In a joint advisory with Western allies, the National Cyber Security Centre sounded the alarm about variants of BADBAZAAR and MOONSHINE. The post BadBazaar and Moonshine malware targets Taiwanese,...
Google has quietly launched Firebase Studio, which is a cloud-based AI-powered integrated development environment that lets you build full-fledged apps using prompts. [...]
A Chinese-affiliated threat actor known for its cyber-attacks in Asia has been observed exploiting a security flaw in security software from ESET to deliver a previously undocumented malware...
A targeted campaign exploited Server-Side Request Forgery (SSRF) vulnerabilities in websites hosted on AWS EC2 instances to extract EC2 Metadata, which could include Identity and Access Management...
The OCC said the February incident resulted in the theft of “highly sensitive information" tied to the financial conditions of federally regulated institutions. The post Treasury bureau notifies...
Sean Plankey's nomination to head up CISA will be blocked, for now.
Human rights non-profit Amnesty International urged Thai authorities this week to investigate claims of state-sponsored cyberattacks against human rights organizations and pro-democracy activists...
Cybersecurity researchers have identified a new spam campaign driven by ‘AkiraBot,’ an AI-powered bot that targets small business…
Cybersecurity researchers have identified a new spam campaign driven by ‘AkiraBot,’ an AI-powered bot that targets small business…
Cybersecurity company Forescout announced the availability of the new Forescout eyeScope cloud visibility and monitoring solution, expanding the... The post Forescout launches eyeScope, a...
Running a pest prevention and lawn care company with over 190 service centers is no walk in the park. For Massey Services, it’s a mission driven by creativity and innovation. Founded in 1985, this...
Xage Security, a vendor of zero trust access and protection, announced on Wednesday the promotion of cofounder Susanto... The post Xage Security appoints Susanto Irwan as president and CTO to lead...
GitGuardian's State of Secrets Sprawl report for 2025 reveals the alarming scale of secrets exposure in modern software environments. Driving this is the rapid growth of non-human identities...
In the last 12 months, Barracuda Managed XDR’s automated threat response (ATR) for firewalls prevented thousands of potentially serious attacks against customers.
Another day, another data breach claim involving a high-profile company!
Check out our top podcast episode picks from the past year.
The U.S. Office of the Comptroller of the Currency told Congress that a breach of its email systems reported in February involved "highly sensitive information" in the accounts of high-ranking officials.
Oracle finally confirmed in email notifications sent to customers that a hacker stole and leaked credentials that were stolen from what it described as "two obsolete servers." [...]
Microsoft's April 2025 Patch Tuesday updates are strangely creating an empty "inetpub" folder in the root of the C:\ drive, even on systems that do not have Internet Information Services (IIS)...
WK Kellogg breach exposed employee data after attackers exploited flaws in Cleo software
ASEC Blog publishes Ransom & Dark Web Issues Week 2, April 2025 DragonForce’s Acquisition of RansomHub: A New Paradigm in the Ransomware Ecosystem Analysis of a Major Security Breach in a South...
This report provides statistics, trends, and case information on the distribution quantity, distribution methods, and disguise techniques of Infostealer collected and analyzed during March 2025....
This report provides statistics on the number of new ransomware samples, number of targeted systems, and targeted companies collected in March 2025, as well as major Korean and international...
For ordinary laptop and smartphone users, Wi-Fi is not ideal - but it’s sometimes near-inescapable.
2025-04-07 • The Record • Daryna Antoniuk Open article on Malpedia
2025-04-09 • NCSC UK • ASD, BND, Bundesamt für Verfassungsschutz, Canadian Centre for Cyber Security (CCCS), FBI, NCSC UK, New Zealand National Cyber Security Centre (NZ NCSC), NSA • apk.badbazaar...
2025-04-09 • NCSC UK • ASD, BND, Bundesamt für Verfassungsschutz, Canadian Centre for Cyber Security (CCCS), FBI, NCSC UK, New Zealand National Cyber Security Centre (NZ NCSC), NSA • apk.badbazaar...
On March 23, the Israel Defense Forces (IDF) announced an operation in southern Gaza’s Tal as-Sultan neighborhood and urged civilians to evacuate using a road north to a humanitarian zone. Hours...
IT teams' time is always limited, and it doesn't help when other things get in the way. Here's seven things that waste your IT team's time.
Apple fans keen to get their hands on the Apple Watch are advised to think before they click, after hackers exploited a wave of enthusiasm around the launch with a phishing scam linked to a fake giveaway.