Cybersecurity researchers have uncovered new stealer malware that’s designed to specifically target Apple macOS systems. Dubbed Banshee Stealer, it’s offered for sale in the cybercrime underground for a steep price… Read More »New Banshee Stealer Targets 100+ Browser Extensions on Apple macOS Systems
A large percentage of Google’s own Pixel devices shipped globally since September 2017 included dormant software that could be used to stage nefarious attacks and deliver various kinds of malware.… Read More »Google Pixel Devices Shipped with Vulnerable App, Leaving Millions at Risk
SolarWinds has released patches to address a critical security vulnerability in its Web Help Desk software that could be exploited to execute arbitrary code on susceptible instances. The flaw, tracked… Read More »SolarWinds Releases Patch for Critical Flaw in Web Help Desk Software
Russian and Belarusian non-profit organizations, Russian independent media, and international non-governmental organizations active in Eastern Europe have become the target of two separate spear-phishing campaigns orchestrated by threat actors whose… Read More »Russian-Linked Hackers Target Eastern European NGOs and Media
A cybercrime group with links to the RansomHub ransomware has been observed using a new tool designed to terminate endpoint detection and response (EDR) software on compromised hosts, joining the… Read More »RansomHub Group Deploys New EDR-Killing Tool in Latest Cyber Attacks
The Emergence of Identity Threat Detection and Response Identity Threat Detection and Response (ITDR) has emerged as a critical component to effectively detect and respond to identity-based attacks. Threat actors… Read More »Identity Threat Detection and Response Solution Guide
A previously unknown threat actor has been attributed to a spate of attacks targeting Azerbaijan and Israel with an aim to steal sensitive data. The attack campaign, detected by NSFOCUS… Read More »New Cyber Threat Targets Azerbaijan and Israel Diplomats, Stealing Sensitive Data
A newly discovered attack vector in GitHub Actions artifacts dubbed ArtiPACKED could be exploited to take over repositories and gain access to organizations’ cloud environments. “A combination of misconfigurations and… Read More »GitHub Vulnerability ‘ArtiPACKED’ Exposes Repositories to Potential Takeover
Cybersecurity researchers have discovered a new variant of the Gafgyt botnet that’s targeting machines with weak SSH passwords to ultimately mine cryptocurrency on compromised instances using their GPU computational power.… Read More »New Gafgyt Botnet Variant Targets Weak SSH Passwords for GPU Crypto Mining
An ongoing social engineering campaign with alleged links to the Black Basta ransomware group has been linked to “multiple intrusion attempts” with the goal of conducting credential theft and deploying… Read More »Black Basta-Linked Attackers Target Users with SystemBC Malware