News
The rapid growth of BlueSky, driven by users migrating from other social networks like X (formerly Twitter), is attracting not just individuals but also cybercriminals. Recently surpassing the 20 million user mark, BlueSky has become a new target for cryptocurrency scams, according to observations by BleepingComputer. Emergence of Scams As
North Korean-linked cyber actors are posing as U.S.-based software and technology firms to secure funds for national objectives, according to a recent report by security researchers from SentinelOne, Tom Hegel, and Dakota Cary. Deceptive Tactics and Global Network In a coordinated global campaign identified as Wagemole by Palo
Google has announced that its AI-enhanced fuzzing tool, OSS-Fuzz, has uncovered 26 vulnerabilities in various open-source projects. Among these is a medium-severity flaw in the widely used OpenSSL cryptographic library. According to Google's open-source security team, these discoveries mark a significant achievement in automated vulnerability detection, all identified
An advanced version of the NodeStealer malware, previously identified by Meta in May 2023, has evolved to aggressively target Facebook Ads Manager accounts, escalating its threat by extracting credit card information directly from web browsers. Research Findings According to a Netskope Threat Labs report shared with The Hacker News, NodeStealer
Russian National Evgenii Ptitsyn Extradited Evgenii Ptitsyn, a Russian national accused of orchestrating the Phobos ransomware attacks, has been extradited from South Korea to the United States, where he is facing multiple cybercrime charges. Widespread Ransomware Operation The U.S. Department of Justice (DoJ) revealed that since November 2020, Ptitsyn
Apple has announced urgent security updates to fix two serious vulnerabilities actively exploited on its devices. These updates are available in iOS 18.1.1, iPadOS 18.1.1, Safari 18.1.1, visionOS 2.1.1, and macOS Sequoia 15.1.1, covering a wide array of Apple products,
In US Senate testimony, a CrowdStrike exec explained how this advanced persistent threat penetrated telcos in Asia and Africa, gathering SMS messages, unique identifiers, and other metadata along the way.