Cyber threats evolve—has your defense strategy kept up? A new free guide available here explains why Continuous Threat Exposure Management (CTEM) is the smart approach for proactive cybersecurity. This concise… Read More »CISO’s Expert Guide To CTEM And Why It Matters
Cybersecurity researchers have shed light on a new Golang-based backdoor that uses Telegram as a mechanism for command-and-control (C2) communications. Netskope Threat Labs, which detailed the functions of the malware,… Read More »New Golang-Based Backdoor Uses Telegram Bot API for Evasive C2 Operations
Welcome to this week’s Cybersecurity News Recap. Discover how cyber attackers are using clever tricks like fake codes and sneaky emails to gain access to sensitive data. We cover everything… Read More »⚡ THN Weekly Recap: Google Secrets Stolen, Windows Hack, New Crypto Scams and More
Google is working on a new security feature for Android that blocks device owners from changing sensitive settings when a phone call is in progress. Specifically, the in-call anti-scammer protections… Read More »Android’s New Feature Blocks Fraudsters from Sideloading Apps During Calls
Cybersecurity researchers have disclosed a new type of name confusion attack called whoAMI that allows anyone who publishes an Amazon Machine Image (AMI) with a specific name to gain code… Read More »New “whoAMI” Attack Exploits AWS AMI Name Confusion for Remote Code Execution
The North Korean threat actor known as the Lazarus Group has been linked to a previously undocumented JavaScript implant named Marstech1 as part of limited targeted attacks against developers. The… Read More »Lazarus Group Deploys Marstech1 JavaScript Implant in Targeted Developer Attacks
The threat actors behind the RansomHub ransomware-as-a-service (RaaS) scheme have been observed leveraging now-patched security flaws in Microsoft Active Directory and the Netlogon protocol to escalate privileges and gain unauthorized… Read More »RansomHub Becomes 2024’s Top Ransomware Group, Hitting 600+ Organizations Globally
Microsoft is calling attention to an emerging threat cluster it calls Storm-2372 that has been attributed to a new set of cyber attacks aimed at a variety of sectors since… Read More »Microsoft: Russian-Linked Hackers Using ‘Device Code Phishing’ to Hijack Accounts
Social engineering is advancing fast, at the speed of generative AI. This is offering bad actors multiple new tools and techniques for researching, scoping, and exploiting organizations. In a recent… Read More »AI-Powered Social Engineering: Ancillary Tools and Techniques
Threat actors who were behind the exploitation of a zero-day vulnerability in BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) products in December 2024 likely also exploited a previously… Read More »PostgreSQL Vulnerability Exploited Alongside BeyondTrust Zero-Day in Targeted Attacks