Cloud Security
PoisonSeed Campaign Drains Crypto Wallets Via CRM Breach
A sophisticated new campaign, dubbed PoisonSeed, is targeting cryptocurrency users by exploiting vulnerabilities in customer relationship m…
Latest
Cybersecurity News · Page 14
Breaking threats, breaches and vulnerabilities — explained.
Attack Surface Management
Are Your Security Metrics Just for Show A Veteran CISO Weighs In
For over a quarter century, I've helped Fortune 500s navigate the complex world of cybersecurity, building security programs, ensuring comp…
Malware
Fast Flux Technique Shields Cybercriminals From Detection, Warns CISA and FBI
A coalition of cybersecurity agencies, including those from the US, Australia, Canada, and New Zealand, is raising alarms about "fast flux…
Malware
PyPI Hit by Wave of Malicious Packages, 39,000 Downloads and Counting
A new report reveals that cybercriminals have infiltrated the Python Package Index (PyPI) with malicious libraries. These packages, downloa…
Malware
North Korean Hackers Target Developers with Fake Packages on npm
A North Korean hacking group known for the "Contagious Interview" campaign is expanding its reach, now targeting software developers using…
Malware
Microsoft Acknowledges Hacker EncryptHub for Windows Vulnerability Disclosures
Microsoft has credited the individual known as EncryptHub, believed to be behind over 600 data breaches, with identifying and reporting two…
Critical Infrastructure
Ukraine Under Digital Siege New Malware WRECKSTEEL Targets State Agencies
Ukrainian government agencies and critical infrastructure have been hit by a wave of cyberattacks designed to siphon off sensitive informat…
Threat Intelligence
Coquettte Malware Campaign Unmasked by OPSEC Blunder on Bulletproof Hosts
A rookie cybercriminal has inadvertently revealed details of the Coquettte malware campaigns by relying on the Russian bulletproof hosting…
Malware
Ivanti VPN Users Under Attack Hackers Exploit Critical Bug with New Malware
A critical vulnerability in Ivanti Connect Secure, a popular VPN solution, is being actively exploited by attackers. Security researchers h…
Vulnerability
Stolen SpotBugs Token Triggered Widespread GitHub Supply Chain Attack
A GitHub supply chain attack that initially impacted Coinbase and later spread to users of the "tj-actions/changed-files" Action has been t…
Data Privacy
Google Fixes Quick Share Flaw That Allowed Stealth File Transfers
A security flaw in Google's Quick Share for Windows allowed attackers to potentially flood a target's system or surreptitiously send them f…
Enterprise Security
AI's Enterprise Ascent Security Concerns Threaten Widespread Adoption
Artificial intelligence is poised to transform business, offering innovations from smarter fraud prevention and personalized customer exper…