Malware & Threats
A new Gozi Trojan build has been observed in the wild, modified to inject malicious code into Windows 10’s Edge browser, IBM X-Force researchers...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Malware & Threats
A new piece of malware targeting Android devices has been found, which exhibits multiple malicious activities, ranging from stealing banking credentials and credit card...
Cybercrime
Security researchers have discovered a new piece of ransomware called Locky, which uses AES encryption algorithm to encrypt both local files and files on...
Malware & Threats
Researchers at AlienVault have conducted a detailed analysis of the OS X version of a Trojan used in attacks aimed at Chinese organizations.
Malware & Threats
Researchers at Palo Alto Networks have performed an in-depth analysis of Fysbis, the preferred Linux malware used by the Pawn Storm threat group. The...
Malware & Threats
A Java-based cross-platform backdoor that has been around since 2012 has been leveraged by cybercriminals to spy on roughly 443,000 targets, Kaspersky Lab reported...
Malware & Threats
Experts have spotted an OS X scareware campaign that leverages fake Adobe Flash Player installers to trick users into downloading shady software onto their...
Malware & Threats
The developers of the Neutrino exploit kit have added a new feature designed to reduce exposure to automated scans and security researchers’ analysis attempts.
Cybercrime
Banking Trojans were very active in 2015, but were just one of many threats consumers and businesses had to face: ransomware activity increased throughout...
Malware & Threats
A group of former and current students have sued Google in federal court in San Jose, California, alleging that the company scanned their Gmail...
Cybercrime
Hidden Tear, the so-called educational ransomware that was released as Open Source in August 2015, has been used to create more than two dozen...
Malware & Threats
Researchers at Kaspersky Lab have discovered a Linux backdoor that has been migrated to Windows and added a series of new capabilities.
Malware & Threats
A new piece of Android ransomware has emerged, capable of locking devices, changing PINs, and even fully wiping user data via factory resets, Symantec...
Malware & Threats
The advanced persistent threat (APT) actor behind the recent attacks targeting Ukraine has started delivering BlackEnergy malware using specially crafted Word documents with embedded...
Malware & Threats
VirusTotal on Wednesday announced that its malware scanning engine now supports firmware images, characterizing them as legit or malicious.
Malware & Threats
An official revealed that Israel’s Electricity Authority was targeted in a cyberattack, but experts said it was just a ransomware infection that has not...
Malware & Threats
Three banks and a pharmaceutical company in India were hit by a malicious attack recently, resulting in their networks being compromised by actors behind...
Cybercrime
Developers of the recently discovered open source-based “Magic” malware are blackmailing the creator of Hidden Tear and EDA2 , so-called educational ransomware, in order to...
Malware & Threats
Another banking Trojan that is known to be active in Europe has been seen targeting Japan, FireEye reported on Tuesday.
Malware & Threats
A cyber espionage group linked to China has been targeting organizations in various industries, Palo Alto Networks’ Unit 42 reported on Friday.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)