TechKranti

U.S. Seizes 32 Pro-Russian Propaganda Domains In Major Disinformation Crackdown The U.S. Department of Justice (DoJ) seized 32 pro-Russian propaganda domains used by the Kremlin-backed Doppelganger campaign to covertly spread disinformation, bolster pro-Russian policies, and

Hackers Use Rare Stealth Techniques To Down Asian Military, Govt Orgs Cyber attackers resembling APT41 are leveraging two rare techniques—GrimResource and AppDomainManager Injection—to compromise high-level organizations in Southeast Asia, including government and military entities. GrimResource

Hacktivists Exploits Winrar Vulnerability In Attacks Against Russia And Belarus Hacktivist group Head Mare has been targeting organizations in Russia and Belarus by exploiting the CVE-2023-38831 vulnerability in WinRAR to deploy custom malware and ransomware.

Cyberattackers Exploit Google Sheets For Malware Control In Likely Espionage Campaign A sophisticated malware campaign exploiting Google Sheets as a command-and-control (C2) platform has been detected, targeting over 70 global organizations across various sectors, with

Blackbyte Ransomware Still Capitalizing On Known Vmware ESXi Flaw Despite repeated warnings, the ransomware group BlackByte is actively exploiting an authentication bypass vulnerability in VMware ESXi, allowing them to gain full control over virtual machines

Dick’s Sporting Goods Says Confidential Data Exposed In Cyberattack DICK’S Sporting Goods has disclosed a cyberattack that exposed confidential information within its systems. Upon detecting the breach, the company activated its cybersecurity response plan, shut

Chinese Volt Typhoon Exploits Versa Director Flaw, Targets U.S. And Global IT Sectors The Chinese cyber espionage group Volt Typhoon has exploited a zero-day vulnerability in Versa Director, targeting U.S. and global IT sectors, particularly

Georgia Tech Sued Over Alleged False Cybersecurity Reports To Win Dod Contracts The U.S. government has intervened in a whistleblower lawsuit against Georgia Tech and its affiliate, Georgia Tech Research Corporation (GTRC), accusing them of

Five Million WordPress Websites in Danger Due to Critical LiteSpeed Cache Vulnerability A critical vulnerability in the LiteSpeed Cache plugin, used by over five million WordPress websites, allows attackers to gain administrator-level access and potentially

Slack Patches AI Bug That Let Attackers Steal Data From Private Channels Slack has patched a critical flaw in its AI feature that allowed attackers to exploit a prompt injection vulnerability, enabling them to steal