Your blog category
The U.S. Environmental Protection Agency (EPA) said it’s forming a new “Water Sector Cybersecurity Task Force” to devise methods to counter the threats faced by the water sector in the… Read More »U.S. EPA Forms Task Force to Protect Water Systems from Cyberattacks
Application programming interfaces (APIs) are the connective tissue behind digital modernization, helping applications and databases exchange data more effectively. The State of API Security in 2024 Report from Imperva, a Thales company,… Read More »APIs Drive the Majority of Internet Traffic and Cybercriminals are Taking Advantage
Large language models (LLMs) powering artificial intelligence (AI) tools today could be exploited to develop self-augmenting malware capable of bypassing YARA rules. “Generative AI can be used to evade string-based… Read More »From Deepfakes to Malware: AI’s Expanding Role in Cyber Attacks
A new variant of a data wiping malware called AcidRain has been detected in the wild that’s specifically designed for targeting Linux x86 devices. The malware, dubbed AcidPour, is compiled… Read More »Suspected Russian Data-Wiping ‘AcidPour’ Malware Targeting Linux x86 Devices
Threat actors are leveraging digital document publishing (DDP) sites hosted on platforms like FlipSnack, Issuu, Marq, Publuu, RelayTo, and Simplebooklet for carrying out phishing, credential harvesting, and session token theft,… Read More »Hackers Exploiting Popular Document Publishing Sites for Phishing Attacks
In an era where digital transformation drives business across sectors, cybersecurity has transcended its traditional operational role to become a cornerstone of corporate strategy and risk management. This evolution demands… Read More »Crafting and Communicating Your Cybersecurity Strategy for Board Buy-In
A 31-year-old Moldovan national has been sentenced to 42 months in prison in the U.S. for operating an illicit marketplace called E-Root Marketplace that offered for sale hundreds of thousands… Read More »E-Root Marketplace Admin Sentenced to 42 Months for Selling 350K Stolen Credentials
A new phishing campaign is targeting U.S. organizations with the intent to deploy a remote access trojan called NetSupport RAT. Israeli cybersecurity company Perception Point is tracking the activity under… Read More »New Phishing Attack Uses Clever Microsoft Office Trick to Deploy NetSupport RAT
A new elaborate attack campaign has been observed employing PowerShell and VBScript malware to infect Windows systems and harvest sensitive information. Cybersecurity company Securonix, which dubbed the campaign DEEP#GOSU, said… Read More »New DEEP#GOSU Malware Campaign Targets Windows Users with Advanced Tactics
Cybersecurity researchers have discovered a new malware campaign that leverages bogus Google Sites pages and HTML smuggling to distribute a commercial malware called AZORult in order to facilitate information theft. “It uses… Read More »Hackers Using Sneaky HTML Smuggling to Deliver Malware via Fake Google Sites