2025-03-13 • Linkedin (ThreatMon) • Aziz Kaplan, ThreatMon, ThreatMon Malware Research Team Open article on Malpedia
2025-03-14 • Twitter (@CERTCyberdef) • Alexandre Matousek, Marine PICHON • win.emmenhtal, win.lumma, win.rhadamanthys Open article on Malpedia
One of the four states that make up the Pacific nation of Micronesia is battling against ransomware hackers who have forced all of the computers used by its government health agency offline.
Tenable Research reveals that AI chatbot DeepSeek R1 can be manipulated to generate keyloggers and ransomware code. While…
Botnets have been used in some of the most expensive and widespread cyberattacks in history. This post is an intoduction into botnets and botnet attacks.
Could High Speed Discovery get any better? (Spoiler: It just did.)
FBI and CISA warn of Medusa ransomware attacks impacting critical infrastructure. Learn about Medusa’s tactics, prevention tips, and…
Microsoft has shed light on an ongoing phishing campaign that targeted the hospitality sector by impersonating online travel agency Booking.com using an increasingly popular social engineering...
The Defense Department faces a startling capability gap. The post US must prioritize cybersecurity training for the military’s engineers appeared first on CyberScoop.
The shift-left approach is changing how we develop applications and systems. This post dives into how it impacts developers and what can be done to make it work better.
The North Korea-linked threat actor known as ScarCruft is said to have been behind a never-before-seen Android surveillance tool named KoSpy targeting Korean and English-speaking users. Lookout,...
February 2025 saw a record 126% surge in ransomware attacks, with Cl0p leading the charge. Hackers exploited file…
Amazon won't say if it will stop hosting data from three phone surveillance operations that spilled private data on millions of people. © 2024 TechCrunch. All rights reserved. For personal use only.
Cisco Talos’ Vulnerability Discovery & Research team recently disclosed a Miniaudio and three Adobe vulnerabilities. The vulnerabilities mentioned in this blog post have been patched by their...
Thorsten picks apart some headlines, highlights Talos’ report on an unknown attacker predominantly targeting Japan, and asks, “Where is the victim, and does it matter?”
Two high-severity security flaws have been disclosed in the open-source ruby-saml library that could allow malicious actors to bypass Security Assertion Markup Language (SAML) authentication...
The U.S. Federal Communications Commission (FCC) revealed the creation of a new Council for National Security within the... The post US FCC launches Council for National Security to combat foreign...
Volt Typhoon's ten-month intrusion of Littleton Electric Light and Water Departments exposes vulnerabilities in the US electric grid
Microsoft has reinstated the 'Material Theme - Free' and 'Material Theme Icons - Free' extensions on the Visual Studio Marketplace after finding that the obfuscated code they contained wasn't...
Lockdown Mode is an "extreme protection" feature that's good for at-risk users, but its notifications are increasingly confusing. © 2024 TechCrunch. All rights reserved. For personal use only.
As IT environments grow more complex, IT professionals are facing unprecedented pressure to secure business-critical data. With hybrid work the new standard and cloud adoption on the rise, data is...
CISA and FBI warn of Medusa ransomware impacting over 300 victims across critical infrastructure sectors with double extortion tactics
Imagine a business environment where operations are streamlined, resources are optimized, and security threats are proactively managed. This level of efficiency and protection is not just a...
According to Sophos, ransomware recovery costs soared to $2.73 million in 2024, displaying a 500% rise compared to 2023 and underscoring the escalating financial toll of cyberattacks. The FBI,...
AI-powered cyber threats are reshaping security landscapes. Businesses that don't evolve will be vulnerable to increasingly sophisticated attacks - here's how to stay ahead.
A new ransomware operator named 'Mora_001' is exploiting two Fortinet vulnerabilities to gain unauthorized access to firewall appliances and deploy a custom ransomware strain dubbed SuperBlack. [...]
A misconfigured database exposed 108.8 GB of sensitive data, including information on over 86,000 healthcare workers affiliated with…
Microsoft is now testing an AI-powered text summarization feature in Notepad and a Snipping Tool "Draw & Hold" feature that helps draw perfect shapes. [...]
In the second part of its four-part series on analysis of the Windows CE attack surface, a legacy... The post Claroty explores Windows CE debugging protocols in OT environments, uncovers hidden...
Microsoft said the ongoing phishing campaign is designed to infect hospitality firms with multiple credential-stealing malware