Malware & Threats
Custom Malware Prevented Bangladesh Bank From Detecting Fraudulent TransfersResearchers at British multinational defense, security and aerospace company BAE Systems believe they have found the...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Malware & Threats
Malicious actors have abused PowerShell and Google Docs to deliver a Trojan known as Laziok, FireEye reported on Thursday.
Malware & Threats
Ransomware’s extortion-based business model, currently the latest major trend in the cybercrime industry, is marking a major change in the purpose and outcome of...
Malware & Threats
Researchers have come across a new banking Trojan that appears to borrow code from the notorious Zeus.Dubbed Panda Banker, the threat was discovered in...
Malware & Threats
As if denying a user’s access to their files and asking for a $500 ransom to restore access wasn’t bad enough, the authors of...
Malware & Threats
Researchers at FireEye have come across a piece of malware that steals payment card data from point-of-sale (PoS) systems and sends it back to...
Malware & Threats
Kovter, a recently discovered piece of ransomware, represents the latest step in the evolution of a malicious program from police scareware to ad fraud...
Malware & Threats
Ransomware authors are always looking for new techniques to make their extortion business more efficient, and researchers have discovered a new method that cybercriminals...
Malware & Threats
Researchers at Arbor Networks’ Security Engineering and Response Team (ASERT) have identified what they believe to be a tool used in advanced persistent threat...
Malware & Threats
IBM Security has warned WordPress website administrators about a sharp increase in the number of attacks leveraging a variant of a PHP webshell called...
Malware & Threats
Researchers at Cisco have identified millions of machines that could become infected with file-encrypting ransomware due to out-of-date software.Ransomware attacks aimed at organizations have...
Malware & Threats
Researchers at IBM Security have come across a hybrid Trojan that is a combination between the Nymaim dropper and the Gozi financial malware.
Malware & Threats
FireEye researchers have identified several pieces of malware that managed to go undetected by antivirus engines for extended periods of time by using some...
Malware & Threats
Researchers at BAE Systems have observed an improved version of the Qbot malware being used in attacks aimed at public institutions in the United...
Malware & Threats
Atmos, a derivative of the ZeuS/Citadel stable, has been detected targeting banks in France. The malware has been active since late 2015, but this...
Malware & Threats
Researchers have identified possible links between Rokku and Chimera, and between PowerWare and PoshCoder ransomware.PowerWare and PoshCoder
Malware & Threats
The developers behind the Locky ransomware are tireless in their quest to evade security controls and gain a higher infection rate, and they have...
Malware & Threats
Every week we hear of several new high profile ransomware incidents affecting hospitals, schools, businesses and government. It’s gotten so bad that cybersecurity agencies...
Malware & Threats
Researchers at Dell SecureWorks and Palo Alto Networks have teamed up to analyze the Ramdo click-fraud malware, a threat that has been infecting computers...
Malware & Threats
Cybercriminals have come up with a clever way to deliver a piece of malware to users in China and ensure that it would not...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)