AI code tools often hallucinate fake packages, creating a new threat called slopsquatting that attackers can exploit in…
Wiz partnered with the Institute for Critical Infrastructure Technology (ICIT) publishing a report around findings from a survey given to federal and state agencies, highlighting the growing...
Regulatory compliance and data protection were the biggest cybersecurity challenges cited by UK financial organizations, according to a Bridewell survey
Taiwan is gearing up to launch a state-of-the-art cybersecurity center this August, amid mounting threats from the Chinese state and rapidly advancing technologies like artificial intelligence and...
Microsoft warned that Exchange 2016 and Exchange 2019 will reach the end of support six months from now, on October 14. [...]
Thales report reveals bots now account for 51% of all web traffic, surpassing human activity
Pentesting firm Cobalt has found that organizations fix less than half of exploited vulnerabilities, with just 21% of generative AI flaws addressed
A recently disclosed security flaw in Gladinet CentreStack also impacts its Triofox remote access and collaboration solution, according to Huntress, with seven different organizations compromised...
Google is rolling out a new security mechanism on Android devices that will automatically reboot locked, unused devices after three consecutive days of inactivity, restoring memory to an encrypted...
This week, our Year in Review spotlight is on ransomware—where low-profile tactics led to high-impact consequences. Download our 2 page ransomware summary, or watch our 55 second video.
Microsoft warned Windows users of increased CPU usage when typing while using recent versions of the classic Outlook email client. [...]
Meta has announced that it will begin to train its artificial intelligence (AI) models using public data shared by adults across its platforms in the European Union, nearly a year after it paused...
Representatives from 20 allied governments and national agencies participated in a NATO-led exercise focused on strengthening mutual cyber... The post NATO allies boost cyber defense coordination,...
Morphisec Labs has detailed a newly discovered remote access trojan (RAT) dubbed ResolverRAT, which employs advanced in-memory execution,... The post ResolverRAT malware attacks pharma and...
A UK man has been sentenced to over eight years for masterminding £100m phishing platform LabHost
Kaspersky expert discusses the challenges of assessing the security of industrial facilities and the role of the professional community in their protection, the reasons behind security issues in...
ZDNET's pick for best value VPN just got cheaper. Through April 30, you can save and score three months free on Surfshark VPN and antivirus plans.
The State of Pentesting Report 2025 pulls back the curtain on how organizations are really doing when it comes to cybersecurity. The report offers a candid look at the gap between perception and...
There are legitimate uses for cookies but they have a dark side too.
2025-04-14 • Morphisec • Nadav Lorber • win.resolver_rat Open article on Malpedia
2025-04-14 • Palo Alto Networks Unit 42 • Prashil Pattni • py.rn_stealer Open article on Malpedia
Cyble researchers have uncovered ransomware called DOGE BIG BALLS, a ransomware that not just stands out but also presents its technical prowess for audacious psychological manipulation. This...
Australian organizations using Fortinet products are being urged to take immediate action following a new advisory highlighting the active exploitation of previously known vulnerabilities. The...
President Trump last week revoked security clearances for Chris Krebs, the former director of the Cybersecurity and Infrastructure Security Agency (CISA) who was fired by Trump after declaring the...
Discover how integrating threat intelligence into your cybersecurity strategy can lead to smarter, more efficient security investments. Learn practical approaches to optimize your security budget...
an AWS security breach that severely impacted a growing SaaS company. An attacker gained access to administrator-level credentials and exploited architectural flaws to compromise both staging and...
Cybersecurity researchers have discovered a new, sophisticated remote access trojan called ResolverRAT that has been observed in attacks targeting healthcare and pharmaceutical sectors. "The...
Learn how to harness the benefits of Model Context Protocol (MCP)-enabled AI systems without introducing risks to your organization.
NVIIA's incomplete security patch, combined with a Docker vulnerability, creates a serious threat for organizations using containerized environments. This article explains the risks and mitigation...
Microsoft held off on releasing the privacy-unfriendly feature after a swell of pushback last year. Now it’s trying again, with a few improvements that skeptics say still aren't enough.