The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A new set of malicious Python packages has slithered their way to the Python Package Index (PyPI) repository with the ultimate aim of stealing sensitive inform…
Cybersecurity researchers have unmasked a prolific threat actor known as farnetwork, who has been linked to five different ransomware-as-a-service (RaaS) progr…
Microsoft on Wednesday said that a user containment feature in Microsoft Defender for Endpoint helped thwart a "large-scale remote encryption attempt" made byA…
Cybersecurity researchers have shed light on a new sophisticated strain of malware that masquerades as a WordPress plugin to stealthily create administrator ac…
The U.S. Federal Bureau of Investigation (FBI) is warning of a new trend of dual ransomware attacks targeting the same victims, at least since July 2023."Durin…
The threat actors behind RedLine and Vidar information stealers have been observed pivoting to ransomware through phishing campaigns that spread initial payloa…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday warned that multiple nation-state actors are exploiting security flaws in Fortinet…
Microsoft on Wednesday revealed that a China-based threat actor known asStorm-0558acquired the inactive consumer signing key to forge tokens and access Outlook…
Microsoft on Wednesday revealed that a China-based threat actor known asStorm-0558acquired the inactive consumer signing key to forge tokens and access Outlook…
A suspected Chinese-nexus hacking group exploited arecently disclosed zero-day flawin Barracuda Networks Email Security Gateway (ESG) appliances to breach gove…
Nearly 2,000 Citrix NetScaler instances have been compromised with a backdoor by weaponizing a recently disclosed critical security vulnerability as part of a …
The just-released BlackBerry Global Threat Intelligence Report reveals a 40% increase in cyberattacks against government and public service organizations versu…
Users in Latin America (LATAM) are the target of a financial malware calledJanelaRATthat's capable of capturing sensitive information from compromised Microsof…
A hitherto undocumented threat actor operating for nearly a decade and codenamedMoustachedBouncer has been attributed to cyber espionage attacks aimed at forei…
Cybersecurity researchers have discovered a new bunch of malicious packages on the npm package registry that are designed to exfiltrate sensitive developer inf…
Details have emerged about a now-patched flaw in OpenSSH that could be potentially exploited to run arbitrary commands remotely on compromised hosts under spec…
Microsoft Word documents exploiting known remote code execution flaws are being used as phishing lures to drop malware calledLokiBoton compromised systems."Lok…
A ransomware threat called 8Base that has been operating under the radar for over a year has been attributed to a "massive spike in activity" in May and June 2…
A new strain of JavaScript dropper has been observed delivering next-stage payloads like Bumblebee and IcedID.Cybersecurity firm Deep Instinct is tracking the …
The Chinese cyber espionage actor known asCamaro Dragonhas been observed leveraging a new strain of self-propagating malware that spreads through compromised U…
A highly targeted cyber attack against an East Asian IT company involved the deployment of a custom malware written in Golang calledRDStealer."The operation wa…
A new Golang-based information stealer calledSkuldhas compromised Windows systems across Europe, Southeast Asia, and the U.S."This new malware strain tries to …
The threat actors behind BlackCat ransomware have come up with an improved variant that prioritizes speed and stealth in an attempt to bypass security guardrai…
The Iranian threat actor known asAgriusis leveraging a new ransomware strain called Moneybird in its attacks targeting Israeli organizations.Agrius, also known…