Malware & Threats
Over the past few weeks, researchers have observed a spike in the number of malicious spam emails using attached JavaScript files to distribute malware...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Cybercrime
A new TorrentLocker campaign has been detected by Heimdal Security that is geographically focused on Sweden. And like earlier campaigns, this ransomware threat is delivered by...
Malware & Threats
A recently patched Adobe Flash Player vulnerability is being abused in a new malvertising campaign that redirects users to the Angler exploit kit (EK),...
Malware & Threats
Palo Alto Networks researchers noticed that a China-linked advanced persistent threat (APT) actor has been using a piece of malware that leverages DNS requests...
Malware & Threats
An Office vulnerability patched by Microsoft last year has been exploited by several advanced persistent threat (APT) actors in operations aimed at organizations in...
Malware & Threats
FrameworkPOS, a piece of malware used to capture payment card data from the memory processes running on Point-of-Sale systems, is being used in a...
Malware & Threats
Unlicensed Software Use Still High Globally Despite Costly Cybersecurity ThreatsMore than 60 percent of all computer software installed in the Asia-Pacific in 2015 was...
Cybercrime
A series of attacks carried out against banks in the Middle East in early May were using unique scripts that are not commonly seen...
Malware & Threats
As ransomware authors continue to increase their presence on the threat landscape, the group behind the DMA Locker malware is getting ready for massive...
Malware & Threats
A threat group first analyzed more than two years ago has continued to improve its malware arsenal and was recently observed targeting personnel at...
Malware & Threats
The recent cyber espionage attack aimed at Swiss defense firm RUAG was carried out by the Russia-linked threat group known as Turla, according to...
Malware & Threats
The authors of the Magnitude exploit kit have already started integrating an exploit for a recently patched Adobe Flash Player vulnerability.
Malware & Threats
Cybercriminals using Ransomware appear to be leveraging infected machines for additional nefarious purposes, such as launching distributed denial of service (DDoS) attacks, researchers at...
Malware & Threats
Ubiquiti Networks has warned its customers about a worm that has been targeting the company’s products by exploiting a critical vulnerability that was patched...
Cyberwarfare
Symantec researchers this week detailed what they say is a China-based advanced persistent threat (APT) group that has been launching numerous attacks against high-profile...
Malware & Threats
Researchers at ESET have uncovered a cyber surveillance/espionage operation aimed at separatists, government officials, journalists and politicians in Ukraine.
Malware & Threats
Macro malware, a major threat in the 1990s, has recently returned to focus and is evolving, courtesy of tricks designed to better keep the...
Malware & Threats
Malware authors are constantly trying to build their malicious files to remain undetected by security products and pack their malicious programs with anti-virus detection...
Malware & Threats
Hackers once again took a swing at the Locky distribution network and replaced the malicious payload with a benign file, researchers at F-Secure report.
Malware & Threats
Researchers at Kaspersky Lab have come across a new and improved version of an old piece of malware that allows cybercriminals to steal money...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)