Cyber Attack
Microsoft Warns IRS Phishing Hits 29,000 Users With ScreenConnect Malware
Microsoft is warning that attackers are using the U.S. tax season to push phishing emails and malware at scale, with...
Category: Cyber Attack
Cyber Attack
Trivy Supply Chain Hack Spreads Infostealer, Worm and Kubernetes Wiper
Security teams are dealing with a much bigger Trivy incident than a simple tool compromise. Researchers say the attack that...
Cyber Attack
Hackers Exploit Critical Quest KACE Flaw to Hijack Unpatched Systems
Threat actors are suspected of exploiting a maximum severity vulnerability in Quest KACE Systems Management Appliance, or SMA, according to...
Cyber Attack
Trivy Supply Chain Attack Triggers Self Spreading CanisterWorm Across npm
A follow on wave of malicious npm packages has turned a recent Trivy supply chain compromise into something more alarming:...
Cyber Attack
Trivy GitHub Actions Breach Hijacks 75 Tags to Steal CI/CD Secrets
Trivy GitHub Actions breach hijacked tags to steal CI/CD secrets; teams should rotate credentials now and pin actions to full...
Artificial Intelligence
AI-Powered Cyber Attacks Expose Critical Limits of Legacy Behavioral Analytics
Artificial intelligence is making cyberattacks faster, cheaper, and harder to spot. In a new analysis, Keeper Security says attackers are...
Cyber Attack
DoJ Disrupts Record 31.4 Tbps IoT Botnets Behind Global DDoS Attacks
DoJ and international partners dismantled massive IoT Botnets behind record 31.4 Tbps DDoS attacks, disrupting C2 networks that infected 3M...
Cyber Attack
54 EDR Killers Abuse 34 Signed Drivers to Disable Security
A new analysis from ESET shows how ransomware crews and other attackers are still finding smart ways to turn trusted...
Cyber Attack
Android Banking Malware Perseus Takes Full Phone Control & Steals Banking Secrets – Millions at Risk
Security researchers at ThreatFabric disclosed a new Android banking malware family called Perseus. The malware is active in the wild....
Cyber Attack
DarkSword iOS Zero-Day Chain Uses 3 Zero-Days and 6 CVEs for Full Device Takeover
Researchers have uncovered a powerful iOS exploit kit that can hijack iPhones and siphon private data. Google Threat Intelligence Group,...