Malware & Threats
Delivered via phishing lures, the malware combines financial theft with data exfiltration and remote access.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: ban on Chinese data center tech, QuickFox VPN supply chain attack, IEH Corporation mailbox breached...
Malware & Threats
Initially calling itself BlackFile, the group has expanded operations to the Redact, Pink, Helix, and Falcon brands.
Malware & Threats
Security firms took down all four command-and-control (C&C) channels used by the GlassWorm malware.
Malware & Threats
Nimbus Manticore has continued its operations during and after the US military campaign against Iran.
Malware & Threats
Register to enjoy free access and explore the tools, strategies, and frameworks needed to build a resilient security program for a world where every...
Malware & Threats
Other noteworthy stories that might have slipped under the radar: CISA contractor exposes credentials, Mythos testing and new features, Huawei router flaw triggered telecom...
Malware & Threats
A compromised maintainer account was used to publish malicious package versions across the @antv namespace.
Malware & Threats
Don't miss this virtual event as we explore how to cut through alert fatigue, leverage AI and unified platforms to accelerate investigations, and apply...
Malware & Threats
Fox Tempest provides a service that cybercriminals use to distribute ransomware and other malware disguised as legitimate software.
Endpoint Security
Attackers are increasingly abusing Microsoft’s decades-old MSHTA utility to stealthily deliver stealers, loaders, and persistent malware through phishing, fake software downloads, and LOLBIN-based attack...
Malware & Threats
At least one threat actor has adopted the recently released malware source code in attacks against NPM developers.
Artificial Intelligence
Other noteworthy stories that might have slipped under the radar: Nvidia cloud gaming data breach, Android 17 security upgrades, FBI warning after ShinyHunters hacks...
Malware & Threats
The hacking group is encouraging miscreants to use the code in supply chain attacks, promising monetary rewards.
Malware & Threats
Salt Typhoon has hit an energy entity in Azerbaijan. Twill Typhoon has targeted Asian entities with an updated RAT.
Malware & Threats
More than 500 packages were pushed during the attack, but the target appears to have been RubyGems itself rather than users.
Malware & Threats
CRPx0 is a complex, stealthy malware campaign that targets macOS and Windows systems, and appears to have Linux capabilities in development.
Malware & Threats
Over 400 malicious versions of 170 packages were published as part of the new Mini Shai-Hulud campaign.
Malware & Threats
Other noteworthy stories that might have slipped under the radar: US gov targets 72-hour patch cycles, malware uses Windows Phone Link to steal OTPs,...
Malware & Threats
The malware framework targets web applications and cloud environments, including AWS, Docker, Kubernetes, and more.
Malware & Threats
The software developer has identified the impacted systems, removed potentially compromised files, and validated installation packages.
Malware & Threats
The persistent, evasive implant provides remote access, surveillance, and credential exfiltration capabilities.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)