Malware & Threats
Kaspersky analyzes the stealth techniques that were used in the ‘Operation Triangulation’ iOS zero-click attacks.
Hi, what are you looking for?
SecurityWeek
Email Security
The US government warns of a North Korean threat actor abusing weak email DMARC settings to hide spear-phishing attacks.
Cybercrime
A botnet dismantled in January and used by Russia-linked APT28 consisted of more than just Ubiquiti Edge OS routers.
Malware & Threats
Researchers can earn as much as $450,000 for a single vulnerability report as Google boosts its mobile vulnerability rewards program.
Malware & Threats
Cuttlefish malware platform roaming around enterprise SOHO routers capable of covertly harvesting public cloud authentication data from internet traffic.
Malware & Threats
The new Wpeeper Android trojan ceased operations after a week and has zero detections in VirusTotal.
Malware & Threats
Three vulnerabilities in the Judge0 open source service could allow attackers to escape the sandbox and obtain root privileges on the host.
Malware & Threats
The number of Cisco devices hacked via recent zero-days remains high, but the attackers have updated their implant.
Malware & Threats
Cisco has found a second zero-day vulnerability that has been exploited in recent attacks as the number of hacked devices has started dropping.
Cybercrime
The RagnarLocker ransomware group’s dark web leak site has been seized in a coordinated law enforcement operation.
Malware & Threats
The number of Cisco devices hacked via the CVE-2023-20198 zero-day has reached 40,000, including many in the US.
Cybercrime
Google says it is still catching government-backed groups linked to China and Russia launching WinRAR exploits in targeted attacks.
Malware & Threats
Tens of thousands of Cisco devices have reportedly been hacked via the exploitation of the zero-day vulnerability CVE-2023-20198.
Malware & Threats
Privacy-focused messaging firm Signal is pouring cold water on widespread rumors of a zero-day exploit in its popular encrypted chat app.
Malware & Threats
A threat actor targets Israelis with spyware masquerading as an Android application for receiving rocket alerts.
Data Breaches
Progress Software confirms the SEC has launched its own investigation into costly ransomware zero-days in the MOVEit file transfer software.
Malware & Threats
A backdoor deployed on a compromised WordPress website poses as a legitimate plugin to hide its presence.
Application Security
Microsoft patches more than 100 vulnerabilities across the Windows ecosystem and warned that three are already being exploited in the wild.
CISO Strategy
Microsoft security chief Charlie Bell pledges significant reforms and a strategic shift to prioritize security above all other product features.
Data Breaches
CISO Conversations
Artificial Intelligence
Identity & Access
Cloud Security
