Cybersecurity researchers at Human Security have uncovered a large-scale malicious campaign dubbed “Phish n’ Ships,” which has been actively targeting e-commerce websites and their customers since 2019. This sophisticated attack employs a complex deception scheme to steal personal data and financial resources from unsuspecting online shoppers. The Anatomy of Phish n’ Ships: From Compromise to … Read more
A critical vulnerability has been uncovered in qBittorrent, a popular BitTorrent client, that has persisted for over 14 years. This security flaw, stemming from a lack of SSL/TLS certificate validation, potentially exposed users to man-in-the-middle (MITM) attacks. While the developers have addressed this issue in version 5.0.1, released on October 28, 2024, many users may … Read more
Cybersecurity researchers at Kaspersky Lab have uncovered a resurgence of the notorious Grandoreiro banking trojan, despite previous claims of its operation being dismantled. The latest iteration of this malicious software targets customers of approximately 30 Mexican banks, signaling the persistent evolution of this significant cyber threat. The Persistent Threat of Grandoreiro Grandoreiro, active since 2016, … Read more
Nvidia, the leading graphics processor manufacturer, has recently issued critical security updates for its GPU drivers on Windows and Linux platforms, as well as for its virtual GPU (vGPU) software. These patches address at least eight severe vulnerabilities that could potentially be exploited by malicious actors for various attacks, including arbitrary code execution and privilege … Read more
In a landmark study, cybersecurity experts from Kaspersky Lab have uncovered a surprising trend in the realm of phishing and fraudulent websites. Their research reveals that cybercriminals’ use of large language models (LLMs) for content generation leaves distinctive “fingerprints” that could potentially aid in identifying counterfeit sites. The Rise of AI in Phishing Attacks Modern … Read more
A severe security breach has sent shockwaves through the cybersecurity community as researchers uncovered a critical vulnerability in the popular hosting control panel, CyberPanel. This flaw allows malicious actors to gain remote root access to servers without authentication, posing a significant threat to thousands of websites and databases worldwide. Understanding the CyberPanel Vulnerability The vulnerability … Read more
Cybersecurity researchers at Zimperium have uncovered an advanced version of the notorious FakeCall banking trojan, also known as FakeCalls. This malevolent software has undergone significant enhancements, posing a severe threat to mobile users’ financial security and privacy. From Simple Phishing to Sophisticated Attacks: The Evolution of FakeCall Initially designed as a voice phishing (vishing) tool, … Read more
In a stark reminder of the growing cybersecurity threats facing the financial sector, Interbank, one of Peru’s leading banks, has confirmed a significant data breach affecting millions of its customers. This incident underscores the urgent need for enhanced security measures and proactive strategies to protect sensitive financial information in an increasingly digital world. The Scope … Read more
A significant vulnerability in the Windows update system has been uncovered by cybersecurity researcher Alon Leviev, potentially allowing attackers to bypass critical security mechanisms in fully updated systems. This discovery has raised serious concerns in the information security community, as it opens new avenues for cyberattacks on what were previously considered secure Windows installations. Understanding … Read more
In a significant cybersecurity incident, Free, France’s second-largest internet service provider (ISP), has fallen victim to a severe data breach. This attack has resulted in the exposure of personal data belonging to millions of customers, raising serious concerns about information security and data protection in the telecommunications sector. Scope and Impact of the Breach Free, … Read more
