A vulnerability in Google's Gemini CLI allowed attackers to silently execute malicious commands and exfiltrate data from developers' computers using allowlisted programs. The flaw was discovered and reported to Google …
Scattered Spider hackers have been aggressively targeting virtualized environments by attacking VMware ESXi hypervisors at U.S. companies in the retail, airline, transportation, and insurance sectors. According to the Google Threat …
Insurance company Allianz Life has confirmed that the personal information for the “majority” of its 1.4 million customers was exposed in a data breach that occurred earlier this month. “On …
More than 200,000 WordPress websites are using a vulnerable version of the Post SMTP plugin that allows hackers to take control of the administrator account. Post SMTP is a popular …
- Cyber Security
U.S. Sanctions Firm Behind N. Korean IT Scheme; Arizona Woman Jailed for Running Laptop Farm
U.S. Sanctions Firm Behind N. Korean IT Scheme; Arizona Woman Jailed for Running Laptop Farm The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) sanctioned a North …
Patchwork Targets Turkish Defense Firms with Spear-Phishing Using Malicious LNK Files The threat actor known as Patchwork has been attributed to a new spear-phishing campaign targeting Turkish defense contractors with …
Cyber Espionage Campaign Hits Russian Aerospace Sector Using EAGLET Backdoor Russian aerospace and defense industries have become the target of a cyber espionage campaign that delivers a backdoor called EAGLET …
A hacker planted data wiping code in a version of Amazon's generative AI-powered assistant, the Q Developer Extension for Visual Studio Code. Amazon Q is a free extension that uses …
- Cyber Security
Soco404 and Koske Malware Target Cloud Services with Cross-Platform Cryptomining Attacks
Soco404 and Koske Malware Target Cloud Services with Cross-Platform Cryptomining Attacks Threat hunters have disclosed two different malware campaigns that have targeted vulnerabilities and misconfigurations across cloud environments to deliver …
