Japan's National Police Agency (NPA) and National Center of Incident Readiness and Strategy for Cybersecurity (NCSC) accused a China-linked threat actor named MirrorFace of orchestrating a...
BayMark Health Services, North America's largest provider of substance use disorder (SUD) treatment and recovery services, is notifying an undisclosed number of patients that attackers stole...
A group of hackers with unknown ties has claimed responsibility for breaching a Russian government agency, Rosreestr, which is responsible for managing property and land records.
A school district said that PowerSchool paid a ransom to prevent the attackers releasing data it accessed of students and teachers in North America
Explore top cybersecurity risks in crypto, including phishing, ransomware, and MitM attacks. Learn practical tips to safeguard your…
Threat actors are attempting to take advantage of a recently disclosed security flaw impacting GFI KerioControl firewalls that, if successfully exploited, could allow malicious actors to achieve...
Torrance, United States / California, 9th January 2025, CyberNewsWire
ASEC Blog publishes “Android Malware & Security Issue 2st Week of January, 2025”
Overview AhnLab SEcurity intelligence Center (ASEC) monitors phishing email threats with the automatic sample analysis system (RAPIT) and honeypot. This post will cover the cases of distribution...
Fazal Merchant joins our leadership team as we look to what lies ahead.
Detect and mitigate CVE-2025-0282, a critical RCE vulnerability in Ivanti Connect Secure and CVE-2025-0283, exploited as 0day vulnerabilities in the wild. Organizations should patch urgently.
Research by: Antonis Terefos (@Tera0017) Key Points Introduction As of 2024, approximately 100.4 million people worldwide use macOS, accounting for 15.1% of the global PC market. Of the millions...
Trustwave SpiderLabs first blogged about Magecart back in 2019; fast forward five years and it is still here going strong.
A new version of the Banshee info-stealing malware for macOS has been evading detection over the past two months by adopting string encryption from Apple's XProtect. [...]
Winston-Salem, one of North Carolina's largest cities, says a late December cyberattack is still causing trouble for some digital services.
Microsoft has fixed a known issue causing macOS applications to freeze when opening or saving files in OneDrive. [...]
2025-01-02 • Cyfirma • cyfirma • win.noneuclid_rat Open article on Malpedia
2025-01-07 • SANS ISC • Yee Ching Tok Open article on Malpedia
Read our comprehensive review of IPVanish VPN. Discover its features, pricing, and more to determine if it meets your online security and privacy needs.
SUMMARY Cybersecurity researchers at watchTowr have identified over 4,000 live hacker backdoors, exploiting abandoned infrastructure and expired domains.…
Mandiant says a Chinese cyberespionage group has been exploiting the critical-rated vulnerability since at least mid-December. © 2024 TechCrunch. All rights reserved. For personal use only.
Privacy firm Proton suffered a massive worldwide outage today, taking down most services, with Proton Mail and Calendar users still unable to connect to their accounts. [...]
The European General Court on Wednesday fined the European Commission, the primary executive arm of the European Union responsible for proposing and enforcing laws for member states, for violating...
The National Police Agency (NPA) and the Cabinet Cyber Security Center in Japan have linked a cyber-espionage campaign targeting the country to the Chinese state-backed "MirrorFace" hacking group. [...]
2024-12-23 • FBI • DC3, FBI, NPA Open article on Malpedia
2025-01-06 • North Korean Internet • Nick Open article on Malpedia
Chinese state-backed hackers, tracked as Silk Typhoon, have been linked to the U.S. Office of Foreign Assets Control (OFAC) hack in early December. [...]
A court has ruled the EU Commission infringed an individual’s right to the protection of their personal data by transferring their details to the US
2024 was a year of increased cybercrime, vulnerabilities, threat groups, and hacktivism. Security budgets increased, as did losses from cybercrime incidents. Here's a look at a few of the most...
Hackers exploiting the critical Ivanti Connect Secure zero-day vulnerability disclosed yesterday installed on compromised VPN appliances new malware called 'Dryhook' and 'Phasejam' that is not...