Archive | Cyber Syrup

Major Supply Chain Attack Hits Toptal GitHub and Open-Source Ecosystem

In a troubling example of a software supply chain attack, unknown threat actors successfully compromised the GitHub organization of Toptal

Scattered Spider Targets VMware ESXi in Rapid and Stealthy Cyberattacks

The cybercriminal group known as Scattered Spider has launched a series of sophisticated attacks targeting VMware ESXi hypervisors across the retail, airline, and transportation sectors in North America

Supply Chain Attack Hits NPM Developers via Sophisticated Phishing Campaign

A recent supply chain attack has compromised several widely used NPM packages, resulting in the delivery of malware to unsuspecting developers and users

Google Launches OSS Rebuild to Strengthen Open Source Software Security

Google has introduced OSS Rebuild, a new initiative designed to enhance the security of open-source ecosystems by preventing software supply chain attacks

UK Imposes Sanctions on Russian GRU Units Over Cyberattacks and Assassination Plots

The United Kingdom has announced a new round of sanctions targeting Russian military intelligence units and individuals responsible for cyberattacks, disinformation campaigns, and assassination attempts

Over 3,500 Websites Compromised in Stealthy JavaScript Cryptojacking Campaign

A newly discovered browser-based cryptojacking campaign has compromised over 3,500 websites worldwide

Linuxsys Cryptocurrency Miner Exploits Apache Vulnerability in Stealth Campaign

Cybersecurity researchers have uncovered an ongoing campaign that leverages a known vulnerability in the Apache HTTP Server to deliver a cryptocurrency mining malware known as Linuxsys

Chinese APT Groups Target Taiwanese Semiconductor Industry in Coordinated Phishing Campaigns Post

Chinese state-sponsored threat actors launched a wave of attacks targeting Taiwan’s vital semiconductor sector

Chinese Hackers Breach U.S. Army National Guard Network, Raise Critical Infrastructure Concerns

A new report reveals that Salt Typhoon successfully breached the network of a U.S. state’s Army National Guard unit