Malware & Threats
Attackers have been exploiting a second vulnerability in BeyondTrust’s remote management solutions, CISA warns.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Microsoft researchers catches Russia's Star Blizzard hackers spear-phishing with QR codes and WhatsApp group chats.
Malware & Threats
North Korea-linked Lazarus Group is targeting freelance software developers to compromise the supply chain.
Government
Law enforcement turns the PlugX malware’s own self-delete mechanism against it, nuking the China-linked trojan from thousands of US machines.
Malware & Threats
Patch Tuesday: Adobe ships patches for more than a dozen security defects in a wide range of software products.
Malware & Threats
Patch Tuesday: Microsoft's January Patch Tuesday rollout includes fixes for 160 security defects, the largest number of CVEs addressed in any single month since...
Malware & Threats
Apparently malicious NPM packages linked to Snyk raised some concerns, but the security firm clarified that it’s part of a research project.
Data Breaches
Infostealer malware allowed threat actors to compromise Telefonica employees’ credentials and access the company’s internal ticketing system.
Malware & Threats
A fake proof-of-concept (PoC) exploit for a recent LDAP vulnerability distributes information stealer malware.
Malware & Threats
The latest version of the Banshee macOS information stealer no longer checks if the infected systems have the Russian language installed.
Malware & Threats
Google Cloud’s Mandiant has linked the exploitation of CVE-2025-0282, a new Ivanti VPN zero-day, to Chinese cyberspies.
Malware & Threats
Ivanti confirms zero-day exploitation of a remotely exploitable code execution flaw in its Connect Security product line.
Data Breaches
PowerSchool says the personal information of students and educators was stolen in a December 2024 data breach.
Vulnerabilities
Network Security
