The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical path traversal vulnerability in Ivanti Sentry (CVE-2023-38035, CVSS 9.8) to its Known Exploited Vulnerabilities (KEV) catalog. Federal agencies must patch affected systems by June 14, 2024, following confirmed acti
Russian state-sponsored threat actor Fancy Bear (APT28) has been leveraging compromised Ubiquiti EdgeRouters and cloud infrastructure to conduct sophisticated, low-profile cyberattacks against high-value targets. The group exploits legacy router firmware vulnerabilities and misconfigured devices to
A coordinated international law enforcement operation involving US, French, and Italian authorities successfully dismantled a major deepfake pornography website that victimized thousands of individuals. The site used AI-powered tools to create non-consensual synthetic sexual content, generating sign
The Atomic Arch campaign has compromised over 20 packages in the Arch User Repository (AUR), a popular community-driven repository for Arch Linux users. Attackers hijacked legitimate package maintainer accounts to inject malicious payloads that steal sensitive information, establish persistence, and
Cybercriminals are exploiting NinjaOne, a legitimate Remote Monitoring and Management (RMM) software, to establish persistent access and execute malicious commands while evading traditional security defenses. By leveraging trusted administrative tools, attackers bypass signature-based detection and
Community protests have blocked approximately $130 billion worth of data center construction projects in 2024, creating unprecedented challenges for cloud infrastructure expansion. Local opposition centers on concerns about power grid strain, water consumption, environmental impact, and the digital
A significant supply chain attack has compromised over 400 packages in the Arch User Repository (AUR), injecting malicious code designed to install a rootkit and infostealer on Linux systems. The malware establishes persistence, exfiltrates sensitive data, and provides attackers with backdoor access
Threat actors are increasingly using dark web forums and marketplaces to coordinate supply-chain attacks, with intelligence analysts identifying early warning indicators months before public disclosures. Recent analysis reveals that compromised vendor credentials, stolen code-signing certificates, a
A new malware-as-a-service platform called OnyxC2 has emerged targeting credentials from 210 different applications including browsers, cryptocurrency wallets, password managers, and messaging platforms. This commercially available malware framework enables threat actors to deploy information-steali
Danish pharmaceutical giant Novo Nordisk disclosed a cyberattack resulting in the theft of sensitive clinical trial data. The breach occurred as the UK regulatory body approved the oral version of Wegovy, raising concerns about intellectual property theft and potential competitive intelligence gathe