Category: Cyber Security News & Updates

Russian Ransomware Group Cuba Uses Advanced Techniques in Attacks The Russian ransomware group known as Cuba has been targeting US organizations and critical infrastructure providers in highly profitable ransomware attacks. The group employs a variety

Vulnerabilities in TP-Link Tapo L530E Smart Bulb and App Allow Wi-Fi Password Theft Academic researchers have identified four vulnerabilities in the TP-Link Tapo L530E smart bulb and its accompanying mobile application that can be exploited

Researchers Discover Fake Airplane Mode Attack on iPhones Researchers at Jamf have discovered a technique called ‘fake airplane mode’ that allows attackers to maintain connectivity on iPhones while making users believe they are offline. The

Exploitation of Citrix ShareFile Vulnerability Spikes as CISA Issues Warning The exploitation of a critical vulnerability in Citrix ShareFile, tracked as CVE-2023-24489, has seen a significant increase after the US Cybersecurity and Infrastructure Security Agency

Mirai Common Attack Methods Remain Consistent, Effective The Mirai botnet, known for driving large-scale distributed denial of service (DDoS) attacks, continues to be a significant threat. Despite minimal evolution, Mirai and its variants exploit vulnerabilities

Cybercriminals Abusing Cloudflare R2 for Hosting Phishing Pages, Experts Warn The use of Cloudflare R2 to host phishing pages has increased 61-fold in the past six months, with the majority of campaigns targeting Microsoft login

Health Data of 4M Stolen in Cl0p MOVEit Breach of Colorado Department The Colorado Department of Health Care Policy & Financing (HCPF) has suffered a cyberattack by the Cl0p ransomware group, resulting in the theft

XWorm and Remcos RAT Exploit PDF Files to Infect Critical Infrastructure A phishing campaign targeting victims in Europe and North America is using a malicious PDF file to deliver a Rust-based injector called Freeze[.]rs, which

EvilProxy Cyberattack Flood Targets Execs via Microsoft 365 A phishing campaign called EvilProxy has targeted thousands of Microsoft 365 user accounts worldwide, sending 120,000 phishing emails to over 100 organizations in a three-month period. The

Major Design Flaw in Billions of Intel CPUs Exposes Data Leakage Vulnerability A newly revealed flaw in Intel CPUs, called ‘Downfall,’ allows for data leakage between users sharing a computer or cloud environment. The vulnerability