Malware & Threats
Keeping pace with the increasing sophistication of cyber attacks can often seem like a Sisyphean task. Attackers have a constantly evolving arsenal of malware...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Malware & Threats
The cyberattack conducted by pro-Islamic State hackers against the French TV station TV5Monde appears to have involved a piece of malware known as Kjw0rm,...
Malware & Threats
Researchers have conducted a detailed analysis of AlienSpy, a Java-based remote access Trojan (RAT) that has been used by malicious actors to target regular...
Malware & Threats
Linux Australia revealed over the weekend that one of its servers was breached on March 22. The personal details of conference attendees might have...
Malware & Threats
IBM has unearthed evidence of an international cybercrime operation that has plundered more than $1 million from the corporate accounts of U.S. businesses.
Malware & Threats
Researchers at Malwarebytes have identified an attack campaign believed to be exploiting a vulnerability in a WordPress plugin.
Malware & Threats
Researchers at Trend Micro have identified a 64-bit version of NewPosThings, a point-of-sale (PoS) malware designed to steal payment card and other sensitive information...
Malware & Threats
Researchers at Symantec have observed a sophisticated, multi-stage attack campaign focused on energy companies in the Middle East.
Malware & Threats
Cybercriminals are always on the lookout for their next scam, and appears they have found a new one.
Malware & Threats
Cybercriminals have been leveraging a vulnerability in a popular WordPress plugin to redirect the visitors of thousands of websites to exploit kits, a researcher...
Malware & Threats
Cybercriminals have been using the Vawtrak Trojan in an ongoing campaign targeted at Canadian online banking users, Denmark-based Heimdal Security reported on Tuesday.
Malware & Threats
Palo Alto Networks today shared details of a security vulnerability in the Android operating system that could allow an attacker to hijack the installation...
Malware & Threats
BitWhisper: Stealing Data From Isolated Computers Using Heat Emissions and Built-in Thermal SensorsResearchers at the Ben Gurion University in Israel have demonstrated that two...
Malware & Threats
The notorious remote access Trojan (RAT) known as njRAT is making a comeback, according to security firms Zscaler and PhishMe.
Malware & Threats
Researchers at Proofpoint discovered a crafty new trick in the repertoire of the Dridex banking malware. Well known for leveraging macros in Microsoft Office...
Cybercrime
Cisco on Friday shared details on what the company says is new breed of Point-of-Sale (PoS) malware that is more sophisticated and much better...
Malware & Threats
Seconds count when dealing with a security incident. A new survey from Osterman Research however has found that many companies believe it would take...
Malware & Threats
Google has been reviewing applications before they are published on Google Play in order to better protect users, according to the company. As part...
Malware & Threats
The threat actor group known as Crouching Yeti, Energetic Bear and Dragonfly continues to target organizations across the world. However, experts believe the group...
Malware & Threats
Microsoft has released version 5.2 of its Enhanced Mitigation Experience Toolkit (EMET), which offers increased security protections in several areas, including code hijacking attacks...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)