Malware & Threats
Insufficient sanitization of CSS content within HTML emails leads to inline script execution when the message is opened in a browser.
Hi, what are you looking for?
SecurityWeek
Cybercrime
Researchers say the OnyxC2 malware targets more than 200 applications and extensions while evading detection through encrypted payloads, DLL sideloading, and in-memory execution techniques.
Identity & Access
As attackers increasingly favor stolen credentials over exploits, infostealers have become a primary source of access for ransomware and other cybercrime operations.
Malware & Threats
The most recent variants of the self-propagating attacks are named Miasma and Hades.
Cybercrime
Relying on social engineering, the hacking group engages in credential phishing, malware distribution, and fraud activities.
Malware & Threats
The medtech giant has been working on restoring systems affected by the cyberattack conducted by the Handala hackers.
Malware & Threats
The botnet has increased its activity, peaking at 15,000 exploitation attempts per day, and taking a more targeted approach.
Malware & Threats
Storm-2561 is distributing fake VPN clients through SEO poisoning, deploying trojans, and stealing login information.
Malware & Threats
Hundreds of GitHub accounts were accessed using credentials stolen in the VS Code GlassWorm campaign.
Malware & Threats
Other noteworthy stories that might have slipped under the radar: Telus Digital data breach, vulnerabilities in Linux AppArmor allow root privileges, US defense contractor...
Cybercrime
Law enforcement agencies in the US and Europe targeted the cybercrime service that has impacted 360,000 devices since 2020.
Cybercrime
The 2024 incident was initially linked to China, but an infostealer infection has now revealed North Korean involvement.
Endpoint Security
The malware disables antivirus and EDR protections at the kernel level, clearing the path for credential harvesting, system reconnaissance, and eventual data exfiltration.
Malware & Threats
Fake CAPTCHA pages instruct victims to paste malicious commands in the Windows Terminal instead of the Run dialog.
Malware & Threats
Threat actors replace legitimate commands on the cloned installation webpages with malicious commands.
Malware & Threats
The malware targets browser and cryptocurrency wallet data, along with system information and user files.
Malware & Threats
Employees seeking free versions of paid software may unknowingly install malware-laced “cracked” apps that can steal credentials, deploy cryptominers, or open the door to...
Malware & Threats
Using Windows shortcut files, the APT deployed a new implant, a loader, a propagation tool, and two backdoors.
Malware & Threats
Other noteworthy stories that might have slipped under the radar: cyber valuations surge, OpenAI disrupts malicious AI use, ShinyHunters claims Odido breach.
Malware & Threats
Aeternum operates on smart contracts, making its command-and-control (C&C) infrastructure difficult to disrupt.
Malware & Threats
Already added to CISA’s KEV catalog, the flaw allows attackers to bypass authentication and gain administrative privileges.
Malware & Threats
The UNC2814 threat actor has been active since at least 2017, targeting organizations across 42 countries.
Malware & Threats
Written in C++ and Python, the malware exfiltrates system information, browser data, and steals files.
Malware & Threats
The malicious code propagates like a worm, poisons AI assistants, exfiltrates secrets, and contains a destructive dead switch.
Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.
RegisterAI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.
RegisterExpert Insights
Security teams need more than visibility into AI applications, they need a repeatable framework for monitoring, investigating, and defending them in production.
(Joshua Goldfarb)
AI-driven development is not something organizations can or should block. But it must be governed.
(Danelle Au)
AI can help attackers generate malware, create malicious payloads, bypass simple security checks, and convert vague malicious intent into functional code.
(Etay Maor)
CISOs are now facing machine-speed attacks and asking, “How do I agent?” The industry must provide remediation at scale.
(Nadir Izrael)
As enterprises rush AI projects into production, security teams are increasingly being forced into reactive mode.
(Joshua Goldfarb)