The China-aligned threat actor known as MirrorFace has been observed targeting a diplomatic organization in the European Union, marking the first time the hacking crew has targeted an organization in… Read More »China-Aligned MirrorFace Hackers Target EU Diplomats with World Expo 2025 Bait
Cybersecurity researchers have discovered a malicious package on the Python Package Index (PyPI) that has racked up thousands of downloads for over three years while stealthily exfiltrating developers’ Amazon Web… Read More »Malicious PyPI Package ‘Fabrice’ Found Stealing AWS Keys from Thousands of Developers
An ongoing phishing campaign is employing copyright infringement-related themes to trick victims into downloading a newer version of the Rhadamanthys information stealer since July 2024. Cybersecurity firm Check Point is… Read More »SteelFox and Rhadamanthys Malware Use Copyright Scams, Driver Exploits to Target Victims
Tactics, techniques, and procedures (TTPs) form the foundation of modern defense strategies. Unlike indicators of compromise (IOCs), TTPs are more stable, making them a reliable way to identify specific cyber… Read More »5 Most Common Malware Techniques in 2024
Cisco has released security updates to address a maximum severity security flaw impacting Ultra-Reliable Wireless Backhaul (URWB) Access Points that could permit unauthenticated, remote attackers to run commands with elevated… Read More »Cisco Releases Patch for Critical URWB Vulnerability in Industrial Wireless Systems
The Canadian government on Wednesday ordered ByteDance-owned TikTok to dissolve its operations in the country, citing national security risks, but stopped short of instituting a ban on the popular video-sharing… Read More »Canada Orders TikTok to Shut Down Canadian Operations Over Security Concerns
An ongoing threat campaign dubbed VEILDrive has been observed taking advantage of legitimate services from Microsoft, including Teams, SharePoint, Quick Assist, and OneDrive, as part of its modus operandi. “Leveraging… Read More »VEILDrive Attack Exploits Microsoft Services to Evade Detection and Distribute Malware
Cybersecurity researchers are warning that a command-and-control (C&C) framework called Winos is being distributed within gaming-related applications like installation tools, speed boosters, and optimization utilities. “Winos 4.0 is an advanced… Read More »New Winos 4.0 Malware Infects Gamers Through Malicious Game Optimization Apps
Budget season is upon us, and everyone in your organization is vying for their slice of the pie. Every year, every department has a pet project that they present as… Read More »9 Steps to Get CTEM on Your 2025 Budgetary Radar
INTERPOL on Tuesday said it took down more than 22,000 malicious servers linked to various cyber threats as part of a global operation. Dubbed Operation Synergia II, the coordinated effort… Read More »INTERPOL Disrupts Over 22,000 Malicious Servers in Global Crackdown on Cybercrime