Play ransomware attacks target Exchange servers with a new exploit that bypasses Microsoft’s ProxyNotShell mitigations.Play ransomware operators target Exchange servers...
IT giant Cisco is warning of threat actors exploiting many old vulnerabilities in attacks in the wild.Cisco has updated multiple...
The FBI warns that threat actors are using search engine advertisements to promote websites distributing ransomware or stealing login credentials...
VirusTotal has published a cheat sheet to help researchers create queries leading to more specific results from the malware intelligence...
Two U.S. citizens were arrested for allegedly conspiring with Russian hackers to hack the John F. Kennedy International Airport (JFK)...
The Glupteba malware botnet has sprung back into action, infecting devices worldwide after its operation was disrupted by Google almost...
The Raspberry Robin malware is now trying its hand at some trickery by dropping a fake payload to confuse researchers...
Okta, a leading provider of authentication services and Identity and Access Management (IAM) solutions, says that its private GitHub repositories were...
Sports betting company DraftKings revealed last week that more than 67,000 customers had their personal information exposed following a credential attack in...
Threat actors have published a malicious Python package on PyPI, named 'SentinelOne,' that pretends to be the legitimate SDK client...
An Android banking malware named 'Godfather' has been targeting users in 16 countries, attempting to steal account credentials for over...
Apple has fixed a vulnerability attackers could leverage to deploy malware on vulnerable macOS devices via untrusted applications capable of...
Play ransomware threat actors are using a new exploit chain that bypasses ProxyNotShell URL rewrite mitigations to gain remote code...
Microsoft warned today that it will permanently turn off Exchange Online basic authentication starting early January 2023 to improve security....
The PyPi python package repository is being bombarded by a wave of information-stealing malware hiding inside malicious packages uploaded to...
A massive advertising fraud campaign using Google Ads and 'popunders' on adult sites is estimated to have generated millions of...
Google announced on Friday that it's adding end-to-end encryption (E2EE) to Gmail on the web, allowing enrolled Google Workspace users...
The Play ransomware gang has claimed responsibility for a cyber attack on H-Hotels (h-hotels.com) that has resulted in communication outages...
A compromised Ukrainian Ministry of Defense email account was found sending phishing emails and instant messages to users of the...
Argishti Khudaverdyan, the former owner of a T-Mobile retail store, was sentenced to 10 years in prison for a $25...
Restaurant customer management platform SevenRooms has confirmed it suffered a data breach after a threat actor began selling stolen data on...
To evade detection by security software, malware developers and threat actors increasingly use compromised code-signing certificates to sign their malware....
This blog entry discusses the technical details of how we exploited CVE-2022-22583 using a different method. We also tackle the...
We look into some of the implementations that cybercriminals use to bypass the Windows Antimalware Scan Interface (AMSI) and how...
