Malware & Threats
European law enforcement agency announces the takedown of nearly 600 Cobalt Strike servers linked to criminal activity.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Microsoft researchers catches Russia's Star Blizzard hackers spear-phishing with QR codes and WhatsApp group chats.
Malware & Threats
North Korea-linked Lazarus Group is targeting freelance software developers to compromise the supply chain.
Government
Law enforcement turns the PlugX malware’s own self-delete mechanism against it, nuking the China-linked trojan from thousands of US machines.
Malware & Threats
Patch Tuesday: Adobe ships patches for more than a dozen security defects in a wide range of software products.
Malware & Threats
Patch Tuesday: Microsoft's January Patch Tuesday rollout includes fixes for 160 security defects, the largest number of CVEs addressed in any single month since...
Malware & Threats
Apparently malicious NPM packages linked to Snyk raised some concerns, but the security firm clarified that it’s part of a research project.
Malware & Threats
Censys has discovered more than 380,000 hosts, including major platforms, still referencing the malicious polyfill.io domain.
Malware & Threats
Cisco has patched an NX-OS command injection zero-day exploited by China-linked cyberespionage group Velvet Ant.
Malware & Threats
Noteworthy stories that might have slipped under the radar: Korean ISP delivers malware to customers, Temu sued for allegedly spying on users, Microsoft patches...
Malware & Threats
Namecheap shut down polyfill.io amid reports of malicious activity, but the Chinese owner claims it has good intentions.
Malware & Threats
The US Justice Department has announced charges against Amin Stigal for conducting wiper cyberattacks on Ukraine in 2022.
Malware & Threats
The P2Pinfect worm targeting Redis servers has been updated with ransomware and cryptocurrency mining payloads.
Malware & Threats
A Mirai-like botnet has started exploiting a critical-severity vulnerability in discontinued Zyxel NAS products.
Malware & Threats
A years-long espionage campaign has targeted telecoms companies in Asia with tools associated with Chinese groups.
Malware & Threats
A threat actor targeting Chinese-speaking victims has been using the SquidLoader malware loader in recent attacks.
Malware & Threats
The BadSpace backdoor is being distributed via drive-by attacks involving infected websites and JavaScript downloaders.
Malware & Threats
China-linked threat actor Velvet Ant leveraged a legacy F5 BIG-IP appliance for three-year access to a victim’s network.
Government
The Treasury Department announced sanctions in connection with a massive Chinese hack of American telecommunications companies and a breach of its own computer network.
Vulnerabilities
Government
TikTok said it will have to “go dark” this weekend unless Biden assures the company it won’t enforce a shutdown after the Supreme Court...
Application Security
Data Breaches
