⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
The China-linked threat actor Jewelbug, assessed to be a hackers-for-hire group, is conducting simultaneous cyber espionage against governments and militaries in the Middle East, Southeast Asia, and South Asia, while also running a for-profit cryptocurrency fraud operation targeting Chinese-speaking users. Broadcom’s Symantec and Carbon Black Threat Hunter Team found that both missions are administered from a single control panel called XG-Web, a browser-centric remote-access and information-stealing framework that converts a victim’s browser into a remote-control channel and expands into the host and internal network.
Apple has begun sending new threat notifications to users whose iPhones may be targeted by mercenary spyware, often used by state-sponsored actors. The alerts are designed to inform individuals at high risk, such as journalists or activists, about potential compromise.
Multiple vulnerabilities have been discovered across VMware products including ESXi, vCenter, and Workstation, posing risks of remote code execution, denial of service, and information disclosure. A remote attacker could exploit these flaws to bypass security restrictions and compromise targeted systems.
Multiple vulnerabilities have been identified in Palo Alto Networks products, including PAN-OS, GlobalProtect, and cloud firewalls, which could allow remote attackers to execute code, escalate privileges, or manipulate data. The flaws impact a wide range of versions and platforms, from Android to Windows.
AWS Certificate Manager is discontinuing email-based domain validation for public certificates in line with CA/B Forum requirements. New email validation requests will be blocked starting March 31, 2027, and renewals will cease by September 30, 2027.
Ukrainian authorities dismantled 94 fraudulent call centers that lured victims into investment scams and attempted to gain access to bank accounts. The operation resulted in the seizure of millions of dollars in cash and equipment.