Malware & Threats
Cisco has patched an NX-OS command injection zero-day exploited by China-linked cyberespionage group Velvet Ant.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Hackers believed to be operating on behalf of the Iranian government have deployed malware to Iraqi government networks.
Malware & Threats
Noise generated by the pixels on a screen can be leveraged to exfiltrate data from air-gapped computers in what is called a PIXHELL attack.
Malware & Threats
A recently patched SonicWall vulnerability tracked as CVE-2024-40766 may have been exploited in ransomware attacks.
Malware & Threats
Google TAG publishes evidence showing identical or striking similarities between exploits used by Russia's APT29 and commercial spyware vendors.
Malware & Threats
The Iran-linked state-sponsored hacker group tracked as Peach Sandstorm has started using a new backdoor in attacks aimed at the US and UAE.
Malware & Threats
Threat actors delivered malware via instant messaging applications, including a malicious Pidgin plugin and an unofficial Signal fork.
Malware & Threats
Noteworthy stories that might have slipped under the radar: Korean ISP delivers malware to customers, Temu sued for allegedly spying on users, Microsoft patches...
Malware & Threats
Namecheap shut down polyfill.io amid reports of malicious activity, but the Chinese owner claims it has good intentions.
Malware & Threats
The US Justice Department has announced charges against Amin Stigal for conducting wiper cyberattacks on Ukraine in 2022.
Malware & Threats
The P2Pinfect worm targeting Redis servers has been updated with ransomware and cryptocurrency mining payloads.
Malware & Threats
A Mirai-like botnet has started exploiting a critical-severity vulnerability in discontinued Zyxel NAS products.
Malware & Threats
A years-long espionage campaign has targeted telecoms companies in Asia with tools associated with Chinese groups.
Malware & Threats
A threat actor targeting Chinese-speaking victims has been using the SquidLoader malware loader in recent attacks.
Malware & Threats
The BadSpace backdoor is being distributed via drive-by attacks involving infected websites and JavaScript downloaders.
Malware & Threats
China-linked threat actor Velvet Ant leveraged a legacy F5 BIG-IP appliance for three-year access to a victim’s network.
Cyberwarfare
Security researchers at Cisco Talos and Volexity flag two Pakistani espionage campaigns targeting Indian government entities.
Malware & Threats
CISA urges federal agencies to apply mitigations for an exploited Progress Telerik vulnerability as soon as possible.
M&A Tracker
Financial services giant Mastercard is acquiring Recorded Future from private equity firm Insight Partners for $2.6 billion.
Vulnerabilities
Artificial Intelligence
Endpoint Security
Endpoint Security
Cybersecurity Funding
Vulnerabilities