AI-powered cyber threats are reshaping security landscapes. Businesses that don't evolve will be vulnerable to increasingly sophisticated attacks - here's how to stay ahead.
A new ransomware operator named 'Mora_001' is exploiting two Fortinet vulnerabilities to gain unauthorized access to firewall appliances and deploy a custom ransomware strain dubbed SuperBlack. [...]
A misconfigured database exposed 108.8 GB of sensitive data, including information on over 86,000 healthcare workers affiliated with…
Microsoft is now testing an AI-powered text summarization feature in Notepad and a Snipping Tool "Draw & Hold" feature that helps draw perfect shapes. [...]
In the second part of its four-part series on analysis of the Windows CE attack surface, a legacy... The post Claroty explores Windows CE debugging protocols in OT environments, uncovers hidden...
Microsoft said the ongoing phishing campaign is designed to infect hospitality firms with multiple credential-stealing malware
ASEC Blog publishes “Android Malware & Security Issue 2st Week of March, 2025”
AhnLab SEcurity intelligence Center (ASEC) recently discovered malware created using the aforementioned JPHP. JPHP is a PHP interpreter that runs on the Java Virtual Machine (JVM), and it was...
Privacy rights groups have called on Apple’s legal challenge to a secret U.K. government order asking it to backdoor an end-to-end encrypted (E2EE) version of its iCloud storage service to be...
A few years ago, I tried my hand at the, now retired, CAPTCHA Forest CTF, which was part of the nullcon HackIM 2019. I wanted to solve it using computer vision and machine learning. This started...
Ever had a random conversation and then seen an ad for something you mentioned? This simple trick will help you find out if it was just a coincidence or something more.
2025-03-12 • Lookout • Lookout • apk.kospy Open article on Malpedia
OBSCURE#BAT malware campaign exploits social engineering & fake software downloads to evade detection, steal data and persist on…
Microsoft is investigating a known issue that causes the new Outlook email client to crash when users click the "Go to classic Outlook" button, which should help them switch back to the classic...
Speedify VPN offers speed-centered features that may not make up for its lacking security features and pricey plan. Find out how this VPN measured up in our review.
Researchers from Mandiant identified that threat actors have been deploying custom backdoors on Juniper Networks’ Junos OS routers... The post Mandiant uncovers custom backdoors on Juniper Junos...
Meta has warned that a security vulnerability impacting the FreeType open-source font rendering library may have been exploited in the wild. The vulnerability has been assigned the CVE identifier...
Juniper Networks has released emergency security updates to patch a Junos OS vulnerability exploited by Chinese hackers to backdoor routers for stealthy access. [...]
Browser maker Mozilla is urging users to update their Firefox instances to the latest version to avoid facing issues with using add-ons due to the impending expiration of a root certificate. "On...
GitLab released security updates for Community Edition (CE) and Enterprise Edition (EE), fixing nine vulnerabilities, among which two critical severity ruby-saml library authentication bypass flaws. [...]
Palo Alto Networks found that nearly two-thirds of UK organizations cited technology complexity as the most significant challenge towards building a sophisticated security posture
Zoom has released important security patches addressing several vulnerabilities that affect its applications, including four high-severity flaws. These Zoom vulnerabilities was discovered by the...
Agents are already capable of creating and sending phishing emails to targets.
Microsoft is warning that an ongoing phishing campaign impersonating Booking.com is using ClickFix social engineering attacks to infect hospitality workers with various malware, including...
VC firms invested 35% more in cybersecurity startups in North America and Europe in Q4 2024 than a year previously
Cary, North Carolina, 13th March 2025, CyberNewsWire
The UK’s information commissioner has warned that all digital firms using children’s data must follow the GDPR
Credential theft surged 3× in a year—but AI-powered malware? More hype than reality. The Red Report 2025 by Picus Labs reveals attackers still rely on proven tactics like stealth & automation to...
We analyze the activities of the Head Mare hacktivist group, which has been attacking Russian companies jointly with Twelve.
Cascading Style Sheets (CSS) are ever present in modern day web browsing, however its far from their own use. This blog will detail the ways adversaries use CSS in email campaigns for evasion and tracking.