The US Justice Department on Wednesday announced charges against members of the Chinese-backed i-Soon “secret” APT and APT27, the latter implicated in January’s Treasury breach. […]
Author: cyberbytes
‘EncryptHub’ OPSEC Failures Reveal TTPs & Big Plans
Is EncryptHub the most prolific cybercriminal in recent history? Or, as new information suggests, a bumbling amateur? ​The original article found on darkreading Read More
Chinese APT Silk Typhoon exploits IT supply chain weaknesses for initial access
A China-aligned threat group tracked by Microsoft as Silk Typhoon, two members of which were recently charged by US authorities, has recently shifted its focus […]
Enterprise AI Through a Data Security Lens: Balancing Productivity With Safety
Recently, 57 countries signed an agreement pledging an “open” and “inclusive” approach to AI’s development. The US and UK were not among them, with the […]
Women Faced the Brunt of Cybersecurity Cutbacks in 2024
Many women are finding that they are unhappy in their cybersecurity roles, largely due to the layoffs their companies are experiencing, cutbacks, and return to […]
.webp)
Threat Actors Mimic Electronic Frontier Foundation To Attack Gaming Community
Cybersecurity researchers have uncovered a sophisticated campaign targeting the Albion Online gaming community through impersonation of the Electronic Frontier Foundation (EFF). The operation, discovered in […]
As a SOC/DFIR Team Member, How to Analyse Real-Time Linux Malware Network Traffic
Network traffic analysis has emerged as one of the most effective methods for detecting and investigating linux based malware infections . By scrutinizing communication patterns, […]
SquareX Unveils Polymorphic Extensions that Morph Infostealers into Any Browser Extension – Password Managers, Wallets at Risk
With recent attack disclosures like Browser Syncjacking and extension infostealers, browser extensions have become a primary security concern at many organizations. SquareX’s research team discovers […]
Sitecore 0-Day Vulnerability Let Attackers Execute Remote Code
A newly disclosed critical vulnerability in Sitecore Experience Platform (CVE-2025-27218) allows unauthenticated attackers to execute arbitrary code on unpatched systems. The flaw, rooted in insecure […]
.webp)
Researchers Bypassed CrowdStrike Falcon Sensor to Execute Malicious Applications
Security researchers at SEC Consult have discovered a significant vulnerability in CrowdStrike’s Falcon Sensor that allowed attackers to bypass detection mechanisms and execute malicious applications. […]