Malware & Threats
CISA warns companies of a widespread campaign targeting a Commvault vulnerability to hack Azure environments.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Other noteworthy stories that might have slipped under the radar: Android TV botnet Popa linked to Israeli firm, Velvet Ant maintained decade-long stealth, unpatched...
Malware & Threats
CryptoBandits uses a local SOCKS5 proxy for traffic routing, blending data theft with remote code execution.
Malware & Threats
The large-scale credential theft campaign hit roughly half of the internet-accessible Fortinet firewalls and VPNs.
Malware & Threats
Law enforcement and private partners took down 106 SocGholish C&C servers and domains as part of Operation Endgame.
Malware & Threats
A Chinese threat actor exploited a zero-day vulnerability in Trimble Cityworks to hack local government entities in the US.
Malware & Threats
The DanaBot botnet ensnared over 300,000 devices and caused more than $50 million in damages before being disrupted.
Malware & Threats
A Chinese espionage group has been chaining two recent Ivanti EPMM vulnerabilities in attacks against organizations in multiple critical sectors.
Malware & Threats
Russian military intelligence hackers intensify targeting of Western logistics and technology companies moving supplies into Ukraine.
Malware & Threats
Redmond’s threat hunters found 394,000 Windows systems talking to Lumma controllers, a victim pool that included global manufacturers.
Malware & Threats
Procolored’s public website served dozens of software downloads containing information stealer malware and a backdoor.
Malware & Threats
Two ransomware groups and several Chinese APTs have been exploiting two recent SAP NetWeaver vulnerabilities.
Malware & Threats
Google bundles multiple safeguards under a single Android toggle to protect high-risk users from advanced mobile malware implants.
Malware & Threats
Patch Tuesday: Microsoft patches at least 70 security bugs and flagged five zero-days in the “exploitation detected” category.
Malware & Threats
Supply chain attack compromises the popular rand-user-agent NPM package to deploy and activate a backdoor.
Malware & Threats
Three NPM packages posing as developer tools for Cursor AI code editor’s macOS version contain a backdoor.
Malware & Threats
Russia-linked APT Star Blizzard is using the ClickFix technique in recent attacks distributing the LostKeys malware.
Malware & Threats
Meta has won its WhatsApp hacking lawsuit against Israeli spyware company NSO Group in an “important step forward for privacy and security”.
Malware & Threats
Noteworthy stories that might have slipped under the radar: NullPoint Stealer source code leaked, researcher earns $17,500 from Apple for vulnerability, BreachForums down after...
Malware & Threats
ESET has analyzed Spellbinder, the IPv6 SLAAC spoofing tool Chinese APT TheWizards uses to deploy its WizardNet backdoor.
Data Breaches
The latest Verizon DBIR landed this week with a startling statistic about the security posture of VPNs and network edge devices.
Malware & Threats
Security researchers detail various malware campaigns that use bulletproof services linked to Proton66 ASN.
Fraud & Identity Theft
North Korean cryptocurrency thieves abusing Zoom Remote collaboration feature to target cryptocurrency traders with malware.
Malware & Threats
Windows versions of the BrickStorm backdoor that the Chinese APT used in the MITRE hack last year have been active for years.
Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.
RegisterAI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.
RegisterExpert Insights
Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecurity failures.
(Tod Beardsley)
Security teams need more than visibility into AI applications, they need a repeatable framework for monitoring, investigating, and defending them in production.
(Joshua Goldfarb)
AI-driven development is not something organizations can or should block. But it must be governed.
(Danelle Au)
AI can help attackers generate malware, create malicious payloads, bypass simple security checks, and convert vague malicious intent into functional code.
(Etay Maor)
CISOs are now facing machine-speed attacks and asking, “How do I agent?” The industry must provide remediation at scale.
(Nadir Izrael)