The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Mirasvit’s Full Page Cache Warmer extension for Magento to its Known Exploited Vulnerabilities (KEV) catalog. The flaw, identified as CVE-2024-34102, allows unauthenticated attackers to execute arb
The United Nations World Food Programme (WFP) has confirmed a significant data breach affecting approximately 600,000 Palestinian households in Gaza. The incident exposed sensitive beneficiary information including names, identification numbers, and family details of individuals relying on humanitar
Phishing campaigns have undergone a significant tactical shift, with cybercriminals increasingly abandoning traditional fake login pages in favor of deploying infostealer malware directly. This evolution represents a more dangerous threat landscape where attackers prioritize persistent system access
eSIM technology is rapidly displacing traditional physical SIM cards, offering convenience and flexibility but introducing new attack surfaces. While eSIMs eliminate physical theft vulnerabilities, they create opportunities for remote exploitation, SIM swap attacks, and unauthorized profile provisio
The cybersecurity landscape is undergoing a seismic shift as artificial intelligence becomes weaponized by both attackers and defenders. Organizations face unprecedented challenges as AI-powered attacks evolve faster than traditional defenses can counter them. This transformation demands immediate a
Security researchers have identified hard-coded credentials in NAVTOR’s NavBox maritime navigation system, exposing vessels to potential unauthorized access and control. The vulnerability affects multiple NavBox versions used across commercial shipping fleets worldwide. Attackers with network access
A sophisticated supply chain attack has compromised 36 npm packages with IronWorm malware, targeting developers’ systems to exfiltrate sensitive data and establish persistent backdoors. The malicious packages received thousands of downloads before detection, affecting developers worldwide who integr
Cybercriminals are systematically exploiting the operational gaps in enterprise vulnerability management programs rather than solely targeting unpatched systems. Recent threat intelligence reveals attackers focus on scanning windows, patch deployment delays, asset inventory blind spots, and prioriti
The Kali365 Phishing-as-a-Service (PhaaS) platform has significantly expanded its targeting capabilities beyond Microsoft 365 to include Okta identity services and MAX Messenger communication platform. This evolution represents a dangerous shift in the PhaaS ecosystem, enabling even low-skilled thre
The North Korean state-sponsored Lazarus Group has launched a sophisticated npm brandjacking campaign targeting software developers. By creating typosquatted packages that mimic legitimate libraries, the threat actors are distributing malware designed to steal credentials, cryptocurrency wallets, an