The new Barracuda 2025 Email Threats Report shines light on attackers’ tactics with valuable insights to help you stay ahead of today’s most pressing email security threats.
Over 1,200 internet-exposed SAP NetWeaver instances are vulnerable to an actively exploited maximum severity unauthenticated file upload vulnerability that allows attackers to hijack servers. [...]
Using Linux is a good start - but it is not enough. These easy privacy tricks could mean the difference between secure and sorry.
Threat actors have been observed exploiting two newly disclosed critical security flaws in Craft CMS in zero-day attacks to breach servers and gain unauthorized access. The attacks, first observed...
Offensive Security warned Kali Linux users to manually install a new Kali repository signing key to avoid experiencing update failures. [...]
2025-04-24 • Mandiant • Mandiant • elf.akira, elf.blackbasta, elf.lockbit, elf.systembc, js.gootloader, osx.lockbit, py.wirefire, win.akira, win.blackbasta, win.cobalt_strike, win.lockbit,...
Rockwell Automation announced on Monday its Security Monitoring and Response service, which is purpose-built to deliver continuous, real-time... The post RSA 2025: Rockwell launches Security...
About 20 percent of the logistics workers for U.K. retail giant M&S were told they could stay home as the company responded to a cyberattack.
The Center for Strategic & International Studies (CSIS) has released the 2025 Space Threat Assessment, noting that the... The post CSIS 2025 Space Threat Assessment: Cyberattacks on space systems...
This is a weekly threat intelligence report review from RST Cloud. This week, we analysed 53 threat intelligence reports and compiled a summary of each, along with the pertinent metadata extracted...
2025-04-21 • Twitter (@browsercookies) • Cookie Connoisseur Open article on Malpedia
2025-04-24 • Positive Technologies • PT Expert Security Center Open article on Malpedia
NetRise, vendor of software supply chain security, announced on Monday the launch of a new product, NetRise ZeroLens. ... The post NetRise launches ZeroLens to deliver proactive vulnerability...
Darcula phishing platform adds AI to create multilingual scam pages easily. Netcraft warns of rising risks from Darcula-Suite…
2025-04-16 • IBM X-Force • IBM Security X-Force Team Open article on Malpedia
2025-04-22 • Kaspersky Labs • Alexander Demidov, Georgy Kucherin, Igor Kuznetsov Open article on Malpedia
2025-04-23 • Microsoft • Microsoft Threat Intelligence Open article on Malpedia
2025-04-25 • Twitter (@teamcymru_S2) • TEAM CYMRU S2 THREAT RESEARCH Open article on Malpedia
2025-04-25 • Censys • Censys • elf.masol Open article on Malpedia
2025-04-16 • TechCrunch • Zack Whittaker Open article on Malpedia
2025-04-17 • Proofpoint • Greg Lesnewich, Josh Miller, Mark Kelly, Saher Naumaan • win.quasar_rat Open article on Malpedia
2025-04-17 • Cisco Talos • Joey Chen • elf.xorddos Open article on Malpedia
2025-04-22 • Volexity • Charlie Gardner, Josh Duke, Matthew Meltzer, Sean Koessel, Steven Adair, Tom Lancaster Open article on Malpedia
JokerOTP dismantled after 28,000 phishing attacks across 13 countries; UK and Dutch police arrest two suspects linked to £7.5M cyber fraud.
Microsoft is working on fully mitigating issues causing Outlook on the web and SharePoint Online users to experience delays or failures when searching. [...]
New ChoiceJacking attack allows malicious chargers to steal data from phones.
Records reviewed by WIRED show law enforcement agencies are eager to take advantage of the data trails generated by a flood of new internet-connected vehicle features.
Internet services giant Cloudflare says it mitigated a record number of DDoS attacks in 2024, recording a massive 358% year-over-year jump and a 198% quarter-over-quarter increase. [...]
This quarter, phishing attacks surged as the primary method for initial access. Learn how you can detect and prevent pre-ransomware attacks.
An ISACA survey found that just 5% of organizations have a defined strategy to defend against quantum-enabled threats