THREATS

Infamous XZ Backdoor Found Hidden in Docker Images for Over a Year

Security researchers at Binarly have discovered that the sophisticated supply chain hack still exists in publicly accessible Docker images on…

1 year ago

Hackers Deploy Dedicated Phishlet for FIDO Authentication Downgrade Attacks

Proofpoint researchers have uncovered a novel technique allowing threat actors to bypass FIDO-based authentication through downgrade attacks, leveraging a custom…

1 year ago

Malicious npm Package Lures Job Seekers and Exfiltrates Sensitive Data

A self-proclaimed Ukrainian Web3 team targeted a community member during an interview's first round by instructing them to clone and…

1 year ago

Wikipedia Loses Legal Challenge to UK’s Online Safety Act Rules

Mr Justice Johnson at the High Court of Justice in London, the Wikimedia Foundation and a Wikipedia user known as…

1 year ago

Hackers Extradited to US Over $100 Million Romance Scams and Other Frauds

United States Attorney for the Southern District of New York, Jay Clayton, alongside FBI Assistant Director in Charge Christopher G.…

1 year ago

UAC-0099 Tactics, Techniques, Procedures and Attack Methods Revealed

UAC-0099, a persistent threat actor active since at least 2022, has conducted sophisticated cyber-espionage operations against Ukrainian government, military, and…

1 year ago

Typosquatted PyPI Packages Used by Threat Actors to Steal Cryptocurrency from Bittensor Wallets

GitLab's Vulnerability Research team has uncovered a highly sophisticated cryptocurrency theft campaign exploiting typosquatted Python packages on the Python Package…

1 year ago

Over 5,000 Fake Online Pharmacies Caught Selling Counterfeit Medicines

Researchers at Gen have uncovered a vast network of over 5,000 fraudulent online pharmacy domains operated by a single cybercriminal…

1 year ago

Malicious Go Packages Used by Threat Actors to Deploy Obfuscated Remote Payloads

Socket's Threat Research Team has identified eleven malicious Go packages distributed via GitHub, with ten remaining active on the Go…

1 year ago

Over 60 Malicious RubyGems Packages Used to Steal Social Media and Marketing Credentials

Socket's Threat Research Team has exposed a persistent campaign involving over 60 malicious RubyGems packages that masquerade as automation tools…

1 year ago