Advertising on TikTok is the obvious choice for any company trying to reach a young market, and especially so if it happens to be a travel company, with 44% of… Read More »TikTok Pixel Privacy Nightmare: A New Case Study
Threat actors have been found leveraging a new technique that abuses extended attributes for macOS files to smuggle a new malware called RustyAttr. The Singaporean cybersecurity company has attributed the… Read More »New RustyAttr Malware Targets macOS Through Extended Attribute Abuse
A newly patched security flaw impacting Windows NT LAN Manager (NTLM) was exploited as a zero-day by a suspected Russia-linked actor as part of cyber attacks targeting Ukraine. The vulnerability… Read More »Russian Hackers Exploit New NTLM Flaw to Deploy RAT Malware via Phishing Emails
A threat actor affiliated with Hamas has expanded its malicious cyber operations beyond espionage to carry out disruptive attacks that exclusively target Israeli entities. The activity, linked to a group… Read More »Hamas-Affiliated WIRTE Employs SameCoin Wiper in Disruptive Attacks Against Israel
Romanian cybersecurity company Bitdefender has released a free decryptor to help victims recover data encrypted using the ShrinkLocker ransomware. The decryptor is the result of a comprehensive analysis of ShrinkLocker’s… Read More »Free Decryptor Released for BitLocker-Based ShrinkLocker Ransomware Victims
The rise of SaaS and cloud-based work environments has fundamentally altered the cyber risk landscape. With more than 90% of organizational network traffic flowing through browsers and web applications, companies… Read More »Comprehensive Guide to Building a Strong Browser Security Program
A security analysis of the OvrC cloud platform has uncovered 10 vulnerabilities that could be chained to allow potential attackers to execute code remotely on connected devices. “Attackers successfully exploiting… Read More »OvrC Platform Vulnerabilities Expose IoT Devices to Remote Attacks and Code Execution
The Iranian threat actor known as TA455 has been observed taking a leaf out of a North Korean hacking group’s playbook to orchestrate its own version of the Dream Job… Read More »Iranian Hackers Use “Dream Job” Lures to Deploy SnailResin Malware in Aerospace Attacks
Microsoft on Tuesday revealed that two security flaws impacting Windows NT LAN Manager (NTLM) and Task Scheduler have come under active exploitation in the wild. The security vulnerabilities are among… Read More »Microsoft Fixes 90 New Flaws, Including Actively Exploited NTLM and Task Scheduler Bugs
Cybersecurity researchers are calling attention to a new sophisticated tool called GoIssue that can be used to send phishing messages at scale targeting GitHub users. The program, first marketed by… Read More »New Phishing Tool GoIssue Targets GitHub Developers in Bulk Email Campaigns