Paige Williams

RansomHub, a rising ransomware-as-a-service (RaaS) platform, faces internal turmoil after affiliates lost access to critical negotiation chat portals on April 1st. This disruption significantly affected victim communications, forcing affiliates to use alternative platforms, including those of competitors, which could jeopardize ongoing ransom negotiations and payments. RansomHub initially garnered attention last year with its favorable payment terms for affiliates, offering direct

In an unsettling development for cybersecurity experts and users alike, Fortinet recently addressed a disturbing security breach that affected its FortiGate devices. Attackers found a way to maintain read-only access to these devices, even after various vulnerabilities, such as CVE-2022-42475, CVE-2023-27997, and CVE-2024-21762, were patched. By exploiting a symbolic link (symlink) created between the user file system and the root

In a significant development highlighting ongoing cybersecurity challenges, a crucial vulnerability in the NVIDIA Container Toolkit has come under scrutiny. Despite the implementation of a patch for the well-documented CVE-2024-0132 vulnerability last September, recent analysis by Trend Micro revealed that the fix remains insufficient. This issue, a Time-of-Check Time-of-Use (TOCTOU) flaw, could potentially allow malicious actors to initiate container escape