The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The Computer Emergency Response Team of Ukraine (CERT-UA) this weekdisclosedthat users of the Delta situational awareness program received phishing emails from…
A Chinese-speaking advanced persistent threat (APT) actor codenamedMirrorFacehas been attributed to a spear-phishing campaign targeting Japanese political esta…
NuGet, PyPi, and npm ecosystems are the target of a new campaign that has resulted in over 144,000 packages being published by unknown threat actors."The packa…
Phishing campaigns involving theQakbot malwareare using Scalable Vector Graphics (SVG) images embedded in HTML email attachments.The new distribution method wa…
Dropbox has revealed details of a phishing attack to which it fell victim. In the attack, a threat actor was able to steal code from the company after gatherin…
Phishing website URL removed from package spec file and replaced with new official site link. References: - https://bugs.mageia.org/show_bug.cgi?id=30679
removes phishing site as URL, and updates to new. explicitly BuildRequires gcc
The Russian state-sponsored hacking collective known as APT29 has been attributed to a new phishing campaign that takes advantage of legitimate cloud services …
The advanced persistent threat (APT) group known as Transparent Tribe has been attributed to a new ongoing phishing campaign targeting students at various educ…
With identity theft up by 42% from last year, 7 million new phishing webpages created…Why Automatic Attack Surface Management is Vital in This Modern Age on La…
Details of a new nation-state sponsored phishing campaign have been uncovered setting its sights on European governmental entities in what's seen as an attempt…
Details of a new nation-state sponsored phishing campaign has been uncovered setting its sights on European governmental entities in what's seen as an attempt …
With the COVID-19 pandemic continuing to impact, and perhaps permanently changing, how we work, cybercriminals again leveraged the distraction in new waves of …
Entities in the aviation, aerospace, transportation, manufacturing, and defense industries have been targeted by a persistent threat group since at least 2017 …
Researchers have found active phishing campaigns exploiting a zero-day vulnerability in the Zimbra email platform.…Researchers Found Zimbra Zero-Day XSS Vulner…
A threat actor, likely Chinese in origin, is actively attempting to exploit a zero-day vulnerability in the Zimbra open-source email platform as part of spear-…
Cybersecurity researchers have turned the spotlight on a new wave of offensive cyberattacks targeting Palestinian activists and entities starting around Octobe…
By now, everyone is familiar with terms like “phishing,” “spam,” and “malware.” Most people also…5 Reasons Why Email Is the Top Attack Vector on Latest Hacking…
Threat actors are actively incorporating public cloud services from Amazon and Microsoft into their malicious campaigns to deliver commodity remote access troj…
A short-lived phishing campaign has been observed taking advantage of a novel exploit that bypassed a patch put in place by Microsoft to fix a remote code exec…
A new malware dropper has surfaced online targeting users in recent phishing campaigns. Identified as…New Hancitor Malware Loader Delivers Malware Via Clipboar…
Threat actors are exploiting improperly-secured Google Cloud Platform (GCP) instances to download cryptocurrency mining software to the compromised systems as …
Microsoft has recently shared details about a novel phishing strategy in the wild. Dubbed 'HTML…HTML Smuggling Attack In The Wild Targeting The Banking Sector …
Chinese cyber espionage group APT41 has been linked to seemingly disparate malware campaigns, according to fresh research that has mapped together additional p…