2025-03-11 • Trend Micro • Cj Arsley Mateo, Darrel Tristan Virtusio, Jacob Santos, Junestherry Dela Cruz, Paul John Bardon • win.lumma, win.smartloader Open article on Malpedia
Microsoft has fixed seven zero-days this Patch Tuesday, including one not currently being actively exploited
Traditional Data Loss Prevention (DLP) solutions weren't built for today's browser-driven workplace. Now sensitive data moves moves through SaaS apps, AI tools, and personal accounts, bypassing...
Cybersecurity firm Lookout found several samples of a North Korean spyware it calls KoSpy. © 2024 TechCrunch. All rights reserved. For personal use only.
Chinese hackers are deploying custom backdoors on Juniper Networks Junos OS MX routers that have reached end-of-life (EoL) and no longer receive security updates. [...]
Over the last month, Barracuda threat analysts identified several notable email-based threats targeting organizations around the world including extortion attempts impersonating Clop ransomware,...
2025-03-10 • Check Point Research • Check Point Research • win.remcos Open article on Malpedia
The UK’s cybersecurity sector added thousands of workers and over £1bn in revenue in 2024
Apple on Tuesday released a security update to address a zero-day flaw that it said has been exploited in "extremely sophisticated" attacks. The vulnerability has been assigned the CVE identifier...
2025-03-11 • Kaspersky Labs • AMR • win.dcrat Open article on Malpedia
Everfox, a global provider of insider threat technology, announced its collaboration with the Intelligence and Homeland Security Division... The post Everfox partners with GDIT to enhance insider...
Claroty, a cyber-physical systems (CPS) protection company, announced on Tuesday the appointment of Amir Preminger as chief technology... The post Claroty appoints Amir Preminger as CTO to drive...
DeNexus, vendor of end-to-end cyber risk management for operational technology (OT) in industrial enterprises and critical infrastructures with... The post DeNexus enhances DeRISK platform to...
2025-03-11 • ThreatMon • Aziz Kaplan, ThreatMon, ThreatMon Malware Research Team • apk.ermac Open article on Malpedia
2025-03-11 • Idan Malihi • Idan Malihi, Yaniv Azran Open article on Malpedia
Kaspersky provides incident response statistics for 2024, as well real incidents analysis. The report also shares IR trends and cybersecurity recommendations.
Microsoft says that some USB printers will start printing random text after installing Windows updates released since late January 2025. [...]
A ransomware gang has leaked internal Tata Technologies data, a month after the company confirmed a ransomware attack. © 2024 TechCrunch. All rights reserved. For personal use only.
Lazarus Group targets developers with malicious npm packages, stealing credentials, crypto, and installing backdoor. Stay alert to protect your projects.
Microsoft today issued more than 50 security updates for its various Windows operating systems, including fixes for a whopping six zero-day vulnerabilities that are already seeing active exploitation.
More than three-quarters of the vulnerabilities covered in the vendor’s monthly Patch Tuesday update are high-severity flaws. The post Microsoft patches 57 vulnerabilities, including 6 zero-days...
More than three-quarters of the vulnerabilities covered in the vendor’s monthly Patch Tuesday update are high-severity flaws. The post Microsoft patches 57 vulnerabilities, including 6 zero-days...
Almost every company nowadays depends on cloud computing since it is a necessary tool in the world of…
Microsoft has released its monthly security update for March of 2025 which includes 57 vulnerabilities affecting a range of products, including 6 that Microsoft marked as “critical”.
Apple released emergency software patches Tuesday that address a newly identified zero-day vulnerability in the company’s WebKit web browser engine. Tracked as CVE-2025-24201, an attacker can...
Apple released emergency software patches Tuesday that address a newly identified zero-day vulnerability in the company’s WebKit web browser engine. Tracked as CVE-2025-24201, an attacker can...
Microsoft’s Patch Tuesday March 2025 update includes fixes for six actively exploited zero-days and an additional 10 vulnerabilities at higher risk of attack. In all, the Patch Tuesday March 2025...
X-Twitter had multiple waves of outages yesterday. Signal’s president warns against agentic AI. A new lawsuit alleges DOGE bypassed critical security safeguards. Is the Five Eyes Alliance fraying?...
The threat actor known as Blind Eagle has been linked to a series of ongoing campaigns targeting Colombian institutions and government entities since November 2024. "The monitored campaigns...
X’s wave of outages resembled a DDoS attack and Dark Storm Team, a prolific threat group specializing in such attacks, claimed responsibility. The post X suffered a DDoS attack. Its CEO and...