CYBER SECURITY

The Federal Bureau of Investigation(FBI) has recently warned of weird ransomware attack threats delivered by the United States Postal Service, yes really, alongside a dangerous ransowmare campaign from so-called Ghost attackers, and some of…

Internet service providers (ISP) in China and the West Coast of the United States have become the target of a mass exploitation campaign that deploys information stealers and cryptocurrency miners on compromised hosts. The findings come…

Microsoft had discovered five Paragon Partition Manager BioNTdrv.sys driver flaws, with one used by ransomware gangs in zero-day attacks to gain SYSTEM privileges in Windows. The vulnerable drivers were exploited in 'Bring Your Own…

Arecent study by researchers from the Max Planck Institute for Security and Privacy (MPI-SP) and Ruhr University Bochum (RUB) reveals that reconfigurable intelligent surfaces (RIS) can be used to launch targeted jamming attacks on…

Update, Feb. 24, 2025: This story, originally published Feb. 22, has been updated with a stark example of a real-world infostealer malware attack campaign targeting the U.S. military, as well as a new warning from the head of engineering at…

Microsoft has issued a security advisory for CVE-2025-21396, a critical authentication bypass vulnerability that could allow attackers to spoof credentials and gain unauthorized access to Microsoft accounts. Cybersecurity experts are…

Microsoft has raised alarms about a new cyber threat involving ViewState code injection attacks exploiting publicly disclosed ASP.NET machine keys to compromise ISS web servers. Microsoft has identified over 3,000 publicly disclosed keys…

The security threat driven by advances in AI Ghost.GPT is hardly new news: be it billions of Gmail users, bank customers, or attacks against individuals by way of smartphone calls and messages that even the FBI has been concerned enough…

A North Korean threat group has been using a technique called RID hijacking that tricks Windows into treating a low-privileged account as one with administrator permissions. The hackers used a custom malicious file and an open source…

As reported last week, Chinese hackers infiltrated the U.S. Department of Treasury and gained access to several users' workstations. However, according to Bloomberg, the infiltration was more severe than initially reported, as hackers…