A data security platform based on action is what the industry needs right now to protect enterprise data. ​The original article found on darkreading Read […]
RaccoonO365 Phishing Network Shut Down After Microsoft and Cloudflare Disrupt 338 Domains
Microsoft’s Digital Crimes Unit said it teamed up with Cloudflare to coordinate the seizure of 338 domains used by RaccoonO365, a financially motivated threat group […]
Linux Kernel KSMBD Flaw Lets Remote Attackers Drain Server Resources
A critical vulnerability in the Linux kernel’s KSMBD implementation has been discovered that allows remote attackers to completely exhaust server connection resources through a simple […]
North Korean Group Targets South With Military ID Deepfakes
The North Korea-linked group Kimsuky used ChatGPT to create deepfakes of military ID documents in an attempt to compromise South Korean targets. ​The original article […]
Chaos-Mesh flaws put Kubernetes clusters at risk of full takeover
Researchers have found critical vulnerabilities in Chaos-Mesh, a popular platform that Kubernetes cluster owners use to simulate the impact of bugs and faults on their […]
‘Vane Viper’ Threat Group Tied to PropellerAds, Commercial Entities
Researchers say the commercial adtech platform and several other companies form the infrastructure of a massive cybercrime operation. ​The original article found on darkreading Read […]
Self-Replicating ‘Shai-hulud’ Worm Targets NPM Packages
The newly emerged worm has spread across hundreds of open source software packages, stealing credentials and infecting other components without much direct attacker input. ​The […]
Critical Bugs in Chaos Mesh Enable Cluster Takeover
“Chaotic Deputy” is a set of four vulnerabilities in the chaos engineering platform that many organizations use to test the resilience of their Kubernetes environments. […]
Warning: Hackers have inserted credential-stealing code into some npm libraries
Dozens of npm libraries, including a color library with over 2 million downloads a week, have been replaced with novel self-replicating credential-stealing code in yet […]
CrowdStrike bets big on agentic AI with new offerings after $290M Onum buy
In late August, cybersecurity giant CrowdStrike announced that it agreed to acquire real-time telemetry pipeline management company Onum for $290 million. The company said the […]