After months of silence, the notorious cybercrime and hacking forum, BreachForums, has resurfaced under new management. ShinyHunters, a well-known hacking group, has seized control of the revived platform, sending shockwaves through the cybersecurity community and raising concerns among global law enforcement agencies. The announcement of BreachForums’ return came from Baphomet, …

Ransomware is big business. How big, you ask? Well, just one notorious group appears to have extorted nearly a nine-figure sum. The group we are talking about is LockBit and a joint advisory by international cybersecurity agencies revealed some alarming statistics about it. A new campaign is underway wherein threat …

Trend Micro, a leading cybersecurity provider, has been incorporating artificial intelligence (AI) into its solutions for the past decade. However, it has now embraced the power of generative AI. The company recently unveiled its Vision One platform, which integrates various cybersecurity capabilities such as extended detection and response (XDR), attack …

The LockBit ransomware gang has been active since at least January 2020, and has launched roughly 1,700 attacks in the United States, resulting in approximately $91 million in ransom payments. The gang operates under the Ransomware-as-a-Service (RaaS) model, which allows affiliates to use the malware and its infrastructure to target …

Delinea is a leading provider of privileged access management (PAM) solutions that make security seamless for the modern, hybrid enterprise. Its solutions empower organizations to secure critical data, devices, code, and cloud infrastructure to help reduce risk, ensure compliance, and simplify security. Delinea removes complexity and defines the boundaries of …

Mandiant, a prominent cybersecurity firm now part of google cloud, has uncovered the activities of UNC3886, a Chinese cyberespionage group that has been actively exploiting a zero-day vulnerability in VMware ESXi. This vulnerability allows the group to escalate privileges on guest virtual machines, gaining unauthorized access and control. The initial …

We have three more victims of the MOVEit vulnerability – government departments in two U.S. states and a U.K regulator. All leading to the compromise of sensitive data. Earlier this year, healthcare vendor Intellihartx had fallen victim to the GoAnywhere zero-day attack. It concluded the investigation, revealing hundreds of thousands …

Fortinet on Monday warned customers that a recently patched vulnerability, tracked as CVE-2023-27997, could be a zero-day flaw that has been exploited in limited attacks. The vulnerability, which is a critical heap-based buffer overflow in the SSL-VPN module, can allow a remote hacker to execute arbitrary code or commands using …

A newly discovered multi-stage Adversary-in-the-Middle (AitM) phishing and BEC attack campaign has been targeting banking and financial organizations. According to Microsoft, the attack originated from a compromised trusted vendor and transitioned to a series of AitM and BEC attacks. During this period, the attackers abused the trusted relationship between vendors, …

Several Indian media report that a massive data breach of the CoWIN portal (The central platform for COVID-19 vaccination registration in India) had happened. For this breach media report one billion Indian citizens’ data is at risk. This data leak has also exposed the Aadhaar card, Voter ID, and PAN …