In addition to employing a fileless attack technique, the Ursnif Trojan has been using CAB files to compress harvested data before exfiltration in recent...
Hi, what are you looking for?
SecurityWeek
Infamous "Cobalt" hacking group has been using Google App Engine for the delivery of malware through PDF decoy documents, Netskope’s security researchers say.
Threat actors conducting Remote Desktop Protocol (RDP) attacks are increasingly using network tunneling and host-based port forwarding to bypass network protections, FireEye reports.
Data leak vulnerabilities in Ghostscript could allow an attacker to take over a routine and even execute commands on systems, Google Project Zero researcher...
Spam campaigns that have active during the last several months have been distributing the Redaman banking malware, Palo Alto Networks security researchers say.
A group of United States Senators have written a letter to the Washington Metropolitan Area Transit Authority (WMATA) to express safety and security concerns...
A recently discovered PDF exploit used steganography to hide malicious JavaScript code in images embedded in PDF files, according to exploit analysis firm EdgeSpot.
Apple this week released new updates for iOS and macOS users to address tens of security vulnerabilities and other bugs in the two platforms.
A remote code execution vulnerability was recently discovered in APT, the high level package manager used in many Linux distributions.
Nearly 100,000 malware distribution websites have been identified and taken down over the course of 10 months as part of an abuse.ch project called...
Free and open Certificate Authority (CA) Let’s Encrypt today started the process of completely retiring TLS-SNI-01 validation support.
The newly announced Act to Strengthen Identity Theft Protections in North Carolina proposes that ransomware attacks be treated as data breaches.
The DarkHydrus threat group has added new functionality to the payloads used in recent attacks and is also leveraging Google Drive for command and...
Web applications can exploit browser extensions to access privileged capabilities and steal sensitive user information, including credentials, a researcher has discovered.
The website for a popular WordPress plugin was hacked over the weekend, when a former employee abused a previously implemented backdoor to take over...
An updated version of the Fallout exploit kit recently emerged with an exploit for a recent Flash zero-day included in its arsenal, Malwarebytes Labs...
There is widespread scanning for a recently disclosed remote code execution vulnerability in the ThinkPHP framework, Akamai reveals.
Recent samples of the destructive Xbash Linux malware can uninstall cloud security protection products from infected servers, Palo Alto Networks reports.
Barracuda Networks this week announced automated incident response capabilities are now available for customers using its Total Email Protection solution.
Cyber-attacks that have been ongoing since at least mid-2017 hit financial institutions in West Africa, Symantec security researchers report.
Data Breaches
French officials say roughly 73,000 government accounts were affected, while the threat actor claims to have stolen messages and user data from the sovereign...
Artificial Intelligence
Artificial Intelligence
Incident Response
Ransomware
Mackay Sugar was targeted in a cyberattack carried out by a threat group known as The Gentlemen.
Cybersecurity Funding
