Mandiant revealed that Chinese espionage actor UNC3886 has deployed modified versions of the TinyShell backdoor across multiple Juniper OS routers
Written by: Lukasz Lamparski, Punsaen Boonyakarn, Shawn Chew, Frank Tse, Jakub Jozwiak, Mathew Potaczek, Logeswaran Nadarajan, Nick Harbour, Mustafa Nasser Introduction In mid 2024, Mandiant...
Tel Aviv, Israel, 12th March 2025, CyberNewsWire
A new Android spyware named 'KoSpy' is linked to North Korean threat actors who have infiltrated Google Play and third-party app store APKPure through at least five malicious apps. [...]
Indian authorities arrested Aleksej Besciokov, the co-founder and one of the administrators of the Russian Garantex crypto-exchange while vacationing with his family in Varkala, India. [...]
This update also re-enables Apple Intelligence for those who previously had turned off this feature. Here's how to fix that, too.
Following last month’s research on a new campaign by the Chinese threat actor Silver Fox, which exploited Philips... The post Forescout widens research on Silver Fox hackers, reveals malware...
Strong and smart security operations teams are at the heart of any cybersecurity strategy, and today a startup that builds tooling to help keep them on their toes is announcing some funding on the...
San Jose, United States / California, 12th March 2025, CyberNewsWire
Facing increasing regulations, VIP Authentication Hub offers EU security teams greater control and compliance
Hot on the heels of the exploitation attempts of the medium-severity vulnerability in Espressif ESP32 Bluetooth chips, leveraged in over 1 billion devices, another security issue in a widely...
Researchers at Palo Alto Networks have uncovered multiple vulnerabilities within a Supervisory Control and Data Acquisition (SCADA) system,... The post Palo Alto detects critical vulnerabilities...
The U.S. National Institute of Standards and Technology (NIST) released a status report on the fourth round of... The post NIST advances post-quantum cryptography standardization, selects HQC...
Xage Security, vendor of zero trust access and protection solutions, has announced the launch of its patent-pending Remote... The post Xage Security launches remote CAC authentication,...
Apple has released a series of crucial security updates designed to patch vulnerabilities across its ecosystem of devices. On March 11, 2025, the tech giant rolled the Apple security update with...
API attacks are constantly on the rise, with a recent alarming study showing that 59% of organizations give…
Mozilla is warning Firefox users to update their browsers to the latest version to avoid facing disruption and security risks caused by the upcoming expiration of one of the company's root...
Microsoft's March 2025 Patch Tuesday fixes six actively exploited zero-day vulnerabilities, including critical RCE and privilege escalation flaws. Learn how these vulnerabilities impact Windows...
2025-03-07 • Proofpoint • Ole Villadsen, Proofpoint Threat Research Team, Selena Larson Open article on Malpedia
Slovak cybersecurity company ESET says a newly patched zero-day vulnerability in the Windows Win32 Kernel Subsystem has been exploited in attacks since March 2023. [...]
2025-03-11 • Github (prodaft) • emremin • py.anubisbackdoor Open article on Malpedia
2025-03-11 • Trend Micro • Cj Arsley Mateo, Darrel Tristan Virtusio, Jacob Santos, Junestherry Dela Cruz, Paul John Bardon • win.lumma, win.smartloader Open article on Malpedia
Microsoft has fixed seven zero-days this Patch Tuesday, including one not currently being actively exploited
Traditional Data Loss Prevention (DLP) solutions weren't built for today's browser-driven workplace. Now sensitive data moves moves through SaaS apps, AI tools, and personal accounts, bypassing...
Cybersecurity firm Lookout found several samples of a North Korean spyware it calls KoSpy. © 2024 TechCrunch. All rights reserved. For personal use only.
Chinese hackers are deploying custom backdoors on Juniper Networks Junos OS MX routers that have reached end-of-life (EoL) and no longer receive security updates. [...]
Over the last month, Barracuda threat analysts identified several notable email-based threats targeting organizations around the world including extortion attempts impersonating Clop ransomware,...
2025-03-10 • Check Point Research • Check Point Research • win.remcos Open article on Malpedia
The UK’s cybersecurity sector added thousands of workers and over £1bn in revenue in 2024
Apple on Tuesday released a security update to address a zero-day flaw that it said has been exploited in "extremely sophisticated" attacks. The vulnerability has been assigned the CVE identifier...