Malware & Threats
Malicious campaign exploits high-severity XSS flaws in three WordPress plugins to backdoor websites.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Patch Tuesday: Redmond warns that attackers are rigging Microsoft Saved Console (MSC) files to execute remote code on targeted Windows systems.
Malware & Threats
The perfctl malware has been targeting vulnerabilities and misconfigurations in millions of Linux systems, likely infecting thousands.
Malware & Threats
Multiple Python packages referencing dependencies containing cryptocurrency-stealing code were published to PyPI.
Malware & Threats
A malicious campaign is targeting transportation and logistics organizations in North America with various malware families.
Artificial Intelligence
HP has intercepted an email campaign comprising a standard malware payload delivered by an AI-generated dropper.
Malware & Threats
The Necro trojan was found in two Android applications in Google Play with a combined downloads count of over 11 million.
Malware & Threats
The TrickBot botnet and other malware droppers have been targeted by international law enforcement in Operation Endgame.
Malware & Threats
Okta raises the alarm on credential stuffing attacks targeting endpoints used for cross-origin authentication.
Malware & Threats
The US announced that the 911 S5 (Cloud Router) botnet, likely the world’s largest, has been dismantled and its administrator arrested.
Malware & Threats
The recently disclosed Check Point VPN attacks involve the zero-day vulnerability CVE-2024-24919, which allows hackers to obtain passwords.
ICS/OT
Backdoored JAVS courtroom recording and management software installer puts thousands at risk of complete takeover.
Malware & Threats
The Antidot Android banking trojan snoops on users and steals their credentials, contacts, and SMS messages.
Malware & Threats
The Black Basta group abuses remote connection tool Quick Assist in vishing attacks leading to ransomware deployment.
Fraud & Identity Theft
Russian-speaking threat actors are caught abusing a GitHub profile to distribute information stealers posing as legitimate software.
Malware & Threats
The Ebury Linux botnet has ensnared over 400,000 Linux systems in 15 years, with roughly 100,000 still infected.
Malware & Threats
Patch Tuesday: Microsoft documents 60 security flaws in multiple software products and flags an actively exploited Windows zero-day for urgent attention.
Malware & Threats
Adobe documents multiple code execution flaws in a wide range of products, including the widely deployed Adobe Acrobat and Reader software.
Network Security
Palo Alto warns that attackers can access usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.
Nation-State
Management & Strategy
Data Breaches
Data Breaches
Marriott agreed to pay $52 million and make changes to bolster its data security to resolve claims related to major data breaches that affected...
Fraud & Identity Theft
Fraud & Identity Theft
