Cisco suffers breach linked to Trivy supply-chain compromise
As part of the breach, multiple AWS access keys were stolen and later used for unauthorized activity across a limited number of Cisco cloud accounts.
Cybersecurity News - Page 4
Zero-day in TrueConf exploited in attacks targeting Southeast Asia
Attackers leveraged the update channel of TrueConf to deliver malware, more specifically a payload linked to the Havoc C&C framework.
Hackers compromise Axios npm package to deliver cross-platform malware
The hackers hijacked the npm account of the library's developer and inserted a malicious dependency into the package configuration.
Hacker charged in $53M Uranium Finance crypto heist
He now faces up to 10 years in prison on a computer fraud charge and up to 20 years if convicted of money laundering.
Suspected Chinese espionage campaign targets Southeast Asian govt with advanced malware
The investigation began when the researchers examined activity linked to the Stately Taurus group that leveraged USB-based malware called USBFect, aka HIUPAN.
FBI confirms theft of Cash Patels’s personal emails by Iran-linked hackers
The leak reportedly includes personal messages dating back to 2010 and 2019, as well as images allegedly taken from Patel’s account.
Threat actors exploit critical Fortinet FortiClient EMS flaw
The flaw, tracked as CVE-2026-21643, allows unauthenticated attackers to execute arbitrary code on vulnerable systems.
Russian-linked CTRL malware toolkit spreads via fake Windows shortcuts
The CTRL toolkit is custom-built using the .NET framework and consists of multiple executables designed to carry out various actions.
Threat actors actively probing recently disclosed critical Citrix NetScaler flaw
Defused Cyber said it observed authentication method fingerprinting activity targeting NetScaler deployments.
Fake CERT-UA emails used to deploy Ageweeze RAT
Recipients are urged to download a “protected” archive and install so-called security software.
Showing elements 31 - 40