Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
"Dozens" of organizations across the world have been targeted as part of a broad business email compromise (BEC) campaign that involved the use of adversary-in…
Spanish-speaking users in Latin America have been at the receiving end of a new botnet malware dubbedHorabotsince at least November 2020."Horabot enables the t…
An unnamed government entity associated with the United Arab Emirates (U.A.E.) was targeted by a likely Iranian threat actor to breach the victim's Microsoft E…
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of cyber attacks targeting state bodies in the country as part of an espionage campaign.Th…
Cybersecurity researchers have unearthed previously undocumented attack infrastructure used by the prolific state-sponsored groupSideWinderto strike entities l…
Cybersecurity researchers have discovered an ongoing phishing campaign that makes use of a unique attack chain to deliver theXWorm malwareon targeted systems.S…
Google unveiled a slew of new privacy, safety, and security features today at its annual developer conference, Google I/O. The tech giant's latest initiatives …
An ongoing phishing campaign with invoice-themed lures is being used to distribute the SmokeLoader malware in the form of a polyglot file, according to the Com…
Various sectors in East Asian markets have been subjected to a new email phishing campaign that distributes a previously undocumented strain of Android malware…
The North Korean state-sponsored threat actor known asKimsukyhas been discovered using a new reconnaissance tool calledReconSharkas part of an ongoing global c…
The cyber espionage actor tracked asBlind Eaglehas been linked to a new multi-stage attack chain that leads to the deployment of the NjRAT remote access trojan…
In today's perilous cyber risk landscape, CISOs and CIOs must defend their organizations against relentless cyber threats, including ransomware, phishing, atta…
A new phishing campaign has set its sights on European entities to distribute Remcos RAT and Formbook via a malware loader dubbedDBatLoader."The malware payloa…
Amid theongoing warbetween Russia and Ukraine, government, agriculture, and transportation organizations located in Donetsk, Lugansk, and Crimea have been atta…
Amid theongoing warbetween Russia and Ukraine, government, agriculture, and transportation organizations located in Donetsk, Lugansk, and Crimea have been atta…
An Android voice phishing (aka vishing) malware campaign known as FakeCalls has reared its head once again to target South Korean users under the guise of over…
A North Korean espionage group tracked asUNC2970has been observed employing previously undocumented malware families as part of a spear-phishing campaign targe…
The advanced persistent threat (APT) actor known asTonto Teamcarried out an unsuccessful attack on cybersecurity company Group-IB in June 2022.The Singapore-he…
Popular social news aggregation platform Reddit has disclosed that it was the victim of a security incident that enabled unidentified threat actors to gain una…
The Computer Emergency Response Team of Ukraine (CERT-UA) hasissuedan alert warning of cyber attacks against state authorities in the country that deploy a leg…
In a continuing sign that threat actors are adapting well to apost-macro world, it has emerged that the use of Microsoft OneNote documents to deliver malware v…
Microsoft on Tuesday said it took steps to disable fake Microsoft Partner Network (MPN) accounts that were used for creating maliciousOAuthapplications as part…
The U.K. National Cyber Security Centre (NCSC) on Thursday warned of spear-phishing attacks mounted by Russian and Iranian state-sponsored actors for informati…
A new malware campaign has been observed targeting Italy with phishing emails designed to deploy an information stealer on compromised Windows systems."The inf…
