Security researchers have identified hard-coded credentials in NAVTOR’s NavBox maritime navigation system, exposing vessels to potential unauthorized access and control. The vulnerability affects multiple NavBox versions used across commercial shipping fleets worldwide. Attackers with network access
A sophisticated supply chain attack has compromised 36 npm packages with IronWorm malware, targeting developers’ systems to exfiltrate sensitive data and establish persistent backdoors. The malicious packages received thousands of downloads before detection, affecting developers worldwide who integr
The North Korean state-sponsored Lazarus Group has launched a sophisticated npm brandjacking campaign targeting software developers. By creating typosquatted packages that mimic legitimate libraries, the threat actors are distributing malware designed to steal credentials, cryptocurrency wallets, an
The Five Eyes intelligence alliance has issued a joint advisory warning that Chinese state-sponsored threat actors are conducting sophisticated social engineering campaigns using fake job advertisements to target military personnel and defense contractors. These operations aim to extract classified
Russian-linked APT group Gamaredon has weaponized a known WinRAR vulnerability (CVE-2023-38831) to deploy sophisticated modular spyware against Ukrainian targets. The campaign leverages malicious archive files disguised as legitimate documents to achieve initial access, followed by multi-stage paylo
Cisco has disclosed a critical vulnerability (CVE-2024-20272) in Unified Communications Manager (UCM) that allows authenticated attackers to execute arbitrary SQL commands on affected systems. With a CVSS score of 8.8, the flaw affects multiple UCM versions and has been accompanied by public proof-o
Europol coordinated a major international law enforcement operation resulting in 29 arrests and the dismantling of nine organized crime groups running illegal streaming services. The operation targeted IPTV platforms generating millions in illicit revenue while distributing copyrighted content to hu
European law enforcement agencies, coordinated by Europol, have dismantled one of the continent’s largest illegal streaming operations, affecting over 2,500 channels and 22 million users across multiple countries. The operation resulted in 11 arrests, seizure of servers in various EU nations, and di
A sophisticated Chinese threat actor has deployed Atlas RAT, a previously unknown remote access trojan, targeting organizations across multiple European nations. The malware features advanced persistence mechanisms, encrypted command-and-control communications, and modular capabilities designed to e
The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) has sanctioned Nobitex, Iran’s largest cryptocurrency exchange, for processing ransomware payments and facilitating malicious cyber operations. The platform allegedly enabled Iranian threat actors to launder proceeds from