Suncor Energy Cyber Incident
Suncor Energy has revealed that they suffered a cyber incident. After which, the customers at Petro-Canada gas stations, a subsidiary across Canada, reported technical issues that prevented them from using…
Anatsa Trojanized Banking Malware
Researchers have spotted a mobile malware campaign called Anatsa, targeting banking apps, which have been observed targeting users in the U.S., the U.K. and Central Europe. The banking Trojan is…
Super Mario Trojanized to Spread Malware
Researchers have spotted a trojanized Super Mario Bros game installer has been found to contain multiple malicious components, including an XMR miner, the SupremeBot mining client and the open-source Umbral…
NYC Public School was affected by MOVEit exploit
Threat actors broke into the NYC DOE’s MOVEit Transfer server and stole documents containing the personal information of up to 45,000 students. After the MOVEit developer disclosed the exploited vulnerability…
Condi DDoS Botnet Exploits TP-Link Vulnerability
Researchers have identified a vulnerability tracked as CVE-2023-1389 earlier this year that resides in the firmware of TP-LINK’s AX21/AX1800 routers, allowing attackers to inject via the ‘Country’ field within the…
Volt Typhoon ⚡️ APT Exploits Zoho Vulnerability
Researchers discovered Chinese state-backed APT Volt Typhoon has been spotted using a critical vulnerability in Zoho's ManageEngine ADSelfService Plus, a single sign-on and password management solution. Volt Typhoon came in…
OT Security Comprehensive Consideration
The evolving threat landscape, ensuring security, and risk is paramount tasks. While it comes to prioritizing OT security, leadership tends to fall short. C-suite often lacks awareness about the long-term…
CISA KEV Update Part II – June 2023
The U.S. CISA recently added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. VMware Aria Remote Command Execution First on the list is the critical vulnerability CVE-2023-20887. This…