Tag: Threat Research

GitHub Supply Chain Attack Campaign Expands Through Stolen Developer Credentials

Risk & Resilience
The GhostAction campaign has reportedly compromised around 1,900 GitHub accounts and targeted more than 30,000 repositories to steal CI/CD secrets, cloud credentials and API keys.

Next.js Patch Addresses Critical Remote Code Execution And Service Disruption Risks

Risk & Resilience
Next.js has released an emergency security update fixing critical remote code execution vulnerabilities and a denial of service issue affecting certain applications using caching and SVG processing features.

Securonix Uncovers VEILDROP Malware Campaign Using Blogger To Deliver PureLogs Stealer

Risk & Resilience
Securonix has uncovered the VEILDROP malware campaign that abuses Blogger pages, PowerShell, and trusted Microsoft binaries to deploy the PureLogs information stealer while evading traditional security defenses.

Researchers Examine BYOVD Risks Through Vulnerable Windows Drivers Without Hardware Dependencies

Risk & Resilience
New cybersecurity research highlights how vulnerable Windows kernel mode drivers may remain exploitable without dedicated hardware, raising concerns around BYOVD attacks and endpoint security risks.

Recent articles

spot_img