Cybersecurity researchers are calling attention to a new botnet malware called HTTPBot that has been used to primarily single out the gaming industry, as well as technology companies and educational… Read More »New HTTPBot Botnet Launches 200+ Precision DDoS Attacks on Gaming and Tech Sectors
Data is the lifeblood of productivity, and protecting sensitive data is more critical than ever. With cyber threats evolving rapidly and data privacy regulations tightening, organizations must stay vigilant and… Read More »Top 10 Best Practices for Effective Data Protection
Cybersecurity researchers have shed light on a new malware campaign that makes use of a PowerShell-based shellcode loader to deploy a remote access trojan called Remcos RAT. “Threat actors delivered… Read More »Fileless Remcos RAT Delivered via LNK Files and MSHTA in PowerShell-Based Attacks
Researchers at ETH Zürich have discovered yet another security flaw that they say impacts all modern Intel CPUs and causes them to leak sensitive data from memory, showing that the… Read More »Researchers Expose New Intel CPU Flaws Enabling Memory Leaks and Spectre v2 Attacks
Modern apps move fast—faster than most security teams can keep up. As businesses rush to build in the cloud, security often lags behind. Teams scan code in isolation, react late… Read More »[Webinar] From Code to Cloud to SOC: Learn a Smarter Way to Defend Modern Applications
Austrian privacy non-profit noyb (none of your business) has sent Meta’s Irish headquarters a cease-and-desist letter, threatening the company with a class action lawsuit if it proceeds with its plans… Read More »Meta to Train AI on E.U. User Data From May 27 Without Consent; Noyb Threatens Lawsuit
Cryptocurrency exchange Coinbase has disclosed that unknown cyber actors broke into its systems and stole account data for a small subset of its customers. “Criminals targeted our customer support agents… Read More »Coinbase Agents Bribed, Data of ~1% Users Leaked; $20M Extortion Attempt Fails
Imagine this: Your organization completed its annual penetration test in January, earning high marks for security compliance. In February, your development team deployed a routine software update. By April, attackers… Read More »Pen Testing for Compliance Only? It’s Time to Change Your Approach
Cybersecurity researchers have discovered a malicious package named “os-info-checker-es6” that disguises itself as an operating system information utility to stealthily drop a next-stage payload onto compromised systems. “This campaign employs… Read More »Malicious npm Package Leverages Unicode Steganography, Google Calendar as C2 Dropper
A Russia-linked threat actor has been attributed to a cyber espionage operation targeting webmail servers such as Roundcube, Horde, MDaemon, and Zimbra via cross-site scripting (XSS) vulnerabilities, including a then-zero-day… Read More »Russia-Linked APT28 Exploited MDaemon Zero-Day to Hack Government Webmail Servers