The BlackByte ransomware group, a splinter group of Conti, has updated their tactics to target core infrastructure and evade detection by exploiting an authentication bypass vulnerability in VMware ESXi.
APT-C-60, aligned with South Korea, targets victims in East Asia by exploiting critical zero-day vulnerabilities in Kingsoft WPS Office for Windows.
Authenticated users with Contributor-level access and above can remotely execute arbitrary code due to CVE-2024-6386 vulnerability in WPML Multilingual CMS plugin.
One-third of organizations report data breaches in SaaS apps, highlighting challenges in security governance and enforcement.
Phishing campaign targets Microsoft Office credentials using QR codes to direct users to malicious Microsoft Sway pages, particularly affecting technology, manufacturing, and finance sectors.
The FBI is taking steps to improve its handling of sensitive data following a critical audit by the DOJ’s OIG, which identified flaws in inventory management and disposal of electronic storage media containing classified information.
