Malware & Threats
Researchers have uncovered a worm that's designed to plant backdoors on QNAP network-attached storage (NAS) devices. The malware is distributed through the exploitation of...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Malware & Threats
Researchers at Trend Micro have observed a spike in the number of Ursnif infections. The most affected countries are the United States and the...
Email Security
At this time of year, many of us like to surprise our family, friends, and colleagues with gifts that aren’t what they appear to...
Cybercrime
Nearly two years after the Red October cyber espionage operation was exposed, researchers have spotted a new advanced persistent threat (APT) campaign that appears...
Malware & Threats
A digital certificate stolen from Sony Pictures under the recent high-profile cyber attack has been used to sign malware, according to a report from Kaspersky...
Malware & Threats
Researchers at Kaspersky Lab have uncovered a new malware sample designed to target Linux operating systems. The malware has been used by the notorious...
Malware & Threats
Cybercriminals have been using a new variant of the Neverquest malware to target the customers of financial institutions, researchers at IBM Trusteer reported on...
Cyberwarfare
North Korea denied Sunday involvement in a brazen cyber attack on Sony Pictures, but praised it as a "righteous deed" potentially orchestrated by supporters...
Malware & Threats
Researchers at mobile security firm Lookout say they have found malware pre-loaded on mobile devices being sold in Asia and Africa.
Malware & Threats
Researchers from Trend Micro say they have identified the piece of malware that appears to have been used in the recent cyberattack targeting the...
Malware & Threats
Facebook is teaming with security vendor ESET to improve defenses against malware. The move follows a partnership Facebook announced in May involving F-Secure and...
Malware & Threats
A sample of a new piece of malware designed to target point-of-sale (PoS) systems was submitted to VirusTotal a few days ago, according to...
Malware & Threats
The United States is at the top of the list of countries with the most infections of point-of-sale (PoS) malware during the third quarter...
Cybercrime
Researchers have sinkholed the command and control (C&C) domains used by the CryptoPHP malware and determined that tens of thousands of websites have been...
ICS/OT
Security researcher Billy Rios has created a database of hundreds of thousands of "known-good" files from makers of supervisory control and data acquisition (SCADA)...
Cybercrime
Researchers at Trend Micro have come across a sample of a new point-of-sale (PoS) malware that appears to be under development.
Malware & Threats
The existence of a sophisticated cyber espionage tool that has been used in numerous operations aimed at businesses and governments from all over the...
Malware & Threats
Researchers at IntelCrawler have identified a new strain of point-of-sale (PoS) malware targeting e-kiosks and ticket vending machines.
Malware & Threats
Researchers have created custom malware samples in an effort to test the effectiveness of some top advanced persistent threat (APT) attack detection appliances.
Malware & Threats
The creators of the Android remote administration tool (RAT) called DroidJack started off as legitimate application developers, but when they realized that their products...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)