Our research shows how attackers use platforms like YouTube to spread fake installers via trusted hosting services, employing encryption to […]
How Cracks and Installers Bring Malware to Your Device Read Post »
CrowdStrike is warning that a phishing campaign is impersonating the cybersecurity company in fake job offer emails to trick targets
Fake CrowdStrike job offer emails target devs with crypto miners Read Post »
Our blog entry discusses a fake PoC exploit for LDAPNightmare (CVE-2024-49113) that is being used to distribute information-stealing malware. Read
Information Stealer Masquerades as LDAPNightmare (CVE-2024-49113) PoC Exploit Read Post »
Trend Micro leads the way by mapping its Container Security detection capabilities to the MITRE ATT&CK framework for Containers and
Ashley & Danielle’s Ultimate Recap Read More
2024 Perspective: The Ultimate re:Invent Recap Read Post »
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) said today that the Treasury Department breach disclosed last week did not
CISA says recent government hack limited to US Treasury Read Post »
In 2024, cyber threats targeting SaaS surged, with 7,000 password attacks blocked per second (just in Entra ID)—a 75% increase from last year—and phishing attempts up by 58%, causing $3.5 billion in losses (source: Microsoft Digital Defense Report 2024). SaaS attacks are increasing, with hackers often evading detection through legitimate usage patterns. The cyber threat arena saw standout
The Indian government has published a draft version of the Digital Personal Data Protection (DPDP) Rules for public consultation.
“Data fiduciaries must provide clear and accessible information about how personal data is processed, enabling informed consent,” India’s Press Information Bureau (PIB) said in a statement released Sunday.
“Citizens are empowered with rights to demand data erasure,
India Proposes Digital Data Rules with Tough Penalties and Cybersecurity Requirements Read Post »
Cybersecurity researchers have revealed several malicious packages on the npm registry that have been found impersonating the Nomic Foundation’s Hardhat tool in order to steal sensitive data from developer systems.
“By exploiting trust in open source plugins, attackers have infiltrated these platforms through malicious npm packages, exfiltrating critical data such as private keys, mnemonics,
Cybercriminals Target Ethereum Developers with Fake Hardhat npm Packages Read Post »
An Android information stealing malware named FireScam has been found masquerading as a premium version of the Telegram messaging app to steal data and maintain persistent remote control over compromised devices.
“Disguised as a fake ‘Telegram Premium’ app, it is distributed through a GitHub.io-hosted phishing site that impersonates RuStore – a popular app store in the Russian Federation,”
FireScam Android Malware Poses as Telegram Premium to Steal Data and Control Devices Read Post »