Frequently asked questions about “BadSuccessor,” a zero-day privilege escalation vulnerability in Active Directory domains with at least one Windows Server 2025 domain...
Google says it will no longer trust root CA certificates signed by Chunghwa Telecom and Netlock in the Chrome Root Store due to a pattern of compliance failures and failure to make improvements. [...]
Iranian Robbinhood ransomware operator pleads guilty to major US city attacks, crippling services in Baltimore, Greenville, and more since 2019.
Semperis will host an immersive ransomware simulation focused on water utilities during Infosecurity Europe 2025
The BarracudaONE AI-powered cybersecurity platform maximizes threat protection and cyber resilience by unifying layered security defenses and providing deep, intelligent threat detection and response.
Microsoft and CrowdStrike announced today that they've partnered to connect the aliases used for specific threat groups without actually using a single naming standard. [...]
2025-05-27 • DomainTools • DomainTools • win.venom Open article on Malpedia
Among all ages, Minecraft still rules the gaming scene as a preferred choice. The game provides a broad…
International research for Barracuda shows that 65% of organizations believe they have too many security tools, and over half (53%) say their tools can’t be integrated.
2025-05-27 • Fortinet • Xiaopeng Zhang • win.formbook Open article on Malpedia
2025-05-29 • Elastic • Jia Yu Chan Open article on Malpedia
2025-05-30 • Intrinsec • David Sardinha Open article on Malpedia
A report on the dark web marketplace Russian Market showed Acreed has emerged as the leading infostealer
Cybersecurity researchers have warned of a new spear-phishing campaign that uses a legitimate remote access tool called Netbird to target Chief Financial Officers (CFOs) and financial executives...
2025-05-22 • Elastic • Daniel Stepanic • win.rhadamanthys Open article on Malpedia
The "Russian Market" cybercrime marketplace has emerged as one of the most popular platforms for buying and selling credentials stolen by information stealer malware. [...]
Checkmarx uncovers cross-ecosystem attack: fake Python and NPM packages plant backdoor on Windows and Linux, enabling data theft plus remote control.
New research from Forescout Technologies disclosed that in 2024, there was a 71 percent increase in threat actors... The post Hacktivists, state-sponsored groups step up cyberattacks targeting...
Dutch, US and Finnish investigators have taken cybercrime service AVCheck offline
Each Monday, the Tenable Exposure Management Academy provides the practical, real-world guidance you need to shift from vulnerability management to exposure management. In this post, Tenable’s...
Do you have online accounts you haven't used in years? If so, a bit of digital spring cleaning might be in order.
Microsoft has released an out-of-band update to address a known issue causing some Windows 11 systems to enter recovery and fail to start while trying to install the KB5058405 May 2025 security...
2025-05-31 • The Insider • Christo Grozev, Michael Weiss, Roman Dobrokhotov Open article on Malpedia
Qualcomm has released security patches for three zero-day vulnerabilities in the Adreno Graphics Processing Unit (GPU) driver that impact dozens of chipsets and are actively exploited in targeted...
This is a weekly threat intelligence report review from RST Cloud. This week, we analysed 51 threat intelligence reports and have summarized the findings along with the relevant metadata that was...
The issue explores trust as a vital facet in today’s business environment.
The MELSERVO-J5 Servo Series now supports EtherNet/IP and EtherCAT, enabling seamless network switching without extra hardware.
JINX-0132 targets exposed Nomad servers lacking ACL protections by submitting malicious jobs through the API, effectively gaining remote code execution. These jobs download and run the XMRig miner...
As more businesses face pressure to do more with fewer resources, automation platforms like Flowable are becoming central…
AhnLab SEcurity intelligence Center (ASEC) has confirmed that the ViperSoftX attacker is continuously distributing malware to users in Korea. ViperSoftX is a type of malware that resides in...