New QBot email attacks use PDF and WSF combo to install malware
QBot malware is now distributed in phishing campaigns utilizing PDFs and Windows Script Files (WSF) to infect Windows devices. [...]
Android malware infiltrates 60 Google Play apps with 100M installs
A new Android malware named 'Goldoson' has infiltrated the platform's official app store, Google Play, through 60 apps that collectively…
Why xIoT Devices Are Cyberattackers’ Gateway Drug for Lateral Movement
Detailing how extended IoT (xIoT) devices can be used at scale by attackers to establish persistence across networks and what…
Microsoft: Phishing attack targets accountants as Tax Day approaches
Microsoft is warning of a phishing campaign targeting accounting firms and tax preparers with remote access malware allowing initial access…
Money Ransomware Group Enters Double-Extortion Fray
Ransomware group uses API calls to spread throughout shared network resources, researchers say.
Why the US Needs Quantum-Safe Cryptography Deployed Now
Quantum computers might be a decade away, but guess how long it will take to switch systems over to post-quantum…
ChatGPT and You
Or I’m No Fool with Weaponized AI By Guy Rosefelt, Chief Product Officer, Sangfor Technologies Okay, I admit the title…
How to Secure Web Applications in a Growing Digital Attack Surface
External web applications can prove difficult to secure and are often targeted by hackers due to the range of vulnerabilities…
SD Worx shuts down UK payroll, HR services after cyberattack
Belgian HR and payroll giant SD Worx has suffered a cyberattack causing them to shut down all IT systems for…
Microsoft and Fortra crack down on malicious Cobalt Strike servers
Microsoft, Fortra, and the Health Information Sharing and Analysis Center (Health-ISAC) have announced a broad legal crackdown against servers hosting…