The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Indian government entities and the defense sector have been targeted by a phishing campaign that's engineered to drop Rust-based malware for intelligence gathe…
The U.S. Justice Department (DoJ) has officially announced the disruption of the BlackCat ransomware operation and released a decryption tool that more than 50…
Ransomware attacks have become a significant and pervasive threat in the ever-evolving realm of cybersecurity. Among the various iterations of ransomware, one …
Unauthorized websites distributing trojanized versions of cracked software have been found to infect Apple macOS users with a new Trojan-Proxy malware."Attacke…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned of active exploitation of a high-severity Adobe ColdFusion vulnerability by unidentifie…
Microsoft has warned of a new wave of CACTUS ransomware attacks that leverage malvertising lures to deploy DanaBot as an initial access vector.The DanaBot infe…
A variant of a ransomware strain known as DJVU has been observed to be distributed in the form of cracked software."While this attack pattern is not new, incid…
A new phishing attack has been observed leveraging a Russian-language Microsoft Word document to deliver malware capable of harvesting sensitive information fr…
Multiple threat actors, including LockBit ransomware affiliates, are actively exploiting a recently disclosed critical security flaw in Citrix NetScaler applic…
The ransomware strain known as Play is now being offered to other threat actors "as a service," new evidence unearthed by Adlumin has revealed."The unusual lac…
The stealer malware known as LummaC2 (aka Lumma Stealer) now features a new anti-sandbox technique that leverages the mathematical principle of trigonometry to…
The threat actors behind the8Base ransomwareare leveraging a variant of the Phobos ransomware to conduct their financially motivated attacks.The findings come …
In 2023, the global average cost of a data breach reached$4.45 million. Beyond the immediate financial loss, there are long-term consequences like diminished c…
The threat actors behind a new ransomware group calledHunters Internationalhave acquired the source code and infrastructure from the now-dismantled Hive operat…
A new variant of theGootLoader malwarecalled GootBot has been found to facilitate lateral movement on compromised systems and evade detection."The GootLoader g…
Multiple ransomware groups have begun to actively exploit recently disclosed flaws in Atlassian Confluence and Apache ActiveMQ.Cybersecurity firm Rapid7saidit …
Israeli higher education and tech sectors have been targeted as part of a series of destructive cyber attacks that commenced in January 2023 with an aim to dep…
Israeli higher education and tech sectors have been targeted as part of a series of destructive cyber attacks that commenced in January 2023 with an aim to dep…
The threat actors linked toKinsinghave been observed attempting to exploit the recently disclosed Linux privilege escalation flaw called Looney Tunables as par…
Compromised Facebook business accounts are being used to run bogus ads that employ "revealing photos of young women" as lures to trick victims into downloading…
Financial data is much more than just a collection of numbers; it is a crucial component of any business and a prime target for cybercriminals. It's important …
The notorious DarkGate malware has become active again, as it now spreads via compromised Skype…DarkGate Malware Becomes Active, Spreads Via Skype Accounts on …
LUCR-3 overlaps with groups such as Scattered Spider, Oktapus, UNC3944, and STORM-0875 and is a financially motivated attacker that leverages the Identity Prov…
Cybersecurity experts have shed light on a new cybercrime group known asShadowSyndicate(formerly Infra Storm) that may have leveraged as many as seven differen…