Earlier in Cybersecurity
Cybersecurity researchers have identified a novel attack vector where threat actors are leveraging malicious Terraform providers and Go modules hosted on the HashiCorp registry to distribute Go-based malware. This marks the first documented instance of the centralized repository, managed…
A significant security vulnerability has been identified within GitLab's email-to-issue functionality, allowing any individual who obtains a user's private issue email address to impersonate that user. This private address, typically displayed behind a "Email work item to this project" button…
A sophisticated attack chain, identified by CERT Polska and named MikroTrick, has been discovered that enables attackers to achieve complete administrative control over MikroTik routers. This exploit bypasses standard security measures, including passwords and SSH keys, and does not require…
A novel Windows malware, identified as CLOSEDQUORUM, has been developed to operate by soliciting decisions from a collective of up to four artificial intelligence models, rather than relying on direct commands from a remote attacker's server.