As is their wont, cybercriminals waste no time launching attacks that aim to cash in on the frenzy around the latest big thing – plus, what else to know before using DeepSeek
Lumma Stealer, nefarious info-stealing malware, resurfaces in the cyber threat arena. Defenders recently uncovered an advanced adversary campaign distributing Lumma Stealer through GitHub...
The Indian tech giant temporarily suspended some of its IT services, which have now been restored
Microsoft says it improved the contrast of text rendered in all Chromium-based web browsers on Windows, making it more readable on some displays. [...]
Apple's trackers have been misused to track some without their consent. Here's how to check if an AirTag is tracking you, whether you use an iPhone or Android phone. Plus, what to do next if you find one.
Broadcom has released security updates to patch five security flaws impacting VMware Aria Operations and Aria Operations for Logs, warning customers that attackers could exploit them to gain...
2025-01-29 • Socket • Kirill Boychenko, Peter van der Zee • js.beavertail, py.invisibleferret Open article on Malpedia
2025-01-30 • RevEng.AI • RevEng.AI • win.lumma Open article on Malpedia
2025-01-30 • Department of Justice • U.S. Attorney's Office Southern District of Texas Open article on Malpedia
2025-01-30 • CISA • CISA Open article on Malpedia
2025-01-30 • Bleeping Computer • Lawrence Abrams Open article on Malpedia
Community Health Center (CHC), a Connecticut-based nonprofit healthcare provider, has confirmed that hackers accessed the sensitive data of more than a million patients. In a filing with Maine’s...
Tata Technologies Ltd. had to suspend some of its IT services following a ransomware attack that impacted the company network. [...]
2025-01-23 • Netskope • Leandro Froes • win.lumma Open article on Malpedia
2025-01-24 • Intrinsec • CTI Intrinsec Open article on Malpedia
2025-01-27 • Youtube (MalwareAnalysisForHedgehogs) • Karsten Hahn • win.lumma Open article on Malpedia
2025-01-30 • Intrinsec • CTI Intrinsec Open article on Malpedia
The U.K. government is recruiting for the role of National Cyber Security Centre (NCSC) deputy director for private... The post UK government seeks NCSC deputy director to strengthen cyber...
Cyber reports exposed major security flaws in DeepSeek’s R1 LLM
The International Society of Automation (ISA) announced this week release of ANSI/ISA-62443-2-1-2024, an update to industrial automation and... The post ISA releases updated...
Insurance giant Globe Life finished the investigation into the data breach it suffered last June and says that the incident may have impacted an additional 850,000 customers. [...]
Mizuno USA, a subsidiary of Mizuno Corporation, one of the world's largest sporting goods manufacturers, confirmed in data breach notification letters that unknown attackers stole files from its...
How cyberattackers exploit group policies, what risks attacks like these pose, and what measures can be taken to protect against such threats.
A global law enforcement operation has taken down infrastructure used by Cracked.io and Nulled.io, which provide cybercriminal tools and services
Check out the Cloud Security Alliance’s recommendations for rolling out AI apps securely. Meanwhile, a Deloitte survey found GenAI initiatives by cyber teams deliver highest ROI to their orgs....
Community Health Center (CHC), a leading Connecticut healthcare provider, is notifying over 1 million patients that their personal and health information was stolen in an October breach. [...]
Community Health Center (CHC), a leading Connecticut healthcare provider, is notifying over 1 million patients that their personal and health information was stolen in an October breach. [...]
Law enforcement authorities in the United States and the Netherlands have seized 39 domains and associated servers used by the HeartSender phishing gang operating out of Pakistan. [...]
DeepSeek, a Chinese AI startup, exposed sensitive data by leaving a database open. Wiz Research found chat logs, keys, and backend details accessible.
The U.S. Agency for International Development (USAID) was hit by a cryptojacking attack. A global administrator account in a test environment within their Azure subscription was compromised as a...