Zoom has released important security patches addressing several vulnerabilities that affect its applications, including four high-severity flaws. These Zoom vulnerabilities was discovered by the...
Agents are already capable of creating and sending phishing emails to targets.
Microsoft is warning that an ongoing phishing campaign impersonating Booking.com is using ClickFix social engineering attacks to infect hospitality workers with various malware, including...
VC firms invested 35% more in cybersecurity startups in North America and Europe in Q4 2024 than a year previously
Cary, North Carolina, 13th March 2025, CyberNewsWire
The UK’s information commissioner has warned that all digital firms using children’s data must follow the GDPR
Credential theft surged 3× in a year—but AI-powered malware? More hype than reality. The Red Report 2025 by Picus Labs reveals attackers still rely on proven tactics like stealth & automation to...
We analyze the activities of the Head Mare hacktivist group, which has been attacking Russian companies jointly with Twelve.
Cascading Style Sheets (CSS) are ever present in modern day web browsing, however its far from their own use. This blog will detail the ways adversaries use CSS in email campaigns for evasion and tracking.
We identified a campaign spreading thousands of sca crypto investment platforms through websites and mobile apps, possibly through a standardized toolkit. The post Investigating Scam Crypto...
Don't let work invade your personal life. Separate your passwords with two Bitwarden accounts for better security and peace of mind.
Employees at the Cybersecurity and Infrastructure Security Agency tell WIRED they’re struggling to protect the US while the administration dismisses their colleagues and poisons their partnerships.
The Hague, the Netherlands, 13th March 2025, CyberNewsWire
In the cybersecurity arms race, you have access to the same weapons as the bad guys. Just how well-armed are you now?
Tenable Research examines DeepSeek R1 and its capability to develop malware, such as a keylogger and ransomware. We found it provides a useful starting point, but requires additional prompting and...
Industrial cybersecurity company Dragos released a case study detailing how the Littleton Electric Light and Water Departments (LELWD)... The post Dragos details LELWD’s fight against VOLTZITE...
U.S. agencies have released a collaborative cybersecurity advisory detailing the tactics, techniques, and procedures (TTPs), indicators of compromise... The post US exposes Medusa ransomware...
Bellingcat is looking for wildlife and environment related pitches grounded in open source methods and tools. What is open source? Open-source methods can include using satellite data to expose...
Discover how the ClickFix social engineering attack exploits human psychology to bypass security. Learn how hackers use this tactic and how to protect against it.
Cupertino, California – March 13, 2025 – Cyble, a leading global cybersecurity and threat intelligence provider, is proud to announce that it has been honored as a Silver Winner in four...
A huge chunk of online traffic now comes from bots, both good and bad — but AI is boosting the latter. From DDoS attacks to scraping, there’s a renewed barrage of threats that companies have to...
The Australian Securities and Investments Commission (ASIC) has taken legal action against FIIG Securities Limited (FIIG) over alleged systemic and prolonged cybersecurity failures. The...
Dragos reveals Volt Typhoon hackers infiltrated a US electric utility for 300 days, collecting sensitive data. Learn how this cyberattack threatens infrastructure.
This blog is ran by two brothers who like to hunt for bugs together. They had each found several criticals on the this target but wanted an Exceptional Vulnerability - what I'd call a super...
Cross site scripting (XSS) is a super common web vulnerability. If a user can include HTML into the page, then you can commonly add your own JavaScript to perform malicious actions. Sometimes,...
Socket researchers said the malware-ridden packages were collectively downloaded over 330 times. GitHub removed all of the malicious packages Wednesday. The post Lazarus Group deceives developers...
Socket researchers said the malware-ridden packages were collectively downloaded over 330 times. GitHub removed all of the malicious packages Wednesday. The post Lazarus Group deceives developers...
A vulnerability in the Cosmos SDK group module led to a chain panic. It's well known that an error or panic in the either the begin blocker or the end blocker in Cosmos results in a chain halt....
The Stop CSAM Act would compel companies to curb online child sexual abuse material, but critics argue it would also weaken encrypted services for all users. The post Legislative push for child...
The Stop CSAM Act would compel companies to curb online child sexual abuse material, but critics argue it would also weaken encrypted services for all users. The post Legislative push for child...