News and Articles

The U.S. Justice Department has indicted individuals involved in North Korean operations exploiting remote IT work. These schemes included compromised identities to facilitate access to sensitive U.S. data, with significant financial repercussions. Microsoft has suspended accounts linked to these activities and emphasized the growing use of AI by North Korean hackers to enhance fraud. ...

A rise in social engineering attacks has highlighted ClickFix and its variation, FileFix. While ClickFix uses Windows Run Dialog, FileFix exploits the file upload feature in browsers to execute OS commands unnoticed. This innovative approach poses significant security risks, emphasizing the need for user education and enhanced cybersecurity measures to mitigate potential attacks. ...

Cybersecurity concerns are rising with the discovery of "Citrix Bleed 2," which exposes over 1,200 Citrix servers to an authentication bypass vulnerability (CVE-2025-5777). Additionally, APT28 targets Ukraine using Signal to deliver new malware, BEARDSHELL and COVENANT, while exploiting vulnerabilities in Roundcube software. Immediate patches and proactive security measures are advised. ...

Security vulnerabilities pose significant risks to organizational security. Netizen's Security Operations Center highlights five critical vulnerabilities requiring urgent updates: CVE-2024-54085 affecting AMI firmware, CVE-2025-6543 known as "Citrix Bleed 2," CVE-2024-0769 in D-Link routers, CVE-2019-6693 in Fortinet's FortiOS, and CVE-2025-5419 in Google Chrome's V8 engine. Immediate action is essential. ...

Iranian hackers have maintained prolonged access to Middle East critical infrastructure through VPN exploits and malware, leveraging vulnerabilities in popular VPNs. Recent vulnerabilities in Citrix and SAP GUI have exposed sensitive data, prompting calls for immediate updates and mitigation strategies. Organizations must adopt robust cybersecurity measures for protection against these threats. ...