hackers

Virtuoso disguise leaves companies no chance to detect attacks. Security researchers from the 360 Advanced Threat Research Institute recently discovered that the Iranian hacker group MuddyWater is actively using legitimate remote monitoring and control (RMM) software in its attacks. This group...

Researchers have discovered a serious vulnerability in Infineon chips. Researchers have discovered a serious vulnerability in the popular YubiKey 5 two-factor authentication devices. This finding could jeopardize the security of many users who rely on these tokens to protect their accounts...

The pro-China manipulative campaign gained momentum in the run-up to the elections. Chinese influence operation Spamouflage has stepped up its efforts ahead of the 2024 US presidential election. According to a study by Graphika, behind this malicious activity are structures associated with the...

The dangerous Zero-day was used long before the patch appeared. On September 2, security researcher Sergey Kornienko of PixiePoint published an analysis and demonstration of the exploitation of a critical zero-day vulnerability in the Windows kernel known as CVE-2024-38106. This privilege...

The new DARPA project was developed based on the most stringent cryptographic standards. The US Defense Advanced Research Projects Agency (DARPA) has unveiled the source code for the RACE (Resilient Anonymous Communication for Everyone) distributed anonymous messaging system, which is in the...

Communication with foreign intelligence services increases the risks for large corporations. In recent years, cyberattacks have become a serious threat to German companies, and their number is growing rapidly. According to a recent study by the digital association Bitkom, published in Berlin...

Maltese nationalists ask not to judge the guys who saved the FreeHour service. In 2023, four students from Malta — Giorgio Grigolo, Michael Debono, Luke Bjorn Skerry, and Luke Collins — discovered a serious vulnerability in the FreeHour app, created to help students. Instead of ignoring the...

The department answered the main question - how the attack on education in the country affected. The Ministry of Education of Guatemala officially announced a cyberattack that took place last week. As a result of the attack, the ministry's IT systems were damaged. However, the data of students...

Bi.Zone analysts noted that since the beginning of 2024, commercial malware, whose developers prohibit its use against organizations in the CIS countries, has been increasingly used to attack Russian companies. However, attackers disable regional restrictions and "pirated" versions of malware...

The malware hides in a phishing Excel document. Recently, FortiGuard Labs, the research arm of Fortinet, documented a new phishing campaign that spreads malware through an attached Excel document. The analysis carried out showed that this document delivers a new version of Snake Keylogger, a...

Digital signatures may not be as secure as they seem. Intrinsec has presented a report on the growing market for the use of extended validation (EV) certificates in cybercriminal schemes. The report takes a closer look at the techniques used by attackers to obtain and exploit these...

How your favorite analytics tools can turn against you. Digital analytics tools such as link shorteners, location-based services, and CAPTCHAs play an important role in today's internet, helping system administrators drive traffic and marketers and advertisers deliver content to the right...

The hacking of the player's account caused a storm of discussions. On the night of August 29, the account of French football player Kylian Mbappe on the social network X was hacked. As a result of the hack, posts with offensive statements appeared on the player's page, including about Lionel...

More than 130 companies have fallen victim to social engineering. The GuidePoint Research and Intelligence Team (GRIT) has documented the activities of a highly developed hacker group with significant social engineering and network penetration skills, including the ability to communicate in...

The international campaign attacks popular networks. BforeAI researchers have identified a massive phishing campaign targeting international pizza chains, resulting in significant financial losses. The investigation began after receiving information from the Singapore police about a phishing...

Invisible instructions force the AI to act against the will of its creators. A cybersecurity researcher has discovered a critical vulnerability in Microsoft 365's integrated Copilot AI assistant that allows attackers to steal sensitive data. The exploit, previously submitted to the Microsoft...

In total, four credit institutions suffered at the hands of hackers and their bot. As it turned out, the leader of the hacker gang who robbed four banks for 1 billion rubles was an athlete from Ukraine. He turned out to be a 29-year-old boxer from the city of Sumy, Yuriy Lysenko. After moving...

How system failures caused thousands of passengers to reconsider their plans. Seattle-Tacoma International Airport (SEA-TAC) has experienced serious disruptions in its IT systems caused by a possible cyberattack. The incident, which began on August 24, caused flight delays and problems with...

How one account led to the collapse of the IT infrastructure. A group of pro-Ukrainian cybercriminals successfully attacked the IT infrastructure of a Russian industrial organization, exploiting a vulnerability in the Windows operating system. The vulnerability, known since 2022, is related to...

Scientists were cut off from a key tool for financing projects. Last week, the Dutch grant application system Isaac faced serious technical problems, which led to the temporary unavailability of the service. During the investigation, it turned out that attempts were made to invade the system...