Fake Job Interview Apps Deploy JobStealer Malware
Hackers are weaponizing fake job interview apps to deploy JobStealer malware. Targets: crypto wallets, browser data, passwords on both Mac and Windows.
Read More
Leaked Docs Expose Russian GRU Cyber Pipeline From Universities To Sandworm
Leaked internal training materials reveal how Russia’s GRU military intelligence agency systematically recruits and trains cybersecurity students from prestigious universities, funneling them into notorious hacking units like Sandworm (Unit 74455). The documents expose structured curricula, assessme
CIFSwitch: 19-Year-Old Linux Root Bug Found By AI
A critical privilege escalation vulnerability in the Linux kernel’s CIFS (Common Internet File System) implementation has been discovered after hiding in plain sight for 19 years. Dubbed “CIFSwitch,” the flaw allows unprivileged users to gain root access through a race condition in filesystem switch
Russian Hackers Target Signal Users for Backup Recovery Keys
Russian state-sponsored hackers are actively targeting Signal messenger users to steal backup recovery keys, according to a recent FBI alert. These attackers are shifting tactics to compromise encrypted communications by exploiting the backup and recovery features rather than attempting to break Sig
CrowdStrike Joins OpenID Foundation And IDPro
CrowdStrike has joined the OpenID Foundation and IDPro (Identity Professional Association), strengthening its commitment to identity security standards and industry collaboration. This strategic move positions the cybersecurity giant to influence identity protocols, share threat intelligence, and co
Windows Server 2022 Hotpatching Extended to 2027 on Azure
Microsoft has announced the extension of hotpatching support for Windows Server 2022 on Azure through 2027, providing organizations with continuous security updates that don’t require system reboots. This extension ensures businesses can maintain operational continuity while staying protected agains
CISA Contractor Exposes Critical Government Credentials
A contractor working with the Cybersecurity and Infrastructure Security Agency (CISA) inadvertently exposed sensitive government credentials through improper security practices. The incident highlights significant risks in third-party vendor relationships and credential management within critical fe
Three Critical Linux Flaws Signal New Security Trend
Three critical vulnerabilities—Dirty Frag (CVE-2024-56678), Copy Fail (CVE-2024-56677), and Fragnesia (CVE-2024-56676)—expose fundamental weaknesses in Linux kernel memory management. These flaws affect packet fragmentation and copy-on-write mechanisms, potentially allowing local attackers to escala
SocGholish TDS Takedown Disrupts Evil Corp Access Chain
Law enforcement and cybersecurity partners have successfully disrupted the SocGholish malware distribution network, severing a critical access pathway used by the notorious Evil Corp cybercrime syndicate. The takedown targeted the Traffic Distribution System (TDS) infrastructure responsible for deli
Dell Wyse Critical RCE: Patch Management Suite Before 5.5 HF1
Dell has disclosed critical remote code execution (RCE) vulnerabilities in Wyse Management Suite versions prior to 5.5 HF1, affecting enterprise thin client deployments worldwide. Multiple vulnerabilities enable unauthenticated attackers to execute arbitrary code remotely, potentially compromising e