Malware & Threats
Apple pushes out fresh versions of its iOS and macOS platforms to fix WebKit vulnerabilities being exploited as zero-day in the wild.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
A North Korea-linked threat actor hijacked the update mechanism of eScan antivirus to deploy backdoors and cryptocurrency miners.
Malware & Threats
A threat actor tracked as CoralRaider has been using multiple infostealers to harvest credentials from users worldwide.
Malware & Threats
Russia-linked APT28 deploys the GooseEgg post-exploitation tool against numerous US and European organizations.
Malware & Threats
Shadowserver has identified roughly 6,000 internet-accessible Palo Alto Networks firewalls potentially vulnerable to CVE-2024-3400.
Funding/M&A
VulnCheck banks $8 million in early stage capital to build 'exploit intelligence' technologies and services.
Malware & Threats
Noteworthy stories that might have slipped under the radar: OpenSSF and OpenJS incidents similar to XZ backdoor, Moldovan botnet operator charged, US automotive company...
Malware & Threats
Noteworthy stories that might have slipped under the radar: WhatsApp privacy issue remains unpatched, spying via tablet ambient light sensors, and the Bigpanzi botnet.
Malware & Threats
The US government’s cybersecurity agency CISA ramps up the pressure on organizations to mitigate two exploited Ivanti VPN vulnerabilities.
Malware & Threats
Microsoft says an APT with links to Iran’s military intelligence is impersonating a prominent journalist in clever spear-phishing attacks.
Incident Response
A joint advisory from CISA and the FBI warns about Androxgh0st malware attacks ensnaring devices in a botnet.
Malware & Threats
The recently disclosed Ivanti VPN zero-days have been exploited to hack at least 1,700 devices, including government, telecoms, defense, and tech.
Malware & Threats
Attackers exploit a recent Windows SmartScreen bypass vulnerability to deploy the Phemedrone information stealer.
Malware & Threats
Netscout sees over one million IPs conducting reconnaissance scanning on the web due to increase in use of cheap or free cloud servers.
Malware & Threats
Ivanti zero-day vulnerabilities dubbed ConnectAround could impact thousands of systems and Chinese cyberspies are preparing for patch release.
Malware & Threats
CISA has added a critical Microsoft SharePoint Server flaw (CVE-2023-29357) to its Known Exploited Vulnerabilities catalog.
Cyberwarfare
An engineer recruited by intelligence services reportedly used a water pump to deliver Stuxnet, which reportedly cost $1-2 billion to develop.
Malware & Threats
Patch Tuesday: Adobe patches six security flaws in the Substance 3D Stager product and warned of code execution risks on Windows and macOS.
Vulnerabilities
Cybersecurity Funding
Cybersecurity Funding
Data Protection
