cyber security

cyber security news

Over 1,500 PostgreSQL Servers Compromised in Fileless Cryptocurrency Mining Campaign

Over 1,500 PostgreSQL Servers Compromised in Fileless Cryptocurrency Mining Campaign

Over 1,500 PostgreSQL Servers Compromised in Fileless Cryptocurrency Mining Campaign

Ak April 2, 2025

April 01, 2025Revi LakshmananCryptojacing / Cloud Security Expositive postgresql examples are the goal of an ongoing campaign...

Russian Hackers Exploit CVE-2025-26633 via MSC EvilTwin to Deploy SilentPrism and DarkWisp

Russian Hackers Exploit CVE-2025-26633 via MSC EvilTwin to Deploy SilentPrism and DarkWisp

Russian Hackers Exploit CVE-2025-26633 via MSC EvilTwin to Deploy SilentPrism and DarkWisp

Ak April 1, 2025

The Microsoft Windows has been found to have two new backdoor actors behind the zero-day exploitation of...

RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell Features

RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell Features

RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell Features

Ak March 31, 2025

March 30, 2025Revi LakshmananVulnerability / zero-day US Cyber Security and Infrastructure Security Agency (CISA) has highlighted a...

New Android Trojan Crocodilus Abuses Accessibility to Steal Banking and Crypto Credentials

New Android Trojan Crocodilus Abuses Accessibility to Steal Banking and Crypto Credentials

New Android Trojan Crocodilus Abuses Accessibility to Steal Banking and Crypto Credentials

Ak March 30, 2025

March 29, 2025Revi LakshmananThreatened intelligence / mobile security Cyber security researchers have discovered a new Android banking...

Researchers Uncover 46 Critical Flaws in Solar Inverters From Sungrow, Growatt, and SMA

Researchers Uncover 46 Critical Flaws in Solar Inverters From Sungrow, Growatt, and SMA

Researchers Uncover 46 Critical Flaws in Solar Inverters From Sungrow, Growatt, and SMA

Ak March 29, 2025

March 28, 2025Revi LakshmananOperational technology / vulnerability Cyber security researchers have revealed 46 new security flaws in...

New Morphing Meerkat Phishing Kit Mimics 114 Brands Using Victims’ DNS Email Records

New Morphing Meerkat Phishing Kit Mimics 114 Brands Using Victims’ DNS Email Records

New Morphing Meerkat Phishing Kit Mimics 114 Brands Using Victims’ DNS Email Records

Ak March 28, 2025

27 March, 2025Revi LakshmananEmail Safety / Malware Cyber security researchers have highlighted a new Fishing-e-Services (PHAAS) platform...

New SparrowDoor Backdoor Variants Found in Attacks on U.S. and Mexican Organizations

New SparrowDoor Backdoor Variants Found in Attacks on U.S. and Mexican Organizations

New SparrowDoor Backdoor Variants Found in Attacks on U.S. and Mexican Organizations

Ak March 27, 2025

March 26, 2025Revi LakshmananMalware / vulnerability Chinese threatened actor is known Fameysparrow A trade group in the...

Researchers Uncover ~200 Unique C2 Domains Linked to Raspberry Robin Access Broker

Researchers Uncover ~200 Unique C2 Domains Linked to Raspberry Robin Access Broker

Researchers Uncover ~200 Unique C2 Domains Linked to Raspberry Robin Access Broker

Ak March 26, 2025

March 25, 2025Revi LakshmananThreatening intelligence / malware A new investigation has detected about 200 unique command-and-control (C2)...

Critical Ingress NGINX Controller Vulnerability Allows RCE Without Authentication

Critical Ingress NGINX Controller Vulnerability Allows RCE Without Authentication

Critical Ingress NGINX Controller Vulnerability Allows RCE Without Authentication

Ak March 25, 2025

March 24, 2025Revi LakshmananReport / cloud security A set of five important security deficiencies has been revealed...

Coinbase Initially Targeted in GitHub Actions Supply Chain Attack; 218 Repositories’ CI/CD Secrets Exposed

Coinbase Initially Targeted in GitHub Actions Supply Chain Attack; 218 Repositories’ CI/CD Secrets Exposed

Coinbase Initially Targeted in GitHub Actions Supply Chain Attack; 218 Repositories’ CI/CD Secrets Exposed

Ak March 24, 2025

The supply chain attack involving Github Action “TJ-Actions/Chanty-Files” was launched as a highly targeted attack against one...