NadMesh Go Botnet Hunts Exposed AI Services for Cloud Credentials and Kubernetes Secrets
A newly discovered Go-based botnet called NadMesh is actively scanning the internet for exposed AI services, harvesting cloud credentials and…
Security
Cybersecurity, vulnerabilities, threats, and defense
Seven Malicious npm Packages Target Vite Ecosystem With Blockchain-Based Command-and-Control
Cybersecurity researchers have uncovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem in a software…
HollowByte Vulnerability Lets Attackers Cripple OpenSSL Servers With Tiny 11-Byte Payload
A vulnerability dubbed HollowByte allows unauthenticated attackers to trigger a denial-of-service condition on OpenSSL servers using a malicious payload of…
New Windows LegacyHive Zero-Day Exploit Grants Attackers Admin Privileges
A security researcher has released details of a Windows zero-day vulnerability dubbed LegacyHive that allows attackers to escalate privileges to…
Ernst & Young Discloses Data Breach After Third-Party Support System Compromised
Ernst & Young (EY) has disclosed a data breach affecting some of its customers after attackers compromised a third-party support…
Russian Threat Actor Targets WebEx and Zoom Users With Trojanized Installers
A financially motivated Russian threat actor tracked as UAT-11795 has been distributing trojanized versions of WebEx and Zoom installers to…
CISA Orders Federal Agencies to Patch Actively Exploited Fortinet FortiSandbox Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency has ordered federal civilian agencies to patch two actively exploited vulnerabilities in the…
23andMe Agrees to Pay 18 Million in Settlement Over 2023 Data Breach Affecting 6.9 Million Customers
Genetic testing company 23andMe has agreed to pay $18 million to settle claims from a coalition of 43 state attorneys…
Coca-Cola Says Fairlife Ransomware Attack Halts US Dairy Production
The Coca-Cola Company disclosed that a ransomware attack impacting its Fairlife dairy subsidiary has disrupted operations, temporarily suspending production of…
Critical Zoom Vulnerability Could Allow Account Takeover Without User Interaction
Zoom has patched a critical security vulnerability in its Windows software that could allow an unauthenticated attacker to take over…