanding, the organization has denied...
How AitM Phishing Attacks Bypass MFA and EDR—and How to Fight Back
Attackers are increasingly using new phishing toolkits (open-source, commercial, and criminal) to execute adversary-in-the-middle (AitM) attacks.AitM enables attackers to not just harvest credentials but...
Experts Uncover Severe AWS Flaws Leading to RCE, Data Theft, and Full-Service Takeovers
Cybersecurity researchers have discovered multiple critical flaws in Amazon Web Services (AWS) offerings that, if successfully exploited, could result in serious consequences."The impact of...
Malicious PyPI Package Targets macOS to Steal Google Cloud Credentials
Cybersecurity researchers have discovered a malicious package on the Python Package Index (PyPI) repository that targets Apple macOS systems with the goal of stealing...
Cybercriminals Exploit Popular Software Searches to Spread FakeBat Malware
Cybersecurity researchers have uncovered a surge in malware infections stemming from malvertising campaigns distributing a loader called FakeBat."These attacks are opportunistic in nature, targeting...
Spotify Suffers Second Credential-Stuffing Cyberattack in 3 Months
Spotify, which has become an exceptionally mainstream web based streaming music stage, is experiencing a second digital accreditation assault after only three months of...