The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Russian-speaking users have been targeted as part of a new campaign distributing a commodity trojan called DCRat (aka DarkCrystal RAT) by means of a technique …
As many as 25 websites linked to the Kurdish minority have been compromised as part of a watering hole attack designed to harvest sensitive information for ove…
A suspected advanced persistent threat (APT) originating from China targeted a government organization in Taiwan, and possibly other countries in the Asia-Paci…
An Iranian advanced persistent threat (APT) threat actor likely affiliated with the Ministry of Intelligence and Security (MOIS) is now acting as an initial ac…
Ivanti has revealed that a critical security flaw impacting Cloud Service Appliance (CSA) has come under active exploitation in the wild.The new vulnerability,…
After a hectic schedule for about a week, Transport for London is seemingly getting over…Transport for London Cyberattack: Employee Passwords Reset; Teen Suspe…
A trio of threat activity clusters linked to China has been observed compromising more government organizations in Southeast Asia as part of a renewed state-sp…
The threat actor tracked as Mustang Panda has refined its malware arsenal to include new tools in order to facilitate data exfiltration and the deployment of n…
Ransomware has long been a severe threat to organizations and admins alike. Recently, cybersecurity researchers discovered a new variant called Cicada3301 , wh…
A leaked pitch deck exposed the sneaky plans of Cox Media Group to listen to…Cox Media Group To Listen To Users Devices For Ad Targeting on Latest Hacking News…
A major player in the global oil industry, Halliburton, endured a severe cyberattack that caused…Oil Giant Halliburton Partly Went Offline Following Cyberattac…
Cybersecurity researchers have uncovered a novel malware campaign that leverages Google Sheets as a command-and-control (C2) mechanism.The activity, detected b…
Cybersecurity researchers have uncovered a novel malware campaign that leverages Google Sheets as a command-and-control (C2) mechanism.The activity, detected b…
Cybersecurity researchers have disclosed a new campaign that potentially targets users in the Middle East through malware that disguises itself as Palo Alto Ne…
U.S. cybersecurity and intelligence agencies have called out an Iranian hacking group for breaching multiple organizations across the country and coordinating …
The threat actors behind a recently observed Qilin ransomware attack have stolen credentials stored in Google Chrome browsers on a small set of compromised end…
As many as 15,000 applications using Amazon Web Services' (AWS) Application Load Balancer (ALB) for authentication are potentially susceptible to a configurati…
As many as 15,000 applications using Amazon Web Services' (AWS) Application Load Balancer (ALB) for authentication are potentially susceptible to a configurati…
The popular flight-tracking tool FlightAware has alerted users about a data breach that has been…FlightAware Confirmed Data Breach Happened Due To Configuratio…
curl security update
A large-scale extortion campaign has compromised various organizations by taking advantage of publicly accessible environment variable files (.env) that contai…
A large-scale extortion campaign has compromised various organizations by taking advantage of publicly accessible environment variable files (.env) that contai…
A cybercrime group with links to the RansomHub ransomware has been observed using a new tool designed to terminate endpoint detection and response (EDR) softwa…
A newly discovered attack vector in GitHub Actions artifacts dubbed ArtiPACKED could be exploited to take over repositories and gain access to organizations' c…