Malware & Threats
A worm spotted on computers in North Korea shows why the source of a cyberattack should never be determined based only on IP addresses.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Malware & Threats
Researchers at F-Secure have been been monitoring the CosmicDuke, MiniDuke and OnionDuke cyber espionage campaigns and they’ve made some interesting discoveries.
Malware & Threats
Cybercrooks have been distributing a Bitcoin mining malware with the aid of a cracked version of the Andromeda bot, Fortinet researchers reported on Wednesday.Andromeda,...
Malware & Threats
Highly persistent Mac OS X firmware bootkits can be installed on Apple computers, giving attackers full control of the device, a researcher has warned.
Malware & Threats
Researchers at Trustwave have identified an attack campaign using macros that is targeting banking customers in the U.K. – yet another example of attackers...
Malware & Threats
Researchers of Cisco’s Talos Group have conducted an in-depth analysis of CryptoWall 2.0, a notorious piece of ransomware designed to encrypt files on infected...
Malware & Threats
Researchers at Microsoft have spotted a new variant of the Emotet Trojan, a threat used by cybercriminals to collect banking credentials.The malware variant, detected...
Malware & Threats
Security company Cyphort has detected a malvertising attack that hit multiple websites, including Huffington Post and LA Weekly.
Malware & Threats
Researchers at Microsoft are reporting a spike in the use of macros to spread malware via spam and social engineering.
Malware & Threats
Trend Micro researchers have come across a 64-bit version of Havex, a remote access tool (RAT) that has been used in cyber espionage campaigns...
Malware & Threats
The official website of the Internet Systems Consortium (ISC) was hacked just before Christmas and set up to serve malware to visitors, researchers at...
Malware & Threats
Security experts say that a new version of the increasingly notorious Vawtrak malware has been spotted with significant code and configuration changes.
Malware & Threats
Researchers at Group-IB and Fox-IT have released a report detailing the activities of a hacking crew linked to the theft of more than one...
Cyberwarfare
North Korea called Saturday for a joint investigation with the US into a crippling cyber attack on Sony Pictures, denouncing Washington's "slandering" after President...
Malware & Threats
Sony Hackers Used Server Message Block (SMB) Worm Tool
Malware & Threats
A new banking Trojan that appears to be an evolved version of the notorious Zeus has been analyzed by researchers at Kaspersky Lab.
Malware & Threats
Researchers at Trustwave have uncovered a new variant of the Alina point-of-sale (PoS) malware.
Malware & Threats
Researchers at Akamai Technologies released an advisory today about a mobile remote access Trojan (mRAT) used to target iOS and Android devices.
Malware & Threats
A new financial malware designed to target the customers of South Korean banks has been spotted in the wild by researchers at Trend Micro.
Malware & Threats
Vulnerabilities affecting a popular WordPress plugin are being abused by cybercriminals to hijack websites and redirect their visitors to a page set up to...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)