Ionut Arghire

Google has released patches for more than 50 vulnerabilities as part of the March 2023 security updates for the Android platform.

Metabase Q documents FiXS, a new malware family targeting ATMs in Latin America.

Microsoft and Mitre release Arsenal plugin to help cybersecurity professionals emulate attacks on machine learning (ML) systems.

Play ransomware operators have leaked data allegedly stolen from the City of Oakland last month.

Carding marketplace BidenCash last week released information on more than 2.1 million credit and debit cards.

Cybersecurity startup Wiz warns of a widespread redirection campaign in which thousands of websites have been compromised using legitimate FTP credentials.

FBI and CISA have issued an alert to warn organizations of the risks associated with Royal ransomware attacks.

Chick-fil-A is informing users that their accounts have been compromised in a two-month-long credential stuffing campaign.

ESET says the BlackLotus UEFI bootkit can bypass secure boot on fully updated Windows 11 systems.

Canadian bookstore chain Indigo this week confirmed that employee data was stolen in a ransomware attack last month.

Cisco has released patches for a critical remote code execution vulnerability in certain IP phones.

GitHub this week made secret scanning generally available and free for all public repositories.

Two APTs, named Winnti and Clasiopa, have been observed targeting Asian organizations in the materials sector.

In January and February 2023, six law firms were targeted with the GootLoader and SocGholish malware in two separate campaigns.

Google this week made client-side encryption for Gmail and Calendar available for Workspace customers.

The South American cyberespionage group Blind Eagle has been observed impersonating a Colombian government tax agency in recent attacks.

The US Marshals Service has confirmed that ransomware was deployed on one of its systems that contains sensitive law enforcement information.

A recently identified post-exploitation framework ‘Exfiltrator-22’ uses the same C&C infrastructure as the LockBit ransomware.

AI-driven identity verification platform Vouched has raised $6.3 million in a funding round led by BHG VC and SpringRock Ventures.

US Department of Treasury has announced a fresh set of sanctions against entities helping Russia in the war against Ukraine.