News
Malicious PyPI Package Steals AWS Credentials: A Long-Term Supply Chain Threat
Nov 11, 2024 | Cybersecurity researchers have uncovered a malicious PyPI package, "fabrice," exfiltrating AWS credentials for over three years. With over 37,000 downloads, this typosquat on the popular “fabric” library highlights critical vulnerabilities in the software supply chain.
Black Lotus, Emotet, Beep, and Dark Pink: Top Malware Threats of 2024
Oct 15, 2024 | As 2024 closes, malware like Black Lotus, Emotet, Beep, and Dark Pink continue to evolve, exploiting systems and evading detection.
Image
CISA Adds Mitel, Oracle, flaws to the KEV list
January 10, 2025 | CISA has updated its Known Exploited Vulnerabilities (KEV) catalog with critical flaws in Mitel’s MiCollab platform and a five-year-old Orac
Iranian "Dream Job" Campaign Targets Aerospace Sector
Nov 15, 2024 | Iranian threat group TA455 is using fake job offers to infiltrate the aerospace industry, according to ClearSky Cyber Security.