Cybersecurity researchers have discovered new infrastructure linked to a financially motivated threat actor known as FIN7. The two clusters of…
Security
A newly patched security flaw in Microsoft Windows was exploited as a zero-day by Lazarus Group, a prolific state-sponsored actor…
Malicious actors are using a cloud attack tool named Xeon Sender to conduct SMS phishing and spam campaigns on a…
Business email compromise (BEC) has once again proven to be a costly issue, with a company losing $60 million in…
The Committee on Foreign Investment in the United States (CFIUS), a U.S. government agency responsible for reviewing foreign investments in…
OpenAI on Friday said it banned a set of accounts linked to what it said was an Iranian covert influence…
Cybersecurity researchers have shed light on a sophisticated information stealer campaign that impersonates legitimate brands to distribute malware like DanaBot…
Researchers have uncovered a sophisticated phishing scam targeting participants of the World Agricultural Cycling Competition (WACC). The campaign cleverly mimics…
A 27-year-old Russian national has been sentenced to over three years in prison for peddling financial information, login credentials, and…
A large-scale extortion campaign has compromised various organizations by taking advantage of publicly accessible environment variable files (.env) that contain…
Between the Black Hat and DEF CON conferences and Patch Tuesday, it’s been a very busy week for security vulnerabilities.…
Oracle’s NetSuite, a popular Enterprise Resource Planning (ERP) platform, has a feature that allows businesses to deploy an external-facing store…
Security experts recently uncovered a vulnerability, CVE-2024-38213, that allows threat actors to bypass Windows’ Mark-of-the-Web (MotW) protections through copy-and-paste operations.…
As cyber threats become increasingly sophisticated, the need for effective cyber hygiene has never been more critical. CEOs are at…
The investigation into the University of Winnipeg data breach has now concluded, and the University has updated its notification to…
Two U.S. lawmakers have called on the Biden administration to investigate TP-Link Technology Co. Ltd., a major Chinese manufacturer of…
AutoCanada Inc., a leading North American multi-location automobile dealership group, reported that it had identified a significant cybersecurity incident affecting…
A large percentage of Google’s own Pixel devices shipped globally since September 2017 included dormant software that could be used…
In a joint effort to address the growing concerns surrounding election-day cybersecurity, the Federal Bureau of Investigation (FBI) and the…
Cybersecurity researchers have uncovered new stealer malware that’s designed to specifically target Apple macOS systems. Dubbed Banshee Stealer, it’s offered…