The North Korean threat actor known as UNC4899 is suspected to be behind a sophisticated cloud compromise campaign targeting a cryptocurrency organization in 2025 to steal millions of dollars in...
Another week in cybersecurity. Another week of "you've got to be kidding me." Attackers were busy. Defenders were busy. And somewhere in the middle, a whole lot of people had a very bad Monday...
SolarWinds security advisory (AV25-613) – Update 1
Hackers contacted employees at financial and healthcare organizations over Microsoft Teams to trick them into granting remote access through Quick Assist and deploy a new piece of malware called...
And they abused a Mandiant-developed open source tool in the attacks ShinyHunters told The Register that it has stolen data from about 100 high-profile companies in its latest Salesforce customer...
Hackers are increasingly exploiting newly disclosed vulnerabilities in third-party software to gain initial access to cloud environments, with the window for attacks shrinking from weeks to just...
The national cyber director is pitching an approach that blends cyber operations with diplomacy, law enforcement and pressure on CEOs to shore up their organizations. The post Sean Cairncross lays...
Russian state-sponsored hackers have been linked to an ongoing Signal and WhatsApp phishing campaign targeting government officials, military personnel, and journalists to gain access to sensitive...
Mid-market organizations are constantly striving to achieve security levels on a par with their enterprise peers. With heightened awareness of supply chain attacks, your customers and business...
For the latest discoveries in cyber research for the week of 9th March, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES AkzoNobel, a Netherlands-based global paint...
An attack on the company’s AWS platform may have exposed customers' names and home addresses Exclusive ELECQ, maker of smart electric vehicle (EV) chargers, is warning customers that their...
Two Google Chrome extensions have turned malicious after what appears to be a case of ownership transfer, offering attackers a way to push malware to downstream customers, inject arbitrary code,...
Mozilla security advisory (AV26-207)
The U.S. House Committee on Energy and Commerce has advanced eight bills to the U.S. House of Representatives,... The post House panel moves pipeline cybersecurity and energy threat analysis bills...
Microsoft Edge security advisory (AV26-206)
[Control Systems] Moxa security advisory (AV26-205)
Ericsson Inc., the U.S. subsidiary of Swedish networking and telecommunications giant Ericsson, says attackers have stolen data belonging to an undisclosed number of employees and customers after...
[Control systems] CISA ICS security advisories (AV26–204)
Dell security advisory (AV26-203)
Ubuntu security advisory (AV26-201)
Red Hat security advisory (AV26-202)
IBM security advisory (AV26-200)
President Trump's Cyber Strategy for America signals a shift toward risk-based security and cooperation across emerging technologies. While centered on U.S. interests, the strategy provides a...
The U.S. published ‘President Trump’s Cyber Strategy for America,’ outlining the administration’s priorities to ensure the country remains... The post US National Cyber Strategy calls for...
Cybereason GSOC has observed a notable increase in infections involving REMCOS RAT, often delivered through vulnerable or potentially unwanted applications (PUAs).
Indonesia will ban social media for children under age 16 starting at the end of March, the country’s Communication and Digital Affairs Minister Meutya Hafid said Friday. In a video statement,...
Today we’re disclosing request smuggling vulnerabilities when our open source Pingora service is deployed as an ingress proxy and how we’ve fixed them in Pingora 0.8.0.
Cloudflare’s new Web and API Vulnerability Scanner helps teams proactively find logic flaws. By using AI to build API call graphs, we identify vulnerabilities that standard defensive tools miss.
New U.S laws designed for online child safety are pulling millions of adult Americans into mandatory age-verification gates that often use AI technology, and causing major headaches for social...
Three major tech companies — Microsoft, Google and Amazon — have said Anthropic’s AI tools will remain available on their platforms for work that does not involve the Pentagon after the company...