Security Alerts

In a sophisticated campaign, threat actor Earth Baxia, likely based in China, has targeted government organizations and industries across the Asia-Pacific (APAC) region. Leveraging spear-phishing emails and exploiting a critical vulnerability in GeoServer (tracked as CVE-2024-36401), Earth Baxia has successfully infiltrated systems and deployed customized malware to exfiltrate sensitive data. The campaign, which began in […]

In a sophisticated campaign, threat actor Earth Baxia, likely based in China, has targeted government organizations and industries across the Asia-Pacific (APAC) region. Leveraging spear-phishing emails and exploiting a critical vulnerability in GeoServer (tracked as CVE-2024-36401), Earth Baxia has successfully infiltrated systems and deployed customized malware to exfiltrate sensitive data. The campaign, which began in […]

On September 17, 2024, the Microsoft Security Response Center (MSRC) updated its advisory to confirm CVE-2024-37985 as a zero-day vulnerability in the Windows kernel, marking it as a notable security risk. Originally disclosed on July 9, 2024, this vulnerability has been classified as a Windows Kernel Information Disclosure Vulnerability, with a CVSS score of 5.9 […]

In an alarming new discovery, Unit 42 researchers from Palo Alto Networks have uncovered a sophisticated supply chain attack targeting Linux and macOS systems through poisoned Python packages. This ongoing campaign, linked to the North Korean threat group Gleaming Pisces (also known as Citrine Sleet), has been found distributing PondRAT, a new remote administration tool […]