Palo Alto Networks Unit 42 researchers have discovered Splinter, a post-exploitation red team tool with standard features commonly found in penetration testing tools, posing a potential threat if misused.
Remote unauthenticated attackers exploiting CVE-2024-7593 vulnerability in Ivanti vTM appliances to create new admin accounts.
Personal data, including passwords and social media information, of over 3,000 Capitol Hill staffers leaked on the dark web, highlighting the need for enhanced cybersecurity measures.
CrowdStrike’s senior vice-president Adam Meyers apologizes for a flawed software update that disabled internet services on 8.5 million Microsoft Windows devices, leading to system crashes and halted business operations.
Legislation introduced by House Republicans aims to establish an interagency task force to combat Chinese cyber threats, focusing on hacking collectives like Volt Typhoon and Flax Typhoon.
Cyber attackers compromise legitimate email accounts to distribute malware payloads, including information stealers and remote access trojans, in a sophisticated attack possibly involving government-backed actors from Russia and China.
