The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A new phishing campaign has set its sights on European entities to distribute Remcos RAT and Formbook via a malware loader dubbedDBatLoader."The malware payloa…
Amid theongoing warbetween Russia and Ukraine, government, agriculture, and transportation organizations located in Donetsk, Lugansk, and Crimea have been atta…
Amid theongoing warbetween Russia and Ukraine, government, agriculture, and transportation organizations located in Donetsk, Lugansk, and Crimea have been atta…
An Android voice phishing (aka vishing) malware campaign known as FakeCalls has reared its head once again to target South Korean users under the guise of over…
A North Korean espionage group tracked asUNC2970has been observed employing previously undocumented malware families as part of a spear-phishing campaign targe…
The advanced persistent threat (APT) actor known asTonto Teamcarried out an unsuccessful attack on cybersecurity company Group-IB in June 2022.The Singapore-he…
Popular social news aggregation platform Reddit has disclosed that it was the victim of a security incident that enabled unidentified threat actors to gain una…
The Computer Emergency Response Team of Ukraine (CERT-UA) hasissuedan alert warning of cyber attacks against state authorities in the country that deploy a leg…
In a continuing sign that threat actors are adapting well to apost-macro world, it has emerged that the use of Microsoft OneNote documents to deliver malware v…
Microsoft on Tuesday said it took steps to disable fake Microsoft Partner Network (MPN) accounts that were used for creating maliciousOAuthapplications as part…
The U.K. National Cyber Security Centre (NCSC) on Thursday warned of spear-phishing attacks mounted by Russian and Iranian state-sponsored actors for informati…
A new malware campaign has been observed targeting Italy with phishing emails designed to deploy an information stealer on compromised Windows systems."The inf…
Earlier this year, threat actors infiltratedMailchimp, the popular SaaS email marketing platform. They viewed over 300 Mailchimp customer accounts and exported…
A new malware campaign has been observed using sensitive information stolen from a bank as a lure in phishing emails to drop a remote access trojan calledBitRA…
The Computer Emergency Response Team of Ukraine (CERT-UA) this weekdisclosedthat users of the Delta situational awareness program received phishing emails from…
A Chinese-speaking advanced persistent threat (APT) actor codenamedMirrorFacehas been attributed to a spear-phishing campaign targeting Japanese political esta…
NuGet, PyPi, and npm ecosystems are the target of a new campaign that has resulted in over 144,000 packages being published by unknown threat actors."The packa…
Phishing campaigns involving theQakbot malwareare using Scalable Vector Graphics (SVG) images embedded in HTML email attachments.The new distribution method wa…
Dropbox has revealed details of a phishing attack to which it fell victim. In the attack, a threat actor was able to steal code from the company after gatherin…
Phishing website URL removed from package spec file and replaced with new official site link. References: - https://bugs.mageia.org/show_bug.cgi?id=30679
removes phishing site as URL, and updates to new. explicitly BuildRequires gcc
The Russian state-sponsored hacking collective known as APT29 has been attributed to a new phishing campaign that takes advantage of legitimate cloud services …
The advanced persistent threat (APT) group known as Transparent Tribe has been attributed to a new ongoing phishing campaign targeting students at various educ…
With identity theft up by 42% from last year, 7 million new phishing webpages created…Why Automatic Attack Surface Management is Vital in This Modern Age on La…