The NSA and its partners want organizations to protect themselves against the technique, which can be tough to spot. The post International intelligence agencies raise the alarm on fast flux...
Ransomware gangs and Russian government hackers are increasingly turning to an old tactic called “fast flux” to hide the location of infrastructure used in cyberattacks.
Hazel highlights the key findings within Cisco Talos’ 2024 Year in Review (now available for download) and details our active tracking of an ongoing campaign targeting users in Ukraine with...
The North Korean threat actors behind Contagious Interview have adopted the increasingly popular ClickFix social engineering tactic to lure job seekers in the cryptocurrency sector to deliver a...
A maximum severity remote code execution (RCE) vulnerability has been discovered impacting all versions of Apache Parquet up to and including 1.15.0. [...]
The Hunters International Ransomware-as-a-Service (RaaS) operation is shutting down and rebranding with plans to switch to date theft and extortion-only attacks. [...]
The rules have changed. Again. Artificial intelligence is bringing powerful new tools to businesses. But it's also giving cybercriminals smarter ways to attack. They’re moving quicker, targeting...
Google didn't tell Android users much about Android System SafetyCore before it hit their phones. Fortunately, you can disable it.
Microsoft is testing a new taskbar icon scaling feature that automatically scales down Windows taskbar icons to show more apps when it gets too overcrowded. [...]
AI holds the promise to revolutionize all sectors of enterpriseーfrom fraud detection and content personalization to customer service and security operations. Yet, despite its potential,...
Introduction Welcome to the first installment in a comprehensive multi-part series introducing Command and Control (C2) frameworks to beginners. While I’ll cover technical […] The post The...
An international law enforcement operation has shut down Kidflix, a platform for child sexual exploitation with 1.8m registered users
Cybersecurity researchers at Jscamblers have uncovered a sophisticated web-skimming campaign targeting online retailers. The campaign utilizes a legacy…
CISA, the FBI, the NSA, and international cybersecurity agencies are calling on organizations and DNS providers to mitigate the "Fast Flux" cybercrime evasion technique used by state-sponsored...
A simple trick can remove malicious Android spyware apps that require a password to uninstall.
A critical authentication bypass flaw in CrushFTP is under active exploitation following a mishandled disclosure process
Assume nothing, trust nothing—and secure everything
ASEC Blog publishes “Mobile Security & Malware Issue 4st Week of April, 2025”
Overview The AhnLab SEcurity intelligence Center (ASEC) analysis team uses the AhnLab Smart Defense (ASD) infrastructure to categorize and respond to attacks on vulnerable MS-SQL servers. This...
Overview AhnLab SEcurity intelligence Center (ASEC) conducts response and classification of brute force or dictionary attacks targeting poorly managed Linux SSH servers using honeypots. This...
Overview AhnLab SEcurity intelligence Center (ASEC) responds to and classifies attacks that target inappropriately managed Windows web servers by utilizing the AhnLab Smart Defense (ASD)...
Last week’s article explored the limitations of the traditional CIA triad and made the case for adopting a... The post The Lie We’ve Been Sold About OT—and Why It’s Time to Rewrite the Definition...
Here are the most common and latest advancements in payment fraud strategies and payment fraud prevention tools for protecting your business.
OT Cyber Direct announced the launch of its digital marketplace, designed to provide small and medium-sized businesses (SMBs)... The post OT Cyber Direct launches marketplace to ease OT security...
Jacksonville, United States, 3rd April 2025, CyberNewsWire
In late March 2025, CERT-UA observed a surge in cyber-espionage operations targeting Ukraine, orchestrated by the UAC-0200 hacking group using DarkCrystal RAT. Researchers have recently uncovered...
Written by: John Wolfram, Michael Edie, Jacob Thompson, Matt Lin, Josh Murchie On Thursday, April 3, 2025, Ivanti disclosed a critical security vulnerability, CVE-2025-22457, impacting Ivanti...
Cybersecurity researchers have disclosed details of a new vulnerability impacting Google's Quick Share data transfer utility for Windows that could be exploited to achieve a denial-of-service...
The first-of-its-kind solution integrates with company codebases, enabling AI agents to work in-context and generate production-grade, front-end code in minutes.
Ivanti has released security updates to patch a critical Connect Secure remote code execution vulnerability exploited by a China-linked espionage actor to deploy malware since at least mid-March...