Intel

The notorious Medusa ransomware group has struck again, adding NASCAR to its list of high-profile victims. The cybercriminals have demanded a $4 million ransom, threatening to expose sensitive internal data if their demands are not met. Alongside NASCAR, the group has also targeted McFarland Commercial Insurance Services, Bridgebank Ltd, and

In a recent development, cybersecurity experts have identified new variants of the ReaderUpdate malware targeting macOS users. These variants are written in diverse programming languages such as Crystal, Nim, Rust, and Go, posing a significant threat to users of Apple devices. Emergence of New Malware Variants Initially detected as a

A cyber threat group known as 'RedCurl,' which has been involved in covert corporate espionage since 2018, has shifted tactics to include a ransomware encryptor aimed at Hyper-V virtual machines. This marks a significant evolution in their operational strategy, as they previously focused on data exfiltration from corporate

Recent discoveries have unveiled a new threat on the npm (Node package manager) platform, where malicious packages are used to secretly alter legitimate, locally installed packages, embedding a persistent reverse shell backdoor. This tactic ensures that even if the harmful packages are removed, the backdoor remains active on the victim&

A sophisticated cyber threat actor known as EncryptHub has been identified in a series of zero-day attacks targeting a vulnerability within the Microsoft Management Console (MMC). This flaw, recently patched by Microsoft, allows attackers to bypass security features and execute malicious code on Windows systems. Understanding the MMC Vulnerability The

Recent discoveries reveal that new Android malware campaigns are leveraging Microsoft's cross-platform framework, .NET MAUI, to disguise themselves as legitimate applications and avoid detection. This innovative tactic was identified by McAfee's Mobile Research Team, part of the App Defense Alliance, which focuses on enhancing Android security.

A significant security flaw has been identified in the Ingress NGINX Controller for Kubernetes, potentially allowing unauthenticated remote code execution. This vulnerability endangers over 6,500 clusters by exposing them to the public internet. Details of the IngressNightmare Vulnerabilities The vulnerabilities, collectively known as IngressNightmare, have been assigned CVE identifiers

A prominent telecommunications firm in Asia has reportedly been compromised by Chinese state-backed hackers who managed to remain undetected within the company's systems for more than four years. This information comes from a recent report by the cybersecurity firm Sygnia. Cyber Espionage Tactics The threat actor, identified as

A significant security flaw has been identified in the Next.js React framework, which may allow attackers to circumvent authorization checks under specific conditions. This vulnerability, designated as CVE-2025-29927, has been assigned a high CVSS score of 9.1, indicating its severity. Understanding the Vulnerability The issue arises from the