Iranian MuddyWater Hackers Adopt New C2 Tool ‘DarkBeatC2’ in Latest Campaign
Quick Bit: MuddyWater, linked to Iran’s MOIS, strikes again with DarkBeatC2. Our latest blog unpacks the latest tactics in cyber warfare.
Threat Actors Game GitHub Search to Spread Malware
Quick Bit: Checkmarx warns of GitHub search result manipulation designed to promote malicious repositories
Microsoft fixes two Windows zero-days exploited in malware attacks
Quick Bit: Microsoft has fixed two actively exploited zero-day vulnerabilities during the April 2024 Patch Tuesday, although the company failed to initially tag them as such.
Critical RCE bug in 92,000 D-Link NAS devices now exploited in attacks
Quick Bit: Attackers are now actively targeting over 92,000 end-of-life D-Link Network Attached Storage (NAS) devices exposed online and unpatched against a critical remote code execution (RCE) zer
UK Retailers Lost £11.3bn to Fraud in 2023
Quick Bit: Research from Ayden and the CEBR found that 35% of UK retailers fell victim to fraudulent activity, cyber-attacks or data leaks over the past 12 months
The new features coming in Windows 11 24H2, expected this fall
Quick Bit: Windows 11 24H2 is set to arrive on existing devices this fall with several new features, mostly Copilot-related improvements.
Hackers Exploit Magento Bug to Steal Payment Data from E-commerce Websites
Quick Bit: Exploit alert for Magento users! A critical flaw, CVE-2024-20720, allows threat actors to sneak a persistent backdoor into e-commerce sites.
Microsoft: China Using AI-Generated Content to Sow Division in US
Quick Bit: A Microsoft report found that China-affiliated actors are publishing AI-generated content on social media to amplify controversial domestic issues in the US
Threat Actor Claims Classified Five Eyes Data Theft
Quick Bit: A threat actor known as IntelBroker claims to have classified intelligence stolen from US government tech supplier Acuity