Europol on Monday announced the arrest of the suspected administrator of XSS.is (formerly DaMaGeLaB), a notorious Russian-speaking cybercrime platform. The arrest, which took place in Kyiv, Ukraine, on July 222,…
Der mutmaßliche Betreiber einer großen Plattform für Cyberkriminalität wurde festgenommen. Skrypnykov Dmytro – shutterstock.com Der mutmaßliche Betreiber einer großen russischsprachigen Plattform für Cyberkriminalität ist in der Ukraine festgenommen worden. Das…
All of Singapore’s top companies have recently suffered cyberattacks through third-party breaches, despite achieving high cybersecurity ratings. According to a SecurityScorecard report, 91% of Singapore’s top 100 companies (by market…
Cybersecurity researchers have uncovered a new stealthy backdoor concealed within the “mu-plugins” directory in WordPress sites to grant threat actors persistent access and allow them to perform arbitrary actions. Must-use…
Aus der Zeit gefallen? Sergio Delle Vedove | shutterstock.com Schlechte Angewohnheiten abzustellen (oder bessere zu entwickeln), ist ein Prozess, der Geduld, Selbstbeherrschung und Entschlossenheit erfordert. Das gilt sowohl auf persönlicher…
Chinese threat actors have been feeding off the same Ivanti RCE vulnerabilities we’ve known about since last year, partly thanks to complications in patching. – Read More
The White House released an AI plan chock-full of cybersecurity provisions among what the White House says are 90 AI-related desired “policy actions.” Informed by 10,000 pages of comments solicited…
It’s the first known instance of malware that abuses the UIA framework and has enabled dozens of attacks against banks and crypto exchanges in Brazil. – Read More
Hackers are using stolen goods such as credit cards and loyalty points to book travel for sometimes unsuspecting clients, and remote workers, SMBs, travel brands, and others are at risk.…
An ongoing phishing campaign is using fake versions of the department’s G5 grant portal, taking advantage of political turmoil associated with the DoE’s 1,400 layoffs. – Read More
Anyone can buy or collect data, but the goal must be to realize actionable insight relevant to the organization in question. – Read More
The newly launched security startup provides an engineering relationship management platform that provides enterprises with visibility across code, infrastructure, and tools. – Read More
As crawlers and bots bog down websites in the era of AI, some researchers say that the solution for the Internet’s most vulnerable websites is already here. – Read More
The threat actor behind the exploitation of vulnerable Craft Content Management System (CMS) instances has shifted its tactics to target Magento CMS and misconfigured Docker instances. The activity has been…
Threat actors are piling on the zero-day vulnerabilities in SharePoint, including at least three Chinese nation-state cyber-espionage groups. – Read More