Meow ransomware emerged from Conti’s leaked code and operated from late 2022 to early 2023, with a decryptor released in March 2023 that led to the operation’s cessation. The group has remained active into 2024, shifting from encryption to data exfiltration an…
Snake Keylogger is a .NET Trojan Stealer that blends credential theft, keylogging, and data exfiltration with reconnaissance and persistence capabilities. It uses multiple C2 channels (FTP, SMTP, Telegram) to discreetly transmit stolen data, increasing operati…
One South Korean victim gave up $3 million to cybercriminals, thanks to convincing law-enforcement impersonation scams that combine both psychology and technology….
PRESS RELEASEBIRMINGHAM, Mich., March 11, 2024/PRNewswire/ — IT-Harvest, the only provider of comprehensive cybersecurity industry data, is thrilled to announce a significant milestone in its journey. IT-Harvest’s industry Dashboard, the company’s flagship platform, has now ingested over…
What happens to security leaders that don’t communicate security well enough? "Ask SolarWinds."…
ConnectWise ScreenConnect contained two chained vulnerabilities (CVE-2024-1709 and CVE-2024-1708) that allow an attacker to bypass authentication, create an administrative account, upload a malicious extension, and achieve remote code execution. Active exploit…
Tuta Mail has announced TutaCrypt, a new post-quantum encryption protocol to secure communications from powerful and anticipated decryption attacks. […]…
Microsoft announced today that it would end support for Windows 10 21H2 in June when the Enterprise and Education editions reach the end of service. […]…
A spate of recent typosquatting attacks shows the scourge of this type of attack is still very much with us, even after decades of cyber defender experience with it….
With the final switchover to the latest version of the credit card standard, here’s what all security professionals can draw from the changes….
Okta denies that its company data was leaked after a threat actor shared files allegedly stolen during an October 2023 cyberattack on a hacker forum. […]…
Rushing to onboard artificial intelligence, companies and their developers are downloading a variety of pretrained machine learning models, but verifying security and integrity remains a challenge….
Security researchers have created a knowledge base repository for attack and defense techniques based on improperly setting up Microsoft’s Configuration Manager, which could allow an attacker to execute payloads or become a domain controller. […]…
Roku has disclosed a data breach impacting over 15,000 customers after hacked accounts were used to make fraudulent purchases of hardware and streaming subscriptions. […]…
Working with countries and organizations in Africa, Asia, and the Middle East, the Tazama project aims to add affordable security and trust to the financial infrastructure….