Security Alerts

Cybersecurity researchers from Lumen’s Black Lotus Labs have uncovered a large-scale IoT botnet named Raptor Train, which has compromised over 200,000 devices globally since its discovery in May 2020. The botnet is believed to be controlled by the China-linked Advanced Persistent Threat (APT) group, Flax Typhoon, also known as Ethereal Panda or RedJuliett. The Scope […]

In a recent advisory published on September 16, 2024, data protection giant Acronis disclosed a critical vulnerability affecting its widely-used backup plugins for server management platforms, including cPanel, Plesk, and DirectAdmin. Identified as CVE-2024-8767, this flaw has a CVSS severity score of 9.9, classifying it as Critical. The vulnerability poses a significant risk to users, […]

In a recent report by Datadog Security Labs, a potential security risk has been uncovered within Microsoft Entra ID (formerly known as Azure Active Directory). This cloud-based identity and access management (IAM) solution, widely used by enterprises to manage user identities and permissions, features Administrative Units (AUs), which are intended to help streamline and restrict […]

A new and sophisticated phishing campaign is leveraging GitHub repositories to distribute the Lumma Stealer, a password-stealing malware. By exploiting GitHub’s Issues feature, attackers are tricking developers and contributors into visiting a counterfeit website, leading them to install malware on their Windows machines. This campaign is particularly dangerous as it targets users who frequent open […]