No menu items!
No menu items!
More

    News

    PoisonSeed Exploits CRM Accounts to Launch Cryptocurrency Seed Phrase Poisoning Attacks

    Apr 07, 2025Ravie LakshmananCloud Security / Cryptocurrency A malicious campaign dubbed PoisonSeed is leveraging compromised credentials associated with customer relationship management (CRM) tools and...

    Microsoft Credits EncryptHub, Hacker Behind 618+ Breaches, for Disclosing Windows Flaws

    A likely lone wolf actor behind the EncryptHub persona was acknowledged by Microsoft for discovering and reporting two security flaws in Windows last...

    North Korean Hackers Deploy BeaverTail Malware via 11 Malicious npm Packages

    Apr 05, 2025Ravie LakshmananMalware / Supply Chain Attack The North Korean threat actors behind the ongoing Contagious Interview campaign are spreading their tentacles on...

    Malicious Python Packages on PyPI Downloaded 39,000+ Times, Steal Sensitive Data

    Apr 05, 2025Ravie LakshmananMalware / Supply Chain Attack Cybersecurity researchers have uncovered malicious libraries in the Python Package Index (PyPI) repository that are designed...

    SpotBugs Access Token Theft Identified as Root Cause of GitHub Supply Chain Attack

    Apr 04, 2025Ravie LakshmananVulnerability / Open Source, The cascading supply chain attack that initially targeted Coinbase before becoming more widespread to single out users...

    OPSEC Failure Exposes Coquettte’s Malware Campaigns on Bulletproof Hosting Servers

    Apr 04, 2025Ravie LakshmananThreat Intelligence / Malware A novice cybercrime actor has been observed leveraging the services of a Russian bulletproof hosting (BPH) provider...

    Have We Reached a Distroless Tipping Point?

    There's a virtuous cycle in technology that pushes the boundaries of what's being built and how it's being used. A new technology development...

    Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE Malware

    Apr 04, 2025Ravie LakshmananMalware / Vulnerability Ivanti has disclosed details of a now-patched critical security vulnerability impacting its Connect Secure that has come under...

    Critical Flaw in Apache Parquet Allows Remote Attackers to Execute Arbitrary Code

    Apr 04, 2025Ravie LakshmananVulnerability / Cloud Security A maximum severity security vulnerability has been disclosed in Apache Parquet's Java Library that, if successfully exploited,...

    Latest articles

    spot_imgspot_img