Iran Steel manufacturer down due to cyberattack
A cyberattack at Khuzestan Steel Company, one of the major steel companies owned by the Iranian government made the production halted. Khuzestan Steel Company, based in Ahvaz in the oil-rich…
Malicious PyPi Repositories hijacking AWS secrets
Researchers discovered multiple Python packages in the official PyPI repository that have been developed to steal AWS secrets and uploaded them to a publicly exposed endpoint. The malicious packages, which…
Tropic Trooper New Espionage Campaign
Researchers have spotted a new campaign linked with the Chinese hacking group, Tropic Trooper. The campaign used the Nimbda loader and a new variant of the Yahoyah trojan. The attackers…
CodeSys Critical Vulnerabilities Patched
Codesys released patches for nearly a dozen vulnerabilities discovered in the company’s products. The industrial automation software solutions are used by largest ICS manufacturers, and vulnerabilities affecting Codesys products can impact…
Log4j still haunts organizations with VMware Horizon
Organizations with public-facing VMware Horizon and Unified Access Gateway (UAG) servers without appropriate Log4Shell mitigations have been attacked from a range of attackers, including state sponsored advanced persistent threat actors.…
Spyware targeting Italy and Kazakhstan
Google has came up with details about a spyware vendor called RCS Labs that has been caught targeting people in Italy and Kazakhstan. TAG says that RCS Labs targeted iOS and Android…
QNAP RCE Bug Patched
QNAP has warned its customers earlier this week that some of its NAS devices with non-default configurations are vulnerable to attacks that would exploit a three-year-old critical PHP vulnerability allowing…
Prisma Cloud new feature enhancements
Palo Alto Networks is upgrading its Prisma Cloud platform with new features for detecting vulnerabilities and malicious activity in cloud environments. The new release adds features for securing cloud environments…