Splinter: The New Post-Exploitation Tool Wreaking Havoc on IT Environments

A new post-exploitation tool called Splinter has been discovered by Palo Alto Networks’ Unit 42 threat hunters, which is being used to wreak havoc in victims’ IT environments after initial infiltration. This tool allows attackers to execute Windows commands, steal files, collect cloud service account information, and download additional malware onto victims’ systems. Unlike Cobalt … Read more

AT&T in spat with Broadcom over VMware software support

Broadcom has filed a memorandum in response to AT&T’s lawsuit alleging that the telco giant plans to stop using VMware software and wants the chipmaker to continue providing support services beyond September 8. In its filing, Broadcom claimed that AT&T had perpetual licenses for VMware products but was tardy about making the move. AT&T argued … Read more

Global malware operation targets crypto users and gamers

A massive infostealer malware operation has been uncovered, attributed to a cybercriminal group named “Marko Polo”. The group uses various distribution channels, including malvertising, spearphishing, and brand impersonation in online gaming, cryptocurrency, and software. This campaign has impacted thousands of devices globally, exposing sensitive personal and corporate data. The malware campaign targets high-value targets such … Read more

Unlocking Hybrid Intelligence with Agentic RAG

Artificial intelligence (AI) has witnessed significant advancements in recent years, particularly with the emergence of powerful models capable of performing diverse tasks. Two crucial developments in this space are Retrieval-Augmented Generation (RAG) and Agents, which play distinct roles in enhancing AI-driven applications. However, the concept of Agentic RAG presents a hybrid model that leverages the … Read more

Trump unveils World Liberty Financial crypto exchange with sons’ control

Former President Donald Trump has announced a new business venture, a cryptocurrency platform called World Liberty Financial (WLFI), which will be controlled by his sons Donald Trump Jr. and Eric Trump. The announcement was streamed from Trump’s Mar-a-Lago resort in Palm Beach, Florida, and marked his first public appearance since an apparent assassination attempt on … Read more

Water Fleas Reveal Surprising Evolutionary Mechanisms

Daphnia pulex, also known as the water flea, is a tiny crustacean that plays a crucial role in freshwater ecosystems worldwide. This microscopic species has been extensively studied due to its unique reproductive habits and ability to thrive in stable environments. A recent study by Arizona State University and international colleagues analyzed nearly 1,000 D. … Read more

Unlock the Power of SSH Key Management

As IT environments grow, so do the number of secrets that need to be managed. While passwords are well-secured, SSH keys often fly under the radar. Traditional Privileged Access Management (PAM) solutions can only manage 20% of all SSH keys, leaving a significant portion unaccounted for. SSH keys are access credentials in the Secure Shell … Read more

Apache HugeGraph-Server Bug Actively Exploited, CISA Warns

The US Cybersecurity and Infrastructure Agency (CISA) has added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including a critical remote code execution flaw affecting Apache HugeGraph-Server. The CVE-2024-27348 vulnerability, rated 9.8, impacts versions from 1.0.0 to 1.3.0 and allows improper access control. Apache fixed the vulnerability in April 2024 by releasing version 1.3.0. … Read more

Black Hole Radiation Paradox Solved? Researchers Propose “Frozen Stars”

A new study suggests that black holes might not be the featureless, structureless entities predicted by Einstein’s general theory of relativity. Instead, cosmic monsters could be bizarre quantum objects known as “frozen stars.” These hypothetical celestial bodies share some similarities with black holes but differ in crucial ways that could potentially resolve the Hawking radiation … Read more

Iran’s MOIS Unit Spreads Persistent Backdoors Across Middle East Telecoms, Gov Agencies

A recent report by Mandiant, a unit of Google, has exposed an Iranian cyber operation called UNC1860 that provides persistent entry to the systems of telecommunications and government organizations across the Middle East. This operation is housed within Iran’s Ministry of Intelligence and Security (MOIS) and serves as an initial access broker for the country’s … Read more