IMG 5586

China-Based Hackers Target Japanese Firms with Evolved Winnti Malware

2025-02-19

Winnti Group Unleashes Enhanced Malware in Sophisticated Cyber Espionage Campaign In a recent cyber espionage campaign dubbed “RevivalStone,” the China-based Advanced Persistent Threat (APT) group Winnti, also known as APT41, has been targeting Japanese organizations in the manufacturing, materials, and energy sectors. This operation, identified by LAC’s Cyber Emergency Center,Continue Reading

IMG 5585

Payment Skimmers in Disguise: Cybercriminals Use Image Tags to Steal Credit Card Data

2025-02-19

Cybercriminals Exploit Onerror Event in Image Tags to Deploy Payment Skimmers Cybercriminals are constantly evolving their tactics to steal sensitive user information, and a new method leveraging the onerror event in HTML image tags has emerged as a stealthy way to deploy payment skimmers. This technique allows attackers to stealContinue Reading

IMG 5584

Cyber Cell Rejects Samay Raina’s Virtual Statement Request

2025-02-19

India’s Got Latent’ Row: Here’s why Samay Raina requested the cyber cell to record his statement virtually In the ongoing ‘India’s Got Latent’ controversy, comedian and YouTuber Samay Raina has requested to record his statement virtually with the Maharashtra Cyber Cell. Currently in the United States for professional commitments, RainaContinue Reading

IMG 5583

PurpleLab: The Ultimate Free Sandbox for Cybersecurity Training

2025-02-19

PurpleLab – A Free Cybersecurity Lab for Security Teams to Detect, Analyze & Simulate Threats In today’s evolving threat landscape, security teams require hands-on experience to detect, analyze, and mitigate cyber threats effectively. PurpleLab is a free cybersecurity lab designed to provide security professionals with a robust environment to simulateContinue Reading

IMG 5032

OpenAI Data Breach: Threat Actor Allegedly Claims 20 Million Logins for Sale

2025-02-08

Over 225,000 OpenAI ChatGPT Accounts Compromised in Malware Breach In a significant cybersecurity incident, over 225,000 OpenAI ChatGPT account credentials have been compromised and are now available for purchase on underground markets. The breach, which occurred between January and October 2023, was primarily facilitated through information-stealing malware such as LummaC2,Continue Reading

IMG 4660

Qilin Ransomware: A Growing Cyber Threat

2025-02-03

Cybersecurity Alert: Qilin Ransomware Group Wreaks Havoc on NHS As of February 3, 2025, the Qilin ransomware group continues to pose significant threats to various sectors, with recent developments highlighting their evolving tactics and the substantial impact of their attacks. Financial Impact on Synnovis In June 2024, Qilin targeted Synnovis,Continue Reading

67993c621bafd9f5adad3973 Blog 0day Zyxel

Zyxel Warns of Active Exploitation of Unpatched Vulnerability in CPE Devices

2025-01-30

Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024-40891 Vulnerability Zyxel Communications has issued a critical security warning for its Customer Premises Equipment (CPE) devices, which are currently being targeted by cyber attackers exploiting the unpatched CVE-2024-40891 vulnerability. This flaw, identified in multiple Zyxel router and gateway models, isContinue Reading

VMWare

SQL Injection Bug in VMware Avi Load Balancer Puts Enterprise Data at Risk

2025-01-30

Broadcom Warns of High-Severity SQL Injection Flaw in VMware Avi Load Balancer Broadcom, the parent company of VMware, has issued an urgent security warning regarding a critical vulnerability in the VMware Avi Load Balancer. The flaw, identified as a high-severity SQL injection vulnerability, poses significant risks to organizations using theContinue Reading