Malware & Threats
Part entrepreneurial adventure, part security history, Bernardo Quintero's 'Infected' documents how the VirusTotal side project became a threat-intel cornerstone.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Google has filed a lawsuit against the Badbox 2.0 botnet operators, after identifying over 10 million infected Android devices.
Malware & Threats
Obfuscated JavaScript code is embedded within SVG files for browser-native redirection to malicious pages.
Malware & Threats
The Interlock ransomware group has partnered with the KongTuke TDS to distribute a new RAT variant via FileFix attacks.
Malware & Threats
Noteworthy stories that might have slipped under the radar: Microsoft shows attack against AMD processors, SentinelOne details latest ZuRu macOS malware version, Indian APT...
Malware & Threats
Microsoft researchers catches Russia's Star Blizzard hackers spear-phishing with QR codes and WhatsApp group chats.
Malware & Threats
North Korea-linked Lazarus Group is targeting freelance software developers to compromise the supply chain.
Government
Law enforcement turns the PlugX malware’s own self-delete mechanism against it, nuking the China-linked trojan from thousands of US machines.
Malware & Threats
Patch Tuesday: Adobe ships patches for more than a dozen security defects in a wide range of software products.
Malware & Threats
Patch Tuesday: Microsoft's January Patch Tuesday rollout includes fixes for 160 security defects, the largest number of CVEs addressed in any single month since...
Malware & Threats
Apparently malicious NPM packages linked to Snyk raised some concerns, but the security firm clarified that it’s part of a research project.
Malware & Threats
Attackers have been exploiting a second vulnerability in BeyondTrust’s remote management solutions, CISA warns.
Data Breaches
Infostealer malware allowed threat actors to compromise Telefonica employees’ credentials and access the company’s internal ticketing system.
Malware & Threats
A fake proof-of-concept (PoC) exploit for a recent LDAP vulnerability distributes information stealer malware.
Malware & Threats
The latest version of the Banshee macOS information stealer no longer checks if the infected systems have the Russian language installed.
Malware & Threats
Google Cloud’s Mandiant has linked the exploitation of CVE-2025-0282, a new Ivanti VPN zero-day, to Chinese cyberspies.
Malware & Threats
Ivanti confirms zero-day exploitation of a remotely exploitable code execution flaw in its Connect Security product line.
Malware & Threats
Close to $500 million in cryptocurrency from over 332,000 addresses was stolen in 2024 using wallet drainer malware.
Malware & Threats
The FireScam Android infostealer monitors app notifications and harvests credentials and financial data and sends it to a Firebase database.
Malware & Threats
Noteworthy stories that might have slipped under the radar: McDonald’s API hacking, Netflix fined nearly $5 million in Netherlands, experimental malware killing ICS process.
IoT Security
Bitsight has discovered a BadBox botnet consisting of over 190,000 Android devices, mainly Yandex smart TVs and Hisense smartphones.
Malware & Threats
Juniper Networks says a Mirai botnet is ensnaring session smart router devices that are using default passwords.
Malware & Threats
FBI says HiatusRAT’s operators were seen scanning for web cameras and DVR systems affected by years-old vulnerabilities.
Government
Israeli forensics firm Cellebrite has been linked to an Android zero-day used to secretly install spyware on Serbian journalists' phones.
Join this event as we dive into threat hunting tools and frameworks, and explore value of threat intelligence data in the defender’s security stack.
RegisterLearn how integrating BAS and Automated Penetration Testing empowers security teams to quickly identify and validate threats, enabling prompt response and remediation.
RegisterExpert Insights
AI-made decisions are in many ways shaping and governing human lives. Companies have a moral, social, and fiduciary duty to responsibly lead its take-up.
(Stu Sjouwerman)
Ransomware is a major threat to the enterprise. Tools and training help, but survival depends on one thing: your organization’s muscle memory to respond fast and recover stronger.
(Trevin Edgeworth)
Strong security doesn’t just rely on tools—it starts with trust, clarity, and sincerity from the top down.
(Joshua Goldfarb)
The future of secure digital engagement depends on continuous identity verification and proofing that can scale with risk.
(Torsten George)
In a rapidly changing AI environment, CISOs are worried about investing in the wrong solution or simply not investing because they can’t decide what the best option is.
(Marc Solomon)