Blog

Thousands of WordPress sites using a vulnerable version of the Popup Builder plugin have been compromised with a malware called Balada Injector. First documented by Doctor Web in January 2023, the campaign takes place in a series of periodic attack …

The announcement on the dark web portal includes specific details about the targeted organizations.

The threat actor advertises databases containing sensitive customer information on the Breachforums platform.

Cybersecurity researchers have discovered a new Java-based “sophisticated” information stealer that uses a Discord bot to exfiltrate sensitive data from compromised hosts.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday issued an emergency directive urging Federal Civilian Executive Branch (FCEB) agencies to implement mitigations against two actively exploited zero-day flaws in Ivanti Connect Secure (ICS) and Ivanti Policy Secure (IPS) products.

The environmental services industry witnessed an “unprecedented surge” in HTTP-based distributed denial-of-service (DDoS) attacks, accounting for half of all its HTTP traffic.

The alleged data breach has posed a serious risk of identity theft, impersonation for the exposed employees of the ministry.

Banmali Agrawala of Tata Advanced Systems (TASL) on Monday said the notion that one can ‘leapfrog’ into design without understanding manufacturing reflects an improper understanding of the manufacturing process.

This Maldives cyberattack incident occurred amidst a broader context of diplomatic tensions.