Malware & Threats
Researchers at FireEye have been monitoring a malicious adware campaign that has affected the devices of Android users in more than 20 countries.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Malware & Threats
While monitoring the activities of the advanced persistent threat (APT) actor known as Winnti, researchers at Kaspersky Lab discovered a new platform that the...
Malware & Threats
A piece of Apple iOS malware dubbed by researchers “YiSpecter” has been abusing private APIs and enterprise certificates to infect both jailbroken and non-jailbroken...
Malware & Threats
PRAGUE - Virus Bulletin 2015 - A mysterious piece of malware has infected tens of thousands of devices across the world, but its operator...
Cybercrime
Roughly a month ago, a new banking Trojan was found targeting the customers of 14 Japanese banks, and the malware is now said to...
Malware & Threats
XOR DDoS Botnet Pounds Organizations in Asia Akamai Technologies shared new details on Tuesday of an existing botnet that is now capable of launching...
Malware & Threats
A Middle Eastern threat group has been targeting organizations in the MENA (Middle East North Africa) region through their IT and incident response staff,...
Malware & Threats
One of CloudFlare’s customers was recently hit by a distributed denial-of-service (DDoS) attack that appeared to leverage a mobile ad network and malicious JavaScript.
Malware & Threats
XcodeGhost, a piece of malware designed to target Apple users, has made a lot of headlines recently after researchers reported finding thousands of infected...
Malware & Threats
Researchers continue to analyze XcodeGhost, a recently discovered threat that has been used by malicious actors to infect legitimate iOS applications.
Malware & Threats
Forbes.com visitors might have had their computers infected with malware earlier this month as a result of a malvertising campaign launched through a third-party...
Malware & Threats
A new malicious Android application has been discovered in Google Play, disguised as a game application called BrainTest, which could potentially have been installed...
Malware & Threats
The number of Cisco routers affected by malware implants has increased to 200, according to a report published by the Shadowserver Foundation on Monday.
Malware & Threats
Researchers have uncovered XcodeGhost, a new piece of malware designed to inject malicious code into iOS and OS X applications.
Malware & Threats
Malicious firmware has been identified by researchers on Cisco routers. The malware implants allow attackers to maintain persistence in an organization’s network.
Cybercrime
Researchers from anti-virus firm Dr.Web have discovered new malware designed to infect point-of-sale (PoS) terminals and capable of intercepting GET and POST requests sent...
Cybercrime
Dutch police revealed Thursday they have arrested two young hackers who infiltrated a type of malware known as "ransomware" to access thousands of computers...
Malware & Threats
Emails, intellectual property, strategic planning documents, and other sensitive information has been stolen by a China-based threat group from the systems of defense contractors...
Malware & Threats
A malvertising campaign affecting the websites of several major companies went undetected for almost three weeks, according to antivirus firm Malwarebytes.
Malware & Threats
Researchers have found a connection between the recently uncovered CoreBot malware and an online shop that specializes in selling account information associated with various...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)