Malware & Threats
Malicious actors have compromised thousands of WordPress websites and are randomly redirecting their visitors to sites that host malware and scams.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Malware & Threats
Researchers at Zscaler have come across a new information stealer Trojan that leverages legitimate tools to target online banking users.
Application Security
Adobe’s widely deployed PDF Reader and Acrobat software products will get security band-aids on May 10 to cover dangerous vulnerabilities that put users at...
Cybercrime
Trend Micro said that it recently analyzed a cyber attack that used a remote access Trojan (RAT) known as Lost Door." While Lost Door...
Malware & Threats
Researchers at Palo Alto Networks have come across a new malware family that appears to have been used by an Iran-based threat actor in...
Malware & Threats
Mike Hanley, Director of Duo Labs at Duo Security, joins Ryan Naraine on the podcast to talk about the state of security in the...
Malware & Threats
Microsoft is speeding ahead with plans to deprecate support for older SHA1-based certificates in the upcoming Windows 10 Anniversary Update due this summer.
ICS/OT
Lansing Board of Water & Light Hit By Ransomware Attack
Malware & Threats
Researchers from Fox-IT have discovered a new attack vector for ransomware aimed at the enterprise. The attack itself is not new, but the combination...
Malware & Threats
If you work in information security, the odds are high that you spend a significant amount of time battling ransomware. In a previous article,...
Malware & Threats
Researchers from Intel Security recently discovered that a piece of malware dubbed "Dynamer" is taking advantage of a Windows Easter Egg called “God Mode”...
Malware & Threats
Researchers at F5 Networks Security Operations Center (SOC) are warning of a new campaign of the Dridex web fraud malware. Previous campaigns had recently...
Endpoint Security
UPDATED. Cisco’s Talos security intelligence and research group has come across a piece of software that installed backdoors on 12 million computers around the...
Malware & Threats
Instead of developing their own hacking tools or buying them from third parties, threat groups have increasingly turned their attention to open source security...
Malware & Threats
Microsoft has been observing the activities of a cyber espionage group that has leveraged a Windows patching system in attacks aimed at organizations in...
Malware & Threats
A new piece of Android ransomware is being delivered via a two known exploits without requiring interaction from the victims.
Malware & Threats
Researchers at Netcraft have come across a Facebook phishing attack in which malicious actors leveraged some clever methods to increase their chances of tricking...
Malware & Threats
Researchers at Trend Micro have spotted a new variant of the Fareit malware being delivered to victims using Windows PowerShell.
Malware & Threats
The cybercriminals behind the recently discovered GozNym banking Trojan have started targeting users in European countries.
Cybercrime
Ransomware has become a formidable enterprise threat, and researchers suggest that it could allow malicious actors to leverage the growing ransomware-as-a-service (RaaS) to cause...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)