Microsoft spotted an upgraded variant of the Zerobot botnet that spreads by exploiting Apache vulnerabilities.Microsoft Threat Intelligence Center (MSTIC) researchers...
A critical vulnerability in the Ghost CMS newsletter subscription system could allow external users to create newsletters or modify existing...
Leading sports betting company BetMGM disclosed a data breach after a threat actor stole personal information belonging to an undisclosed...
DuckDuckGo apps and extensions are now blocking Google Sign-in pop-ups on all its apps and browser extensions, removing what it...
LastPass revealed today that attackers stole customer vault data after breaching its cloud storage earlier this year using information stolen...
Microsoft spotted an upgraded variant of the Zerobot botnet that spreads by exploiting Apache vulnerabilities.Microsoft Threat Intelligence Center (MSTIC) researchers...
The Vice Society ransomware group has adopted new custom ransomware, with a strong encryption scheme, in recent intrusions.SentinelOne researchers discovered...
North Korea-linked threat actors have stolen an estimated $1.2 billion worth of cryptocurrency and other virtual assets in the past...
Brave Software developers have created a new privacy-centric database query system called FrodoPIR that retrieves data from servers without disclosing the...
The Vice Society ransomware operation has switched to using a custom ransomware encrypt that implements a strong, hybrid encryption scheme...
Comcast Xfinity customers report their accounts being hacked in widespread attacks that bypass two-factor authentication. These compromised accounts are then...
The notorious FIN7 hacking group uses an automated attack system that exploits Microsoft Exchange and SQL injection vulnerabilities to breach...
A massive advertising fraud campaign using Google Ads and 'popunders' on adult sites is estimated to have generated millions of...
Okta, a leading provider of authentication services and Identity and Access Management (IAM) solutions, says that its private GitHub repositories were...
An Android banking malware named 'Godfather' has been targeting users in 16 countries, attempting to steal account credentials for over...
The FBI warns that threat actors are using search engine advertisements to promote websites distributing ransomware or stealing login credentials...
The Raspberry Robin malware is now trying its hand at some trickery by dropping a fake payload to confuse researchers...
The PyPi python package repository is being bombarded by a wave of information-stealing malware hiding inside malicious packages uploaded to...
Play ransomware threat actors are using a new exploit chain that bypasses ProxyNotShell URL rewrite mitigations to gain remote code...
Corsair has confirmed that a bug in the firmware of K100 keyboards, and not malware, is behind previously entered text...
Restaurant customer management platform SevenRooms has confirmed it suffered a data breach after a threat actor began selling stolen data on...
Microsoft warned today that it will permanently turn off Exchange Online basic authentication starting early January 2023 to improve security....
Threat actors have published a malicious Python package on PyPI, named 'SentinelOne,' that pretends to be the legitimate SDK client...
A compromised Ukrainian Ministry of Defense email account was found sending phishing emails and instant messages to users of the...
