The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A new process injection technique dubbed Mockingjay could be exploited by threat actors to bypass security solutions to execute malicious code on compromised s…
An unknown cryptocurrency exchange located in Japan was the target of a new attack earlier this month to deploy an Apple macOS backdoor called JokerSpy.Elastic…
Niels Dossche and Tim D'¼sterhus discovered that PHP's implementation of the SOAP HTTP Digest authentication did not check for failures, which may result in a …
The U.S. Department of Justice (DoJ) on Thursday unveiled charges against a Russian national for his alleged involvement in deploying LockBit ransomware to tar…
Progress Software on Thursdaydiscloseda third vulnerability impacting its MOVEit Transfer application, as the Cl0p cybercrime gang deployed extortion tactics a…
The threat actors behind theLockBitransomware-as-a-service (RaaS) scheme have extorted $91 million following hundreds of attacks against numerous U.S. organiza…
Get exclusive insights from a real ransomware negotiator who shares authentic stories from network hostage situations and how he managed them.The Ransomware In…
Threat actors associated with theCyclops ransomwarehave been observed offering an information stealer malware that's designed to capture sensitive data from in…
A critical security vulnerability has been disclosed in the Open Authorization (OAuth) implementation of the application development framework Expo.io.The shor…
An unnamed government entity associated with the United Arab Emirates (U.A.E.) was targeted by a likely Iranian threat actor to breach the victim's Microsoft E…
The threat actors behind the nascentBuhtiransomware have eschewed their custom payload in favor of leaked LockBit and Babuk ransomware families to strike Windo…
The infamous Lazarus Group actor has been targeting vulnerable versions of Microsoft Internet Information Services (IIS) servers as an initial breach route to …
The notorious cybercrime group known as FIN7 has been observed deployingCl0p(aka Clop) ransomware, marking the threat actor's first ransomware campaign since l…
The notorious cybercrime group known as FIN7 has been observed deployingCl0p(aka Clop) ransomware, marking the threat actor's first ransomware campaign since l…
A new ransomware group known asRA Grouphas become the latest threat actor to leverage the leaked Babuk ransomware source code to spawn its own locker variant.T…
A new ransomware-as-service (RaaS) operation called MichaelKors has become the latest file-encrypting malware to target Linux andVMware ESXi systemsas of April…
The U.S. government on Tuesday announced the court-authorized disruption of a global network compromised by an advanced malware strain known asSnakewielded by …
Are you concerned about ransomware attacks? You're not alone. In recent years, these attacks have become increasingly common and can cause significant damage t…
Users of Advanced Custom Fields plugin for WordPress are being urged to update version 6.1.6 following the discovery of a security flaw.The issue, assigned the…
Lazarus, the prolific North Korean hacking group behind the cascadingsupply chain attack targeting 3CX, also breached two critical infrastructure organizations…
A new strain of malware developed by threat actors likely affiliated with the FIN7 cybercrime group has been put to use by the members of the now-defunct Conti…
Cybersecurity researchers have detailed the tactics of a "rising" cybercriminal gang called "Read The Manual" (RTM) Locker that functions as a private ransomwa…
As technology advances, cyberattacks are becoming more sophisticated. With the increasing use of technology in our daily lives, cybercrime is on the rise, as e…
A North Korean government-backed threat actor has been linked to attacks targeting government and military personnel, think tanks, policy makers, academics, an…