The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Ransomware affiliates associated with the Qilin ransomware-as-a-service (RaaS) scheme earn anywhere between 80% to 85% of each ransom payment, according to new…
A new ransomware group known asRA Grouphas become the latest threat actor to leverage the leaked Babuk ransomware source code to spawn its own locker variant.T…
A new ransomware-as-service (RaaS) operation called MichaelKors has become the latest file-encrypting malware to target Linux andVMware ESXi systemsas of April…
Poorly managed Microsoft SQL (MS SQL) servers are the target of a new campaign that's designed to propagate a category of malware calledCLR SqlShellthat ultima…
In a threatening move, the notorious ransomware group Conti has demanded a $20 million ransom…Conti Ransomware Group Poses $20 Million Threat to Costa Rican Go…
The password management service 1Password assured users of no security breach after accidentally sending “Secret…1Password Confirms No Security Breach After “P…
U.S. cybersecurity and intelligence agencies have warned of attacks carried out by a threat actor known as theBl00dy Ransomware Gangthat attempt to exploit vul…
Multiple threat actors have capitalized on the leak of Babuk (aka Babak or Babyk) ransomware code in September 2021 to build as many as nine different ransomwa…
A nascent botnet calledAndoryuhas been found toexploita now-patched critical security flaw in the Ruckus Wireless Admin panel to break into vulnerable devices.…
The U.S. government on Tuesday announced the court-authorized disruption of a global network compromised by an advanced malware strain known asSnakewielded by …
Cybersecurity researchers have shed light on a new ransomware strain called CACTUS that has been found to leverage known flaws in VPN appliances to obtain init…
Are you concerned about ransomware attacks? You're not alone. In recent years, these attacks have become increasingly common and can cause significant damage t…
An ongoing phishing campaign with invoice-themed lures is being used to distribute the SmokeLoader malware in the form of a polyglot file, according to the Com…
Users of Advanced Custom Fields plugin for WordPress are being urged to update version 6.1.6 following the discovery of a security flaw.The issue, assigned the…
The North Korean state-sponsored threat actor known asKimsukyhas been discovered using a new reconnaissance tool calledReconSharkas part of an ongoing global c…
IT and cybersecurity teams are so inundated with security notifications and alerts within their own systems, it’s difficult to monitor external malicious envir…
A Chinese state-sponsored hacking outfit has resurfaced with a new campaign targeting government, healthcare, technology, and manufacturing entities based in T…
The telecom industry has always been a tantalizing target for cybercriminals. The combination of interconnected networks, customer data, and sensitive informat…
A new ransomware binary targeting Linux systems has been attributed to the ransomware-as-a-service (RaaS) RTM group.
A little-known Russian-speaking cyber-espionage group has been linked to a new politically-motivated surveillance campaign targeting high-ranking government of…
The threat actors behindRTM Lockerhave developed a ransomware strain that's capable of targeting Linux machines, marking the group's first foray into the open …
Microsoft has confirmed that theactive exploitation of PaperCut serversis linked to attacks that are designed to deliver Cl0p and LockBit ransomware families.T…
The Chinese nation-state group dubbedAlloy Taurusis using a Linux variant of a backdoor called PingPull as well as a new undocumented tool codenamed Sword2033.…
Threat actors are employing a previously undocumented "defense evasion tool" dubbed AuKill that's designed to disable endpoint detection and response (EDR) sof…