Malware & Threats
A new and improved version of Tinba, a banking malware known for its small size, has been spotted in attacks targeting the customers of...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Malware & Threats
The notorious Stuxnet malware is still actively running on some computers and while the threat cannot be controlled by the original attackers, its presence...
Malware & Threats
Researchers at Trend Micro have come across MalumPOS, a new point-of-sale (PoS) malware designed to target systems running Micros and other PoS platforms.
Malware & Threats
An individual claiming to be the developer of the crypto ransomware known as Locker has published the private keys needed to recover the files...
Malware & Threats
The Rombertik malware has made numerous headlines over the past weeks due to a destructive feature that overwrites the computer’s master boot record (MBR)....
Malware & Threats
The developers of the notorious Angler exploit kit are very good at integrating recently patched or zero-day vulnerabilities. Researchers reported on Monday that the...
Malware & Threats
Researchers at ESET are shining the light on a new piece of malware compromising routers in a scheme to take fraudulent actions on social...
Malware & Threats
Bots are busy little bees on the Internet, and the world of mobile computing may be their next frontier.According to new research from Distil...
Malware & Threats
Researchers at FireEye have identified a new strain of point-of-sale (POS) malware being used in a spam campaign.
Malware & Threats
Android users have downloaded scareware disguised as cheats for the popular game Minecraft from Google Play hundreds of thousands, possibly millions, of times, researchers...
Malware & Threats
Researchers at email and web security company AppRiver spotted a campaign in which malicious actors attempted to distribute a piece of ransomware with the...
Malware & Threats
Australian telecommunications giant Telstra revealed on Wednesday that the corporate network of Pacnet was breached by an unknown actor.
Malware & Threats
Researchers have analyzed the Diffie-Hellman (DHE) key exchange and they’ve come across a new vulnerability that puts a large number of online services at...
Malware & Threats
Malicious actors are using a trojanized version of PuTTY, the popular open-source Secure Shell (SSH) and telnet client, to gain access to remote computers...
Malware & Threats
Oracle has released updates for its products to address the VENOM vulnerability impacting virtual environments.
Malware & Threats
Cisco reported earlier this month that the Rombertik malware attempts to destroy the master boot record (MBR) of infected devices to prevent researchers from...
Malware & Threats
Penn State University said Friday that it disconnected the network of its college of engineering from the Internet in response to two cyberattacks, with...
Malware & Threats
A three-year-old cyber operation is using a mix of social engineering, Microsoft Windows vulnerabilities and basic stenography to target government, military and industry officials...
Malware & Threats
The Chinese threat actor known as APT17 and DeputyDog has been using profile pages and forum threads on Microsoft’s TechNet web portal to host...
Cybercrime
The attack group "Naikon" has spent the last five years successfully infiltrating national organizations around the South China Sea in search of geo-political intelligence,...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)