Kali Linux has released version 2024.4, the fourth and final version of 2024, and it is now available with fourteen new tools, numerous improvements, and deprecates some features. [...]
With the evolution of modern software development, CI/CD pipeline governance has emerged as a critical factor in maintaining both agility and compliance. As we enter the age of artificial...
CISA and EPA have published guidance for operators of water and wastewater systems to protect against cyber-attacks
Edge computing is one of the fastest-growing enterprise technologies. But what exactly is the edge? How does it work? And where is it located? Learn all this and more, including how low-latency...
Arctic Wolf has acquired Cylance, BlackBerry’s beleaguered cybersecurity business, for $160 million — a significant write-down from the $1.4 billion BlackBerry paid to acquire the company in 2018....
Cybersecurity researchers are calling attention to a new kind of investment scam that leverages a combination of social media malvertising, company-branded posts, and artificial intelligence (AI)...
A 20-year-old Tucson man was arrested for horrific CSAM and cyberstalking linked to the dangerous online extremist group 764.
Rhode Island's RIBridges system has suffered a major data breach, potentially exposing personal information, with Deloitte confirming the presence of malicious software
2024-12-11 • JPCERT/CC • Tomoya Kamei • win.spygrace Open article on Malpedia
CISA has warned U.S. federal agencies to secure their systems against ongoing attacks targeting a high-severity Windows kernel vulnerability. [...]
2024-12-13 • Medium Louis.o.schuermann • Louis Schürmann • js.magecart Open article on Malpedia
2024-12-15 • Malwarebytes • Jérôme Segura • js.fakeupdates Open article on Malpedia
Cybersecurity researchers have discovered a new PHP-based backdoor called Glutton that has been put to use in cyber attacks targeting China, the United States, Cambodia, Pakistan, and South...
Detection engineering rabbit holes — parsing ASN.1 packets in KQLTL;DR: Detection engineering is sometimes hard. Your efforts may seem to have failed, but perseverance can pay off. Or you can...
A large-scale malvertising campaign distributed the Lumma Stealer info-stealing malware through fake CAPTCHA verification pages that prompt users to run PowerShell commands to verify they are not...
2024-12-12 • Kaspersky • Georgy Kucherin & Marc Rivero López • win.careto Open article on Malpedia
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Environmental Protection Agency (EPA) have jointly released a... The post New CISA and EPA guidelines aim to shield water...
2024-12-13 • Securite360.net • Muffin • win.quickheal Open article on Malpedia
2024-12-14 • Axel's IT Security Research • Axel Mahr • win.xenorat Open article on Malpedia
Wiz Threat Research investigates misconfigurations in Spring Boot Actuator’s endpoints that can leak environment variables, passwords, and API keys, and even lead to remote code execution.
Large-scale campaign identified by Guardio Lans and Infoblox, exploiting malvertising and fake captchas to distribute Lumma infostealer for massive theft
In this blog, we will explore the extent to which the legislative and technical evolutions of the RuNet have impacted the Russian-speaking..
This is an in-depth LogRhythm vs SolarWinds SIEM tool comparison, covering their key features, pricing, and more. Use this guide to find your best fit.
Find out the key security risks of firmware security: Identify threats, and learn best practices and protection methods…
Healthcare software as a service (SaaS) company Phreesia is notifying over 910,000 people that their personal and health data was exposed in a May breach of its subsidiary ConnectOnCall. [...]
In early October, Bellingcat’s Tech team organised its second ever in-person hackathon, this time in Naryn, Kyrgyzstan with the theme “Visualising Nature’s Stories”. This student-only hackathon,...
The Serbian authorities have been using advanced mobile forensics products made by Israeli firm Cellebrite to extract data from mobile devices illegally
The Security Service of Ukraine (SBU or SSU) has exposed a novel espionage campaign suspected to be orchestrated by Russia's Federal Security Service (FSB) that involves recruiting Ukrainian...
Cybercriminals are targeting YouTube creators with sophisticated phishing attacks disguised as brand collaborations. Learn how to identify these scams, protect your data, and safeguard your online presence
Rhode Island is warning that its RIBridges system, managed by Deloitte, suffered a data breach exposing residents' personal information after the Brain Cipher ransomware gang hacked its systems. [...]