New ChoiceJacking attack allows malicious chargers to steal data from phones.
Records reviewed by WIRED show law enforcement agencies are eager to take advantage of the data trails generated by a flood of new internet-connected vehicle features.
Internet services giant Cloudflare says it mitigated a record number of DDoS attacks in 2024, recording a massive 358% year-over-year jump and a 198% quarter-over-quarter increase. [...]
This quarter, phishing attacks surged as the primary method for initial access. Learn how you can detect and prevent pre-ransomware attacks.
An ISACA survey found that just 5% of organizations have a defined strategy to defend against quantum-enabled threats
This report highlights a rarely-discussed but crucially important attack surface: security vendors themselves
The U.S. Coast Guard’s Office of Commercial Vessel Compliance has published the U.S. Port State Control Annual Report... The post US Port State Control Annual Report spotlights growing...
Your iPhone isn't necessarily as invulnerable to security threats as you may think. Here are the key dangers to watch out for and how to harden your device against bad actors.
The U.K. government announced that ‘Secure by Design’ mandates are set to become mandatory across all departments for... The post UK mandates Secure by Design approach across departments to...
The ISC2 has released a guide for cybersecurity practitioners to support their evaluation of the risks, challenges and... The post ISC2 unveils comprehensive guide for cybersecurity in satellite...
OPSWAT announced that its MetaDefender Unidirectional Gateway has achieved international security standard Common Criteria EAL4+ certification. The recognition... The post OPSWAT’s MetaDefender...
The US authorities have asked the public to help them unmask China’s Salt Typhoon threat actors
Each Monday, the Tenable Exposure Management Academy provides the practical, real-world guidance you need to shift from vulnerability management to exposure management. In this post, Tenable CIO...
2025-04-28 • Netresec • Erik Hjelmvik • win.njrat Open article on Malpedia
The UK government says it will ban the possession or supply of SIM farms, in a fraud crackdown
Sam Altman has long been a key figure shaping the conversation around artificial intelligence. As the CEO of OpenAI and chair of Tools for Humanity, he now finds himself addressing rising concerns...
Key Takeaways
Recorded Future’s Malware Intelligence rethinks traditional malware analysis to empower organizations to act first against modern threats.
The new offering delivers 24/7 real-time threat detection and response to combat rising cybersecurity risks in operational technology environments.
New capabilities of the Dual WirelessHART portfolio maximize connectivity, offering twice the capacity of previous models with improved wireless range.
4chan is partly back online after a hack took the infamous image-sharing site down for nearly two weeks. The site first went down on April 14, with the person responsible for the hack apparently...
How It Works The Uncoder AI API provides access to the platform’s core functionality, enabling integration into your existing CI/CD pipelines or other automated workflows. You can generate a...
ASEC Blog publishes “Mobile Security & Malware Issue 4st Week of April, 2025”
Coinbase has fixed a confusing bug in its account activity logs that caused users to think their credentials were compromised. [...]
Microsoft has revealed that a threat actor it tracks as Storm-1977 has conducted password spraying attacks against cloud tenants in the education sector over the past year. "The attack involves...
Brave has open-sourceed a new tool called "Cookiecrumbler," which uses large language models (LLMs) to detect cookie consent notices and then community-driven reviews to block those that won't...
2025-04-17 • Kaspersky Labs • GReAT • win.mystery_snail Open article on Malpedia
In the rapidly changing industrial cybersecurity sphere, advocating for women and gender diversity to empower women, is perhaps... The post Focus on championing women and diversity by building...
Grafana Labs detected suspicious activity via a triggered canary token, leading to the discovery of unauthorized access enabled by a misconfigured GitHub Action. An attacker exploited the workflow...
Cybersecurity researchers have detailed the activities of an initial access broker (IAB) dubbed ToyMaker that has been observed handing over access to double extortion ransomware gangs like...