A critical vulnerability in SimpleHelp remote support software allows unauthenticated attackers to create rogue administrator accounts, potentially granting complete control over remote support infrastructure. The flaw affects versions prior to 5.5.6 and has been assigned CVE-2024-57726 with a CVSS
Mackay Sugar, one of Australia’s largest sugar producers, has publicly disclosed a cyberattack that disrupted its operations. The company confirmed unauthorized access to its IT systems and has engaged cybersecurity experts while working with law enforcement. The incident highlights the ongoing thre
Threat actors are leveraging Microsoft Graph API reconnaissance techniques to identify and target payroll and HR employees within organizations, ultimately exfiltrating sensitive salary data. By abusing legitimate Graph API permissions and queries, attackers blend reconnaissance activities with norm
The Gentlemen ransomware operation has compromised 483 organizations across nine months, leveraging a sophisticated multi-pronged attack strategy combining infostealer malware, AI-powered reconnaissance, and an unprecedented 90% profit-sharing model with affiliates. This aggressive newcomer demonstr
A Ukrainian national has pleaded guilty in U.S. federal court to participating in the notorious Conti ransomware operation, one of the most prolific cybercrime syndicates in recent history. Following his extradition, the defendant admitted to deploying ransomware, exfiltrating sensitive data, and fa
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Oracle PeopleSoft Enterprise PeopleTools to its Known Exploited Vulnerabilities (KEV) catalog, signaling active exploitation in the wild. The flaw, tracked as CVE-2022-21587, allows unauthenticated
Federal law enforcement agencies have seized two cryptocurrency mixing services, AudiA6 and Dark2Web, as part of a massive $389 million money laundering investigation. The operation, coordinated across multiple jurisdictions, targeted platforms that facilitated the laundering of illicit proceeds fro
Europol coordinated a multinational operation to dismantle AudiA6, a sophisticated cryptocurrency laundering service that facilitated the washing of illicit proceeds for multiple ransomware groups. The takedown involved law enforcement from seven countries, resulting in server seizures, arrests, and
The Gentlemen ransomware has emerged as a significant threat, claiming 478 victims worldwide with unique worm-like propagation capabilities. This sophisticated malware combines traditional encryption tactics with self-spreading mechanisms, enabling rapid network infiltration. Organizations face heig
International law enforcement has successfully dismantled AudiA6, a sophisticated cryptocurrency laundering service that processed over $380 million in ransomware proceeds. The operation resulted in arrests, server seizures, and disruption of a critical financial infrastructure that supported multip