Malware & Threats
PoC code targeting a recent Check Point VPN zero-day has been released as Censys identifies 14,000 internet-accessible appliances.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Exploitation of Windows MMC zero-day is being pinned on a ransomware gang known as EncryptHub (an affiliate of RansomHub)
Malware & Threats
AMTSO has developed a Sandbox Evaluation Framework to standardize the testing of malware analysis solutions.
Malware & Threats
macOS users are targeted with multiple versions of the ReaderUpdate malware written in Crystal, Nim, Rust, and Go programming languages.
Malware & Threats
Weaver Ant, a cyberespionage-focused APT operating out of China, is targeting telecom providers for persistent access.
Malware & Threats
The Medusa ransomware relies on a malicious Windows driver to disable the security tools running on the infected systems.
Malware & Threats
Over 300 malicious applications displaying intrusive full-screen interstitial video ads amassed more than 60 million downloads on Google Play.
Malware & Threats
Over 600,000 SOHO routers belonging to a single ISP and infected with the Chalubo trojan were rendered inoperable.
Malware & Threats
Malicious campaign exploits high-severity XSS flaws in three WordPress plugins to backdoor websites.
Malware & Threats
The TrickBot botnet and other malware droppers have been targeted by international law enforcement in Operation Endgame.
Malware & Threats
Okta raises the alarm on credential stuffing attacks targeting endpoints used for cross-origin authentication.
Malware & Threats
The US announced that the 911 S5 (Cloud Router) botnet, likely the world’s largest, has been dismantled and its administrator arrested.
Malware & Threats
The recently disclosed Check Point VPN attacks involve the zero-day vulnerability CVE-2024-24919, which allows hackers to obtain passwords.
ICS/OT
Backdoored JAVS courtroom recording and management software installer puts thousands at risk of complete takeover.
Malware & Threats
The Antidot Android banking trojan snoops on users and steals their credentials, contacts, and SMS messages.
Malware & Threats
The Black Basta group abuses remote connection tool Quick Assist in vishing attacks leading to ransomware deployment.
Fraud & Identity Theft
Russian-speaking threat actors are caught abusing a GitHub profile to distribute information stealers posing as legitimate software.
Malware & Threats
The Ebury Linux botnet has ensnared over 400,000 Linux systems in 15 years, with roughly 100,000 still infected.
ICS/OT
Forescout has found dozens of vulnerabilities in solar power systems from Sungrow, Growatt and SMA.
Artificial Intelligence
Hacker Conversations
Supply Chain Security
Vulnerabilities
Splunk patches high-severity remote code execution and information disclosure flaws in Splunk Enterprise and Secure Gateway App.
Management & Strategy
