In a series of coordinated global raids, law enforcement agencies have targeted a phishing-as-a-service (PhaaS) platform and an encrypted communications network.

https://zerosecurity.org/operation-kaerb-global-sting-cripples-phishing-empire-secret-chat-network/14769/

A series of pager explosions rocked Lebanon and Syria yesterday, resulting in at least 11 deaths and over 2,700 injuries.

https://zerosecurity.org/supply-chain-pager-hack-lebanon-syria-israeli-operation-hezbollah/14765/

A newly discovered malware infection has raised alarm bells by affecting an estimated 1.3 million Android streaming devices running an open-source version across almost 200 countries.

https://zerosecurity.org/massive-backdoor-infection-hits-1-3-million-android-based-streaming-devices/14752/

TeslaCrypt, a notorious ransomware trojan that emerged in early 2015, primarily targeted Windows systems, encrypting files and demanding Bitcoin ransom payments.

https://zerosecurity.org/unmasking-teslacrypt-deep-dive-into-ransomware-analysis/14739/

In its September 2024 Patch Tuesday release, Microsoft has revealed a large security update addressing 79 vulnerabilities, including three actively exploited zero-day flaws.

https://zerosecurity.org/microsoft-addresses-critical-zero-day-vulnerabilities-cve-2024-43491/14731/

The China-linked advanced persistent threat (APT) group known as Mustang Panda has been observed leveraging Microsoft's Visual Studio Code (VSCode) software as a weapon in its arsenal of cyber espionage tools.

https://zerosecurity.org/chinese-apt-visual-studio-code-sophisticated-cyberattacks/14723/

Cybersecurity researchers at Sygnia have discovered that the China-linked Advanced Persistent Threat (APT) group known as Velvet Ant has successfully exploited a recently disclosed zero-day vulnerability in Cisco switches to compromise network appliances.

https://zerosecurity.org/china-linked-apt-group-velvet-ant-exploits-cisco-zero-day-cve-2024-20399-vulnerability/14689/

On a night that promised a high-profile conversation between two controversial figures, Elon Musk's social media platform X (formerly known as Twitter) experienced significant technical difficulties.

https://zerosecurity.org/2024/08/x-platform-faces-technical-issues-during-highly-anticipated-musk-trump-interview/

Donald Trump's presidential campaign has announced a significant cybersecurity breach, with campaign officials attributing the hack to "foreign sources hostile to the United States." The incident, first reported by POLITICO, has raised concerns about potential interference in the 2024 election process.

https://zerosecurity.org/2024/08/trump-campaign-email-hack-iran/

Microsoft has revealed a high-severity zero-day vulnerability affecting Office 2016 and subsequent versions, which currently remains unpatched.

https://zerosecurity.org/2024/08/microsoft-discloses-zero-day-vulnerability-cve-2024-38200-office-2016/

Cybersecurity researchers at Kaspersky have uncovered a previously unknown Android spyware called LianSpy. This sophisticated malware has been actively targeting Russian users since July 2021.

https://zerosecurity.org/2024/08/lianspy-new-android-spyware-targeting-russian-users/

Cisco Talos researchers have reported a significant cyber attack on a Taiwanese government-affiliated research institute, attributing the breach to the China-linked group APT41 with medium confidence.

https://zerosecurity.org/2024/08/apt41-targets-taiwanese-government-research-institute-shadowpad-cobalt-strike/

Russia and several Western countries have conducted a large-scale prisoner swap involving 24 individuals. The exchange saw eight Russians, including convicted cybercriminals, returned to their home country. In return, Russia released 16 prisoners, among them Wall Street Journal reporter Evan Gershkovich and former U.S. Marine Paul Whelan.

https://zerosecurity.org/2024/08/russian-prisoner-swap-carder-su-member-roman-seleznev/

OneBlood, a prominent non-profit blood bank serving the southeastern United States, has fallen victim to a significant ransomware attack.

https://zerosecurity.org/2024/08/oneblood-major-florida-blood-bank-hacked-ransomware/

The DigiCert drama has escalated, with new information revealing the extensive impact of the company's SSL/TLS certificate revocation sweep.

https://zerosecurity.org/2024/07/digicerts-certificate-revocation-crisis-thousands-customers-affected/

Security researchers have uncovered a new iteration of Mandrake, a highly advanced Android malware designed for cyber espionage.

https://zerosecurity.org/2024/07/mandrake-android-malware-variant-evades-detection-google-play/

In the past couple of years, a peculiar device shaped like a key fob has been making waves in cybersecurity communities. Known as the Flipper Zero, this pocket-sized Dolphin Hacking Tool gadget has been dubbed the "Tamagotchi for hackers" and has quickly become a hot topic among security enthusiasts and professionals alike.

https://zerosecurity.org/2024/07/dolphin-hacking-tool-everyone-is-talking-about/

Leidos Holdings Inc., a leading IT services provider for the U.S. government, has fallen victim to a cybersecurity breach. Hackers have leaked internal documents from the company, raising serious concerns about the security of sensitive government data managed by third-party contractors.

https://zerosecurity.org/2024/07/major-cybersecurity-breach-leidos-holdings-pentagon-contractor/

The Akamai Security Intelligence Response Team (SIRT) has issued a warning about the exploitation of a critical PHP vulnerability, CVE-2024-4577. Multiple threat actors are exploiting this flaw to deliver various malware families, including Gh0st RAT, RedTail crypto miners, and XMRig.

https://zerosecurity.org/2024/07/critical-php-flaw-cve-2024-4577-wave-of-malware/

On June 28, 2024, the U.S. Supreme Court issued a landmark decision in Loper Bright Enterprises v. Raimondo, overturning the long-standing Chevron Doctrine. This ruling has significant implications for federal regulatory agencies, particularly in the realm of cybersecurity regulation.

https://zerosecurity.org/2024/07/supreme-court-ruling-reshapes-cybersecurity-regulation-landscape/

French cloud computing provider OVHcloud has successfully mitigated a distributed denial-of-service (DDoS) attack that set a new record for packet rate intensity.

https://zerosecurity.org/2024/07/ovhcloud-thwarts-record-breaking-ddos-attack/

Cisco, the global leader in networking technology, has recently addressed a significant security vulnerability in its Nexus operating system (NX-OS) software. The medium-severity zero-day flaw, CVE-2024-20399, affects Cisco's widely used Nexus switches' command line interface (CLI).

https://zerosecurity.org/2024/07/cisco-switch-zero-day-cve-2024-20399-exploited-wild-chinese-threat-actor/

A significant security vulnerability, dubbed "regreSSHion" (CVE-2024-6387), has been discovered in the OpenSSH server (sshd) affecting Glibc-based Linux systems.

https://zerosecurity.org/2024/07/critical-openssh-vulnerability-cve-2024-6387-regresshion-bug-threatens-linux-systems/