Feb 10, 2025Ravie LakshmananVulnerability / Malware Threat actors have been observed exploiting multiple security flaws in various software products, including Progress Telerik UI for ASP.NET AJAX and Advantive VeraCore, to drop reverse shells and web shells, and maintain persistent remote access to compromised systems. The zero-day exploitation of security flaws
Cyble dark web researchers have identified a new pro-Russian hacktivist group that’s been hacking into oil and gas facility control panels in the U.S. Cyble detailed two claims by the new “Sector 16” group that members hacked into control panels in energy facilities and tampered with system control settings. The
Are you looking for ways to make your online course more engaging and valuable for your students? We recommend offering group learning. The benefits of group learning are clear: Students engage better, collaborate more, and often experience more success when they learn together. Overall, this setup helps students stay connected
Jan 29, 2025Ravie LakshmananThreat Intelligence / Malware The North Korean threat actor known as the Lazarus Group has been observed leveraging a “web-based administrative platform” to oversee its command-and-control (C2) infrastructure, giving the adversary the ability to centrally supervise all aspects of their campaigns. “Each C2 server hosted a web-based
The LockBit ransomware group will soon launch a comeback with the planned release of LockBit 4.0 in February 2025, Cyble dark web researchers reported in a note to clients today. The launch of LockBit 4.0 will come almost a year after a global law enforcement action disrupted its operations and
Cyble dark web researchers have documented a new Russia-linked threat group that has been breaching critical infrastructure environments and tampering with system controls. The group, Z-Pentest, has only been around for two months, yet already claims at least 10 operational technology (OT) control panel hacks, including a recent unverified claim
Iran’s state-linked hackers have become tech-savvy prompt engineers. What started as a reconnaissance exercise using AI models quickly escalated into something more sinister, as the threat actors used AI tools to improve and refine their tools and techniques. The Iranian Islamic Revolutionary Guard Corps (IRGC)-linked group “CyberAv3ngers” has been using
Taking advantage of our free site offer for your WordPress community? Here are some new templates you can use. A few weeks ago at WordCamp Europe we announced free sites for local WordPress meetup groups. This initiative aims to support the WordPress community by providing free world-class hosting to promote
Lindex Group, an international retail giant specializing in high-quality fashion, has reportedly fallen victim to a data breach. According to claims made by threat actor IntelBroker on dark web forums, the Lindex Group data breach allegedly occurred in June 2024, targeting Lindex Group’s internal GitLab. The perpetrator allegedly exploited vulnerabilities
Jun 16, 2024NewsroomCybercrime / SIM Swapping Law enforcement authorities have allegedly arrested a key member of the notorious cybercrime group called Scattered Spider. The individual, a 22-year-old man from the United Kingdom, was arrested this week in the Spanish city of Palma de Mallorca as he attempted to board a