Cyber Thread News

Some threats don’t kick down the door; they slip in, stay quiet, and wait.  These days, attackers are playing the long game, using evasion techniques to hide in plain sight, delay detection, and make it harder for security teams to...

Advanced Persistent Threats (APTs) represent some of the most sophisticated cyber threats organizations face today. Unlike conventional attacks, APTs involve stealthy, persistent adversaries who establish long-term footholds in networks to extract valuable data or cause significant damage. In the...

A sophisticated client-side JavaScript attack has compromised over 500 websites, including high-profile government and university domains.  The malicious campaign, which injects hidden links into the Document Object Model (DOM), is believed to be part of a black hat Search Engine...

Threat actors are always developing new and more effective approaches to system breaches in the perpetually shifting field of cybersecurity. From basic computer viruses to the sophisticated persistent dangers of today, malware has developed extremely dramatically. Malware has evolved as...

A sophisticated attack campaign leveraging Cloudflare's Workers service to distribute malicious applications disguised as legitimate software. The Computer Emergency Response Team of Ukraine (CERT-UA) reported on December 17, 2024, that several web resources imitating the official "Army+" application page...

The Federal Bureau of Investigation (FBI) has issued a Private Industry Notification (PIN) alerting cybersecurity professionals and system administrators about a new threat targeting web cameras and digital video recorders (DVRs). The malware, known as HiatusRAT, is actively scanning...

Cybersecurity researchers have identified a concerning link between the advanced phishing toolkit known as 'Rockstar 2FA' and a surge in adversary-in-the-middle (AiTM) phishing attacks. Highly advanced methods are used in these campaigns to trick people into going to fake landing...

A critical vulnerability in Microsoft's Active Directory Certificate Services (AD CS) that could allow attackers to escalate privileges and potentially gain domain admin access. This new exploit, dubbed ESC15 or "EKUwu," was discovered by TrustedSec in early October 2024...

Elpaco ransomware, a Mimic variation, has been identified where attackers were able to connect via RDP to the victim's server following a successful brute force attack and subsequently execute the ransomware. The variant abuses the Everything DLL, which is used...

In a new study released today, researchers have demonstrated the significant potential of artificial intelligence (AI) in enhancing ethical hacking practices, particularly in Linux environments. The study, conducted by Haitham S. Al-Sinani from the Diwan of Royal Court in...