Social Engineering
ClickFix Malware Bypasses CAPTCHAs for Widespread Attacks
A clever social engineering scheme called ClickFix has been spreading rapidly for the past year, thanks to its ability to trick users and e…
Latest
Cybersecurity News · Page 5
Breaking threats, breaches and vulnerabilities — explained.
ATM security
Hackers Use Raspberry Pi Over 4G to Target ATM Networks, Deploy Rootkit
A financially driven hacking group, tracked as UNC2891, is deploying a sophisticated attack on ATM networks, using a Raspberry Pi connected…
Cryptocurrency
North Korean Hackers Target Crypto Firms With Elaborate Job Scams
A North Korean hacking group, tracked as UNC4899, reportedly stole millions in cryptocurrency by infiltrating two organizations. Their meth…
Phishing
Phishers Hide Behind Proofpoint, Intermedia to Snag Microsoft 365 Credentials
A sophisticated phishing campaign is using legitimate link wrapping services from Proofpoint and Intermedia to cloak malicious URLs and ste…
Cyber Espionage
Moscow Embassies Targeted in Sophisticated ISP-Level Attack Linked to Secret Blizzard
A Russian hacking group, identified as Secret Blizzard, is suspected of launching a complex cyber espionage operation targeting foreign emb…
Endpoint Security
Silk Typhoon's Cyber Arsenal Revealed Through Patent Filings
Companies tied to Silk Typhoon, the Chinese state-sponsored hacking group also known as Hafnium, appear to be patenting tools designed for…
Firmware Security
Dahua Camera Vulnerabilities Allowed Hackers to Seize Control
Security researchers recently uncovered serious vulnerabilities in Dahua smart camera firmware, now patched, that could have allowed remote…
Vulnerability
Apple Fixes Safari Flaw Previously Targeted in Chrome Zero-Day Attacks
Apple rolled out security updates across its software lineup this week, addressing a vulnerability also exploited as a zero-day in Google's…
Encryption
FunkSec Ransomware Victims Get a Break Decryptor Released as Group Fades
Victims of the FunkSec ransomware can now breathe a sigh of relief. With the cybercriminal group seemingly gone silent, a free decryptor ha…
Network Security
Firewall Alert Sophos and SonicWall Rush to Fix Critical Security Holes
Administrators need to act fast. Sophos and SonicWall are scrambling to patch serious vulnerabilities in their firewall and Secure Mobile A…
Malware
CastleLoader Malware Spreads Through Bogus GitHub Repos, Hits Hundreds
A sophisticated new malware loader dubbed CastleLoader is making waves in the cybersecurity world. Researchers have uncovered its use in ca…
Virtualization
Fire Ant Hacking Group Targets VMware ESXi and vCenter in Espionage Campaign
A threat actor known as Fire Ant is actively exploiting vulnerabilities in VMware's ESXi hypervisor and vCenter management platform, securi…