Malware & Threats
Russia-linked APT28 deploys the GooseEgg post-exploitation tool against numerous US and European organizations.
Hi, what are you looking for?
SecurityWeek
Government
CISA and the FBI have issued a warning on Iranian phishing attacks targeting national political organizations and campaigns.
Nation-State
Cyberespionage APT GoldenJackal has been targeting air-gapped systems at government organizations and embassies.
Nation-State
The China-linked group Salt Typhoon hacked AT&T and Verizon, possibly compromising wiretap systems, according to WSJ.
Cyberwarfare
The coordinated action resulted in the seizure of more than 100 domains used for spear-phishing targets in the US, UK, and Europe.
Nation-State
The targeting of Diehl Defence is significant because the company specializes in the production of missiles and ammunition.
Nation-State
The US has announced charges, sanctions and a $10 million reward for Iranian hackers accused of targeting elections.
Nation-State
MITRE R&D network hacked in early January by a state-sponsored threat group that exploited an Ivanti zero-day vulnerability.
Nation-State
Mandiant summarizes some of the latest operations of Russia’s notorious Sandworm group, which it now tracks as APT44.
Malware & Threats
Palo Alto Networks has started releasing hotfixes for the firewall zero-day CVE-2024-3400, which some have linked to North Korea’s Lazarus.
Data Breaches
The US government says Midnight Blizzard’s compromise of Microsoft corporate email accounts "presents a grave and unacceptable risk to federal agencies."
Government
Ivanti releases a carefully scripted YouTube video and an open letter from chief executive Jeff Abbott vowing to fix the entire security organization.
Cloud Security
News analysis: SecurityWeek editor-at-large Ryan Naraine reads the CSRB report on China's audacious Microsoft’s Exchange Online hack and isn't at all surprised by the findings.
Cyberwarfare
Threat intelligence firm EclecticIQ documents the delivery of malware phishing lures to government and private energy organizations in India.
Nation-State
Two Chinese cyberespionage groups have been targeting entities and member countries affiliated with ASEAN.
Malware & Threats
Despite a surge in zero-day attacks, data shows that security investments into OS and software exploit mitigations are forcing attackers to find new attack...
Government
Australia and New Zealand support the UK in condemning Chinese hackers for targeting UK institutions and parliamentarians.
Cyberwarfare
The US Treasury Department sanctions a pair of Chinese hackers linked to “malicious cyber operations targeting US critical infrastructure sectors.”
Endpoint Security
SecurityWeek talked to David Weston, VP enterprise and OS security at Microsoft, to discuss Windows kernel access and safe deployment practices.
Vulnerabilities
Network Security
Malware & Threats
Malware & Threats
Artificial Intelligence
Data Breaches
Data Breaches
